PT-2025-41449

Name of the Vulnerable Software and Affected Versions pyLoad versions prior to 0.5.0b3.dev91 Description pyLoad is a free and open-source download manager written in Python. Versions prior to 0.5.0b3.dev91 have insufficient input validation in the web interface, specifically in the Captcha script...

pyLoad security vulnerability

pyLoad is a free and open source download manager written in Python by pyLoad Open Source. A security vulnerability exists in pyLoad versions prior to 0.5.0b3.dev91, which stems from insufficient input validation in the Captcha script endpoint and Click N Load Blueprint, and could lead to...

CVE-2025-61773: Improper Neutralization of Special Elements in Output Used by a Downstream Component

pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web interface contained insufficient input validation in both the Captcha script endpoint and the Click'N'Load CNL Blueprint. This flaw allowed untrusted user input to be processed...

CVE-2025-61773

creationtimestamp| type| source ---|---|--- 2025-10-08 23:26:16+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-cjjf-27cc-pvmv...

EUVD-2024-3149

Malicious code in bioql PyPI...

EUVD-2023-0572

Malicious code in bioql PyPI...

EUVD-2023-0366

Malicious code in bioql PyPI...

EUVD-2023-0587

Malicious code in bioql PyPI...

EUVD-2023-0416

Malicious code in bioql PyPI...

EUVD-2023-0548

Malicious code in bioql PyPI...

EUVD-2023-2971

Malicious code in bioql PyPI...

EUVD-2025-29437

Malicious code in bioql PyPI...

EUVD-2023-0485

Malicious code in bioql PyPI...

EUVD-2024-0154

Malicious code in bioql PyPI...

EUVD-2025-21406

Malicious code in bioql PyPI...

EUVD-2025-24185

Malicious code in bioql PyPI...

EUVD-2025-25486

Malicious code in bioql PyPI...

EUVD-2025-23574

Malicious code in bioql PyPI...

EUVD-2024-0155

Malicious code in bioql PyPI...

pyLoad < 0.5.0b3.dev76 Improper Access Control

pyLoad version prior to 0.5.0b3.dev76 is affected by an Improper Access Control vulnerability. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. An attacker can leverage this vulnerability to perform further attacks against the...