https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 16:13:00 +0000 https://cve.radiocsirt.org/vuln/cve-2024-21645 <p><strong>Affected:</strong> pyload</p> <p>pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in `pyload` allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by `pyload`. Forged or otherwise, corrupted log files can be used to cover an attacker’s tracks or even to implicate another party in the commission of a malicious act. This vulnerability has been patched in version 0.5.0b3.dev77.</p> <p><strong>Affected:</strong> pyload</p> <p>pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in `pyload` allowing any unauthenticated actor to inject arbitrary messages into the logs gathered by `pyload`. Forged or otherwise, corrupted log files can be used to cover an attacker’s tracks or even to implicate another party in the commission of a malicious act. This vulnerability has been patched in version 0.5.0b3.dev77.</p> https://cve.radiocsirt.org/vuln/cve-2024-21645 https://cve.radiocsirt.org/vuln/pysec-2026-1818 <p><strong>Affected:</strong> PyPI: pyload-ng</p> <p>### Summary A log injection vulnerability was identified in `pyload`. This vulnerability allows any unauthenticated actor to inject arbitrary messages into the logs gathered by `pyload`.</p> <p>### Details `pyload` will generate a log entry when attempting to sign in with faulty credentials. This entry will be in the form of `Login failed for user &#39;USERNAME&#39;`. However, when supplied with a username containing a newline, this newline is not properly escaped. Newlines are also the delimiter between log entries. This allows the attacker to inject new log entries into the log file.</p> <p>### PoC Run `pyload` in the default configuration by running the following command ``` pyload ```</p> <p>We can now sign in as the pyload user and view the logs at `http://localhost:8000/logs`. </p> <p>Any unauthenticated attacker can now make the following request to inject arbitrary logs.</p> <p>``` curl &#39;http://localhost:8000/login?next=http://localhost:8000/&#39; -X POST -H &#39;Content-Type: application/x-www-form-urlencoded&#39; --data-raw $&#39;do=login&amp;username=wrong\&#39;%0a[2024-01-05 02:49:19] HACKER PinkDraconian THIS ENTRY HAS BEEN INJECTED&amp;password=wrong&amp;submit=Login&#39; ```</p> <p>If we now were to look at the logs again, we see that the entry has successfully been injected. </p> <p>### Impact Forged…</p> <p><strong>Affected:</strong> PyPI: pyload-ng</p> <p>### Summary A log injection vulnerability was identified in `pyload`. This vulnerability allows any unauthenticated actor to inject arbitrary messages into the logs gathered by `pyload`.</p> <p>### Details `pyload` will generate a log entry when attempting to sign in with faulty credentials. This entry will be in the form of `Login failed for user &#39;USERNAME&#39;`. However, when supplied with a username containing a newline, this newline is not properly escaped. Newlines are also the delimiter between log entries. This allows the attacker to inject new log entries into the log file.</p> <p>### PoC Run `pyload` in the default configuration by running the following command ``` pyload ```</p> <p>We can now sign in as the pyload user and view the logs at `http://localhost:8000/logs`. </p> <p>Any unauthenticated attacker can now make the following request to inject arbitrary logs.</p> <p>``` curl &#39;http://localhost:8000/login?next=http://localhost:8000/&#39; -X POST -H &#39;Content-Type: application/x-www-form-urlencoded&#39; --data-raw $&#39;do=login&amp;username=wrong\&#39;%0a[2024-01-05 02:49:19] HACKER PinkDraconian THIS ENTRY HAS BEEN INJECTED&amp;password=wrong&amp;submit=Login&#39; ```</p> <p>If we now were to look at the logs again, we see that the entry has successfully been injected. </p> <p>### Impact Forged…</p> https://cve.radiocsirt.org/vuln/pysec-2026-1818