Remote Code Execution (RCE)

pyloadng is vulnerable to Path Traversal. The vulnerability is due to improper validation of uploaded filenames in the /json/upload endpoint, which allows an attacker to traverse directories and write arbitrary files to any location accessible to the pyLoad process...

Access Control Bypass

pyloadng is vulnerable to Access Control Bypass. The vulnerability is due to improper enforcement of access control rules for localhost-restricted functionality, which allows unauthenticated attackers to bypass security checks and perform unauthorized actions such as creating arbitrary packages...

Remote Code Execution (RCE)

pyloadng is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient restrictions on the /.pyload/scripts folder, allowing executable files to run automatically when certain actions, like completing a download, are triggered. Attackers can exploit this by downloading an...

Open Redirect

pyloadng is vulnerable to Open Redirect. The vulnerability is due to the issafeurl and getredirecturl functions within helpers.py improperly validating redirect URLs, which allows an attacker to redirect users to arbitrary domains after login...

Path Traversal

pyloadng is vulnerable to Path Traversal. The vulnerability is due to the editpackage function in jsonblueprint.py because it lacks the ability to filter some relative paths. This allows an attacker to upload a payload with ../ or ..\ as part of the packfolder name. This can lead to directory...

Insufficient Session Expiration

pyloadng is vulnerable to Insufficient Session Expiration. The vulnerability exists because a user session does not expire in another browser if an admin deletes a user which allows an attacker to recreate the deleted users and perform unauthorized tasks...

Improper Certificate Validation

pyloadng is vulnerable to Improper Certificate Validation. The vulnerability exists in httprequest.py due to improper SSL certificate validation which allows an attacker to intercept data over HTTPS connections...

Information Disclosure

pyloadng is vulnerable to Information Disclosure. The absence of the secure attribute for sensitive cookies in HTTPS sessions allows a remote attacker to gain access to cookies in plaintext over an HTTP session...