CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-1240MEDIUM | Open Redirection in pyload/pyloadAn open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79. CWE-601Nov 15, 2024 | CVSS6.1v3.1 | EPSS0.319% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-0509HIGH | Improper Certificate Validation in pyload/pyloadImproper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44. CWE-295Jan 26, 2023 | CVSS7.4v3.1 | EPSS0.526% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-0488MEDIUM | Cross-site Scripting (XSS) - Stored in pyload/pyloadCross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42. CWE-79Jan 26, 2023 | CVSS5.4v3.1 | EPSS0.822% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-0435CRITICAL | Excessive Attack Surface in pyload/pyloadExcessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41. CWE-1125Jan 22, 2023 | CVSS9.8v3.1 | EPSS0.72% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-0434HIGH | Improper Input Validation in pyload/pyloadImproper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40. CWE-20Jan 22, 2023 | CVSS7.5v3.1 | EPSS0.816% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-0297CRITICAL | Code Injection in pyload/pyloadCode Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. | CVSS9.8v3.1 | EPSS95.8% | PoCs8 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2023-0227MEDIUM | Insufficient Session Expiration in pyload/pyloadInsufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36. CWE-613Jan 12, 2023 | CVSS6.5v3.1 | EPSS0.655% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-0057MEDIUM | Improper Restriction of Rendered UI Layers or Frames in pyload/pyloadImproper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33. CWE-1021Jan 5, 2023 | CVSS6.1v3.1 | EPSS0.456% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-0055MEDIUM | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyloadSensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32. | CVSS5.3v3.1 | EPSS0.436% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |