pyload kayıtları
pyload üreticisine ait 23 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %4,3
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %78,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-613 Insufficient Session Expiration2
- CWE-20 Improper Input Validation1
- CWE-269 Improper Privilege Management1
- CWE-284 Improper Access Control1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
23 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
68Bu hafta | CVE-2023-0297Silahlaştırılmış | Code Injection in pyload/pyloadpyload · pyload · CWE-94 | Kritik9,8 | — | %95,9 | 13 Oca 2023 |
43Planlayın | CVE-2024-21644Kavram kanıtı | pyLoad unauthenticated flask configuration leakagepyload · pyload · CWE-284 | Yüksek7,5 | — | %42,4 | 8 Oca 2024 |
39İzleyin | CVE-2023-0435İstismar yok | Excessive Attack Surface in pyload/pyloadpyload · pyload · CWE-1125 | Kritik9,8 | — | %0,7 | 22 Oca 2023 |
37İzleyin | CVE-2026-33992İstismar yok | pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltrationpyload · pyload · CWE-918 | Kritik9,3 | — | %0,5 | 27 Mar 2026 |
35İzleyin | CVE-2023-47890İstismar yok | pyLoad 0.5.0 is vulnerable to Unrestricted File Upload.pyload · pyload · CWE-22 | Yüksek8,8 | — | %1,1 | 8 Oca 2024 |
35İzleyin | CVE-2026-33511İstismar yok | pyload-ng: Authentication Bypass via Host Header Injection in ClickNLoadpyload · pyload · CWE-639 | Yüksek8,8 | — | %0,6 | 24 Mar 2026 |
35İzleyin | CVE-2026-33509İstismar yok | pyload-ng: SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configurationpyload · pyload · CWE-269 | Yüksek8,8 | — | %0,6 | 24 Mar 2026 |
35İzleyin | CVE-2026-41133İstismar yok | pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)pyload · pyload · CWE-613 | Yüksek8,8 | — | %0,5 | 21 Nis 2026 |
32İzleyin | CVE-2026-32808İstismar yok | pyLoad: Arbitrary File Deletion via Path Traversal during Encrypted 7z Password Verificationpyload · pyload · CWE-22 | Yüksek8,1 | — | %0,5 | 19 Mar 2026 |
30İzleyin | CVE-2023-0434İstismar yok | Improper Input Validation in pyload/pyloadpyload · pyload · CWE-20 | Yüksek7,5 | — | %0,8 | 21 Oca 2023 |
30İzleyin | CVE-2026-35464İstismar yok | pyLoad has an incomplete fix for CVE-2026-33509: unprotected storage_folder enables arbitrary file write to Flask session store and code executionpyload · pyload · CWE-502 | Yüksek7,5 | — | %0,6 | 7 Nis 2026 |
29İzleyin | CVE-2023-0509İstismar yok | Improper Certificate Validation in pyload/pyloadpyload · pyload · CWE-295 | Yüksek7,4 | — | %0,5 | 26 Oca 2023 |
28İzleyin | CVE-2024-21645Kavram kanıtı | pyLoad Log Injectionpyload · pyload · CWE-74 | Orta5,3 | — | %24,7 | 8 Oca 2024 |
28İzleyin | CVE-2024-32880İstismar yok | pyLoad allows upload to arbitrary folder lead to RCEpyload · pyload · CWE-434 | Yüksek7,2 | — | %1,4 | 26 Nis 2024 |
26İzleyin | CVE-2023-0227İstismar yok | Insufficient Session Expiration in pyload/pyloadpyload · pyload · CWE-613 | Orta6,5 | — | %0,7 | 11 Oca 2023 |
24İzleyin | CVE-2024-24808İstismar yok | pyLoad open redirect vulnerability due to improper validation of the is_safe_url functionpyload · pyload · CWE-601 | Orta6,1 | — | %0,5 | 6 Şub 2024 |
24İzleyin | CVE-2023-0057İstismar yok | Improper Restriction of Rendered UI Layers or Frames in pyload/pyloadpyload · pyload · CWE-1021 | Orta6,1 | — | %0,5 | 4 Oca 2023 |
24İzleyin | CVE-2024-1240İstismar yok | Open Redirection in pyload/pyloadpyload · pyload · CWE-601 | Orta6,1 | — | %0,3 | 15 Kas 2024 |
21İzleyin | CVE-2023-0488İstismar yok | Cross-site Scripting (XSS) - Stored in pyload/pyloadpyload · pyload · CWE-79 | Orta5,4 | — | %0,8 | 26 Oca 2023 |
21İzleyin | CVE-2023-0055İstismar yok | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyloadpyload · pyload · CWE-614 | Orta5,3 | — | %0,4 | 4 Oca 2023 |
21İzleyin | CVE-2026-44226İstismar yok | pyLoad: Unauthenticated traceback disclosure via global exception handler in WebUIpyload · pyload · CWE-209 | Orta5,3 | — | %0,4 | 11 May 2026 |
21İzleyin | CVE-2026-40071İstismar yok | pyLoad WebUI JSON permission mismatch lets ADD/DELETE users invoke MODIFY-only actionspyload · pyload · CWE-863 | Orta5,4 | — | %0,3 | 9 Nis 2026 |
9İzleyin | CVE-2024-47821İstismar yok | pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot APIpyload · pyload · CWE-78 | Düşük2,3 | — | %0,7 | 25 Eki 2024 |
- CVE-2023-029768Bu hafta
Code Injection in pyload/pyload
KritikCVSS 9,8SilahlaştırılmışEPSS %96pyload · pyload13 Oca 2023
- CVE-2024-2164443Planlayın
pyLoad unauthenticated flask configuration leakage
YüksekCVSS 7,5Kavram kanıtıEPSS %42pyload · pyload8 Oca 2024
- CVE-2023-043539İzleyin
Excessive Attack Surface in pyload/pyload
KritikCVSS 9,8İstismar yokEPSS %1pyload · pyload22 Oca 2023
- CVE-2026-3399237İzleyin
pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration
KritikCVSS 9,3İstismar yokEPSS %0pyload · pyload27 Mar 2026
- CVE-2023-4789035İzleyin
pyLoad 0.5.0 is vulnerable to Unrestricted File Upload.
