762 matches found
CVE-2023-0297
PyLoad 0.5.0 pre-auth RCE (CVE-2023-0297) via code injection in js2py exposed by the flash/addcrypted2 endpoint. Exploitation is unauthenticated and can be triggered by sending crafted requests to /flash/addcrypted2, enabling remote code execution on affected systems. Multiple connected sources c...
CVE-2023-0297
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...
CVE-2023-0297 Code Injection in pyload/pyload
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31...
pyLoad js2py Python Execution
pyLoad versions prior to 0.5.0b3.dev31 are vulnerable to Python code injection due to the pyimport functionality exposed through the js2py library. An unauthenticated attacker can issue a crafted POST request to the flash/addcrypted2 endpoint to leverage this for code execution. pyLoad by default...
GHSA-RV9X-WMW4-44QJ Pyload Insufficient Session Expiration vulnerability
Pyload 0.5.0b3.dev35 has an Insufficient Session Expiration vulnerability. A patch is available and anticipated to be part of version 0.5.0b3.dev36...
Pyload Insufficient Session Expiration vulnerability
Pyload 0.5.0b3.dev35 has an Insufficient Session Expiration vulnerability. A patch is available and anticipated to be part of version 0.5.0b3.dev36...
CVE-2023-0227
Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36...
Session fixation
Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36...
CVE-2023-0227
CVE-2023-0227 covers an Insufficient Session Expiration vulnerability in the Pyload project. Affected software is the Pyload repository (pyload/pyload) with versions prior to 0.5.0b3.dev36. The root cause is insufficient session expiration management, as documented across multiple sources, with i...
PT-2023-16096
Name of the Vulnerable Software and Affected Versions pyload versions prior to 0.5.0b3.dev36 Description The issue is related to insufficient session expiration in the pyload repository. A patch is available and is anticipated to be part of version 0.5.0b3.dev36. Recommendations For versions prio...
CVE-2023-0227
Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36...
CVE-2023-0227: Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36...
CVE-2023-0227 Insufficient Session Expiration in pyload/pyload
Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36...
CVE-2023-0227 Insufficient Session Expiration in pyload/pyload
Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36...
CVE-2023-0227 Insufficient Session Expiration in pyload/pyload
Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36...
Clickjacking
pyload-ng is vulnerable to clickjacking attacks. The vulnerability exists due to the lack of frame restrictions in init.py as it does not properly set the response header X-Frame-Options: DENY, which allows an attacker to load the website within a malicious response header...
pyload code issues and vulnerabilities
pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A code issue vulnerability exists in versions prior to pyload/pyload 0.5.0b3.dev36, which stems from insufficient session expiration...
pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...
GHSA-H8R9-467R-VJJF pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...