Critical
CVE-2026-33992
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 58
Reset filters
Medium
CVE-2026-33314
Improper Authentication and Origin Validation Error in pyload-ng
High
CVE-2026-29778
pyLoad has an Arbitrary File Write via Path Traversal in edit_package()
Medium
ghsa-3wwm-hjv7-23r3
Pyload log Injection via API /json/add_package in add_name parameter
Medium
CVE-2024-1240
An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this
High
CVE-2024-47821
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
Critical
CVE-2024-39205
pyload-ng vulnerable to RCE with js2py sandbox escape
Critical
CVE-2024-22416
Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation
Critical
CVE-2023-0435
Excessive Attack Surface in pyload-ng
Critical
CVE-2023-0297
Code Injection in pyload-ng
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.