İçeriğe atla
Noroxi

pyload-ng project kayıtları

pyload-ng project üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %4,8
Pre-auth RCE
2
Düzeltme kaydı olan
%85,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2024-39205
    60Bu hafta

    An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a crafted HTTP request

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    28 Eki 2024

  • CVE-2025-54802
    39İzleyin

    pyLoad CNL Blueprint is vulnerable to Path Traversal through `dlc_path` leading to Remote Code Execution (RCE)

    KritikCVSS 9,8İstismar yokEPSS %1

    pyload-ng project · pyload-ng4 Ağu 2025

  • CVE-2026-35459
    37İzleyin

    pyLoad has SSRF fix bypass via HTTP redirect

    KritikCVSS 9,3İstismar yokEPSS %0

    pyload-ng project · pyload-ng6 Nis 2026

  • CVE-2024-22416
    35İzleyin

    Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    pyload-ng project · pyload-ng17 Oca 2024

  • CVE-2026-35463
    35İzleyin

    pyLoad has Improper Neutralization of Special Elements used in an OS Command

    YüksekCVSS 8,8İstismar yokEPSS %0

    pyload-ng project · pyload-ng7 Nis 2026

  • CVE-2026-33509
    35İzleyin

    pyload-ng: SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration

    YüksekCVSS 8,8İstismar yokEPSS %0

    pyload · pyload24 Mar 2026

  • CVE-2026-33511
    35İzleyin

    pyload-ng: Authentication Bypass via Host Header Injection in ClickNLoad

    YüksekCVSS 8,8İstismar yokEPSS %0

    pyload · pyload24 Mar 2026

  • CVE-2026-42313
    33İzleyin

    pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy

    YüksekCVSS 8,3İstismar yokEPSS %0

    pyload-ng project · pyload-ng11 May 2026

  • CVE-2026-32808
    32İzleyin

    pyLoad: Arbitrary File Deletion via Path Traversal during Encrypted 7z Password Verification

    YüksekCVSS 8,1İstismar yokEPSS %0

    pyload · pyload19 Mar 2026

  • CVE-2026-35187
    30İzleyin

    pyLoad has SSRF in parse_urls API endpoint via unvalidated URL parameter

    YüksekCVSS 7,7İstismar yokEPSS %0

    pyload-ng project · pyload-ng6 Nis 2026

  • CVE-2023-0509
    29İzleyin

    Improper Certificate Validation in pyload/pyload

    YüksekCVSS 7,4İstismar yokEPSS %0

    pyload · pyload26 Oca 2023

  • CVE-2026-42312
    27İzleyin

    pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification

    OrtaCVSS 6,8İstismar yokEPSS %0

    pyload-ng project · pyload-ng11 May 2026

  • CVE-2026-35586
    27İzleyin

    Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng

    OrtaCVSS 6,8İstismar yokEPSS %0

    pyload-ng project · pyload-ng7 Nis 2026

  • CVE-2026-29778
    26İzleyin

    pyLoad: Arbitrary File Write via Path Traversal in edit_package()

    OrtaCVSS 6,5İstismar yokEPSS %0

    pyload-ng project · pyload-ng7 Mar 2026

  • CVE-2026-42315
    26İzleyin

    pyLoad: Path Traversal via Package Folder Name in set_package_data

    OrtaCVSS 6,5İstismar yokEPSS %0

    pyload-ng project · pyload-ng11 May 2026

  • CVE-2026-42314
    26İzleyin

    pyLoad: Path Traversal via Package Folder Name

    OrtaCVSS 6,5İstismar yokEPSS %0

    pyload-ng project · pyload-ng11 May 2026

  • CVE-2026-35592
    26İzleyin

    pyLoad has an Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass

    OrtaCVSS 6,5İstismar yokEPSS %0

    pyload-ng project · pyload-ng7 Nis 2026

  • CVE-2026-33314
    26İzleyin

    pyload-ng: Improper Authentication and Origin Validation Error

    OrtaCVSS 6,5İstismar yokEPSS %0

    pyload-ng project · pyload-ng24 Mar 2026

  • CVE-2023-0057
    24İzleyin

    Improper Restriction of Rendered UI Layers or Frames in pyload/pyload

    OrtaCVSS 6,1İstismar yokEPSS %0

    pyload · pyload4 Oca 2023

  • CVE-2023-0488
    21İzleyin

    Cross-site Scripting (XSS) - Stored in pyload/pyload

    OrtaCVSS 5,4İstismar yokEPSS %0

    pyload · pyload26 Oca 2023

  • CVE-2026-40594
    19İzleyin

    pyLoad: Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)

    OrtaCVSS 4,8İstismar yokEPSS %0

    pyload-ng project · pyload-ng21 Nis 2026