YüksekCVSS 8,8İstismar yokEPSS %1pyload · pyload8 Oca 2024
- CVE-2026-3351135İzleyin
pyload-ng: Authentication Bypass via Host Header Injection in ClickNLoad
YüksekCVSS 8,8İstismar yokEPSS %1pyload · pyload24 Mar 2026
- CVE-2026-3350935İzleyin
pyload-ng: SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration
YüksekCVSS 8,8İstismar yokEPSS %1pyload · pyload24 Mar 2026
- CVE-2026-4113335İzleyin
pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)
YüksekCVSS 8,8İstismar yokEPSS %0pyload · pyload21 Nis 2026
- CVE-2026-3280832İzleyin
pyLoad: Arbitrary File Deletion via Path Traversal during Encrypted 7z Password Verification
YüksekCVSS 8,1İstismar yokEPSS %0pyload · pyload19 Mar 2026
- CVE-2023-043430İzleyin
Improper Input Validation in pyload/pyload
YüksekCVSS 7,5İstismar yokEPSS %1pyload · pyload21 Oca 2023
- CVE-2026-3546430İzleyin
pyLoad has an incomplete fix for CVE-2026-33509: unprotected storage_folder enables arbitrary file write to Flask session store and code execution
YüksekCVSS 7,5İstismar yokEPSS %1pyload · pyload7 Nis 2026
- CVE-2023-050929İzleyin
Improper Certificate Validation in pyload/pyload
YüksekCVSS 7,4İstismar yokEPSS %1pyload · pyload26 Oca 2023
- CVE-2024-2164528İzleyin
pyLoad Log Injection
OrtaCVSS 5,3Kavram kanıtıEPSS %25pyload · pyload8 Oca 2024
- CVE-2024-3288028İzleyin
pyLoad allows upload to arbitrary folder lead to RCE
YüksekCVSS 7,2İstismar yokEPSS %1pyload · pyload26 Nis 2024
- CVE-2023-022726İzleyin
Insufficient Session Expiration in pyload/pyload
OrtaCVSS 6,5İstismar yokEPSS %1pyload · pyload11 Oca 2023
- CVE-2024-2480824İzleyin
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
OrtaCVSS 6,1İstismar yokEPSS %1pyload · pyload6 Şub 2024
- CVE-2023-005724İzleyin
Improper Restriction of Rendered UI Layers or Frames in pyload/pyload
OrtaCVSS 6,1İstismar yokEPSS %0pyload · pyload4 Oca 2023
- CVE-2024-124024İzleyin
Open Redirection in pyload/pyload
OrtaCVSS 6,1İstismar yokEPSS %0pyload · pyload15 Kas 2024
- CVE-2023-048821İzleyin
Cross-site Scripting (XSS) - Stored in pyload/pyload
OrtaCVSS 5,4İstismar yokEPSS %1pyload · pyload26 Oca 2023
- CVE-2023-005521İzleyin
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload
OrtaCVSS 5,3İstismar yokEPSS %0pyload · pyload4 Oca 2023
- CVE-2026-4422621İzleyin
pyLoad: Unauthenticated traceback disclosure via global exception handler in WebUI
OrtaCVSS 5,3İstismar yokEPSS %0pyload · pyload11 May 2026
- CVE-2026-4007121İzleyin
pyLoad WebUI JSON permission mismatch lets ADD/DELETE users invoke MODIFY-only actions
OrtaCVSS 5,4İstismar yokEPSS %0pyload · pyload9 Nis 2026
- CVE-2024-478219İzleyin
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
DüşükCVSS 2,3İstismar yokEPSS %1pyload · pyload25 Eki 2024