Vulnerabilidades em pyload

49 resultados
Análise Vexday

O pyload apresenta um portfólio de 44 vulnerabilidades conhecidas, com 9 classificadas como críticas (CVSS elevado), predominantemente relacionadas a traversal de diretórios (CWE-22). Embora nenhuma esteja sob exploração ativa documentada no KEV, a publicação de 8 CVEs nos últimos 90 dias indica uma superfície de risco em evolução contínua que requer monitoramento atento.

CVE-2023-0057LOWImproper Restriction of Rendered UI Layers or Frames in pyload/pyloadEPSS 0.5%CVE-2023-0055LOWSensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyloadEPSS 0.5%CVE-2026-33511HIGHpyload-ng: Authentication Bypass via Host Header Injection in ClickNLoadEPSS 0.4%CVE-2026-48987MEDIUMpyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManagerEPSS 0.4%CVE-2026-33992CRITICALpyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata ExfiltrationEPSS 0.4%CVE-2026-42313HIGHpyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxyEPSS 0.4%CVE-2026-42315HIGHpyLoad: Path Traversal via Package Folder Name in set_package_dataEPSS 0.4%CVE-2025-7346HIGHAny unauthenticated attacker can bypass the localhost restrictions posed by the application and utilize this to create arbitrary packagesEPSS 0.4%CVE-2026-48484MEDIUMpyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process TerminationEPSS 0.4%CVE-2025-55156HIGHPyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameterEPSS 0.4%CVE-2026-42314MEDIUMpyLoad: Path Traversal via Package Folder NameEPSS 0.3%CVE-2024-1240MEDIUMOpen Redirection in pyload/pyloadEPSS 0.3%CVE-2026-32808HIGHpyLoad: Arbitrary File Deletion via Path Traversal during Encrypted 7z Password VerificationEPSS 0.3%CVE-2026-44226MEDIUMpyLoad: Unauthenticated traceback disclosure via global exception handler in WebUIEPSS 0.3%CVE-2026-41133HIGHpyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)EPSS 0.3%CVE-2025-57751HIGHDenial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljsEPSS 0.3%CVE-2026-75597MEDIUMpyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typoEPSS 0.3%CVE-2026-48737MEDIUMpyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPsEPSS 0.3%CVE-2026-35459CRITICALpyLoad has SSRF fix bypass via HTTP redirectEPSS 0.3%CVE-2026-35187HIGHpyLoad has SSRF in parse_urls API endpoint via unvalidated URL parameterEPSS 0.3%