Gammac0De

**Name of the Vulnerable Software and Affected Versions** pyLoad versions prior to 0.5.0b3.dev100 **Description** The WebUI returns full Python traceback details to clients when unhandled exceptions occur. This happens because the endpoint "/web/<path:filename>" is accessible without authentication and renders template names controlled by the user. An unauthenticated user can trigger a server exception, such as by requesting a non-existent template, causing the server to include internal stack traces, source paths, and exception metadata in the HTTP response. This information disclosure allows remote clients to map internal application implementation details. **Recommendations** Update to version 0.5.0b3.dev100.

**Name of the Vulnerable Software and Affected Versions** pyload/pyload version 0.5.0 **Description** An open redirection vulnerability exists due to improper handling of the `next` parameter in the login functionality. This allows an attacker to redirect users to malicious sites, potentially leading to phishing or other malicious activities. **Recommendations** For pyload/pyload version 0.5.0, update to pyload-ng 0.5.0b3.dev79 to resolve the issue. As a temporary workaround, consider restricting the use of the `next` parameter in the login functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** pyload versions prior to 0.5.0b3.dev42 **Description** The issue is related to Cross-site Scripting (XSS) - Stored. This means that an attacker can inject malicious scripts into a website, which are then stored on the server and executed by other users. **Recommendations** For versions prior to 0.5.0b3.dev42, update to version 0.5.0b3.dev42 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** pyload versions prior to 0.5.0b3.dev44 **Description** The issue concerns improper certificate validation. **Recommendations** For versions prior to 0.5.0b3.dev44, update to version 0.5.0b3.dev44 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** pyload/pyload versions prior to 0.5.0b3.dev41 **Description** The issue concerns an excessive attack surface in the GitHub repository pyload/pyload. **Recommendations** For versions prior to 0.5.0b3.dev41, update to version 0.5.0b3.dev41 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** pyload/pyload versions prior to 0.5.0b3.dev31 **Description** The issue concerns a code injection vulnerability in the pyload/pyload GitHub repository. It allows for pre-authentication remote code execution (RCE) due to the integration of JavaScript in Python using the js2py library. Specifically, the `eval js()` function is vulnerable, as it executes JavaScript code passed through the `jk` parameter. This allows attackers to inject arbitrary commands. An example of exploitation is through a POST request to the `/amogus/test` endpoint with malicious `jk` parameter content, such as `jk=pyimport os;os.system("touch /tmp/pwnd");f=function f2(){};`. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For versions prior to 0.5.0b3.dev31, update to version 0.5.0b3.dev31 or later to resolve the issue. As a temporary workaround, consider restricting access to the `eval js()` function and the `/amogus/test` endpoint until a patch is applied. Avoid using the `jk` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** pyload versions prior to 0.5.0b3.dev36 **Description** The issue is related to insufficient session expiration in the pyload repository. A patch is available and is anticipated to be part of version 0.5.0b3.dev36. **Recommendations** For versions prior to 0.5.0b3.dev36, update to version 0.5.0b3.dev36 or later to resolve the issue. As a temporary workaround, consider implementing additional session expiration mechanisms until the patch is applied.

**Name of the Vulnerable Software and Affected Versions** pyload/pyload versions prior to 0.5.0b3.dev32 **Description** The issue concerns a sensitive cookie in HTTPS sessions without the 'Secure' attribute set. This could cause the user agent to send those cookies in plaintext over an HTTP session. **Recommendations** For versions prior to 0.5.0b3.dev32, update to version 0.5.0b3.dev32 to resolve the issue. As a temporary workaround, consider restricting the use of sensitive cookies in HTTPS sessions until the update is applied.

**Name of the Vulnerable Software and Affected Versions** pyload versions prior to 0.5.0b3.dev33 **Description** The issue is related to improper restriction of rendered UI layers or frames in the pyload software, which can be exploited by a remote attacker to conduct a clickjacking attack. This allows the attacker to manipulate user interactions. **Recommendations** For versions prior to 0.5.0b3.dev33, update to version 0.5.0b3.dev33 or later to resolve the issue. As a temporary workaround, consider restricting access to the UI layers or frames to minimize the risk of exploitation.