Alta
CVE-2025-7346
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 58
Restablecer filtros
Media
CVE-2024-24808
pyLoad open redirect vulnerability due to improper validation of the is_safe_url function
Media
CVE-2024-21645
pyload Log Injection vulnerability
Alta
CVE-2024-21644
pyload Unauthenticated Flask Configuration Leakage vulnerability
Alta
CVE-2023-47890
Download to arbitrary folder can lead to RCE
Media
CVE-2023-0434
Improper Input Validation in pyload-ng
Media
CVE-2023-0488
Cross-site Scripting in pyload-ng
Alta
CVE-2023-0509
Improper Certificate Validation in pyload-ng
Media
CVE-2023-0227
Pyload Insufficient Session Expiration vulnerability
Media
CVE-2023-0055
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Media
CVE-2023-0057
pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames
Crítica
CVE-2024-32880
pyLoad allows upload to arbitrary folder lead to RCE
Crítica
CVE-2025-54802
pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE)
Crítica
CVE-2025-53890
pyLoad vulnerable to XSS through insecure CAPTCHA
Alta
CVE-2026-42315
PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data
Media
CVE-2026-42314
PyLoad Vulnerable to Path Traversal via Package Folder Name
Alta
CVE-2026-42313
pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)
Media
CVE-2026-42312
pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification via unrestricted `ssl_verify` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)
Media
CVE-2026-40594
pyLoad has a Session Cookie Security Downgrade via Untrusted X-Forwarded-Proto Header Spoofing (Global State Race Condition)
Baja
ghsa-fj52-5g4h-gmq8
pyLoad's Session Not Invalidated After Permission Changes
Media
CVE-2026-35592
pyload-ng: Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix Bypass
Media
CVE-2026-35586
pyload-ng: Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ng
Alta
CVE-2026-35463
pyLoad: Improper Neutralization of Special Elements used in an OS Command
Crítica
CVE-2026-35459
pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.