CVE Feed

    Dashboard / CVE / CVE-2024-39205

    CVE-2024-39205

    An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a crafted HTTP request.

    Published:Oct 28, 2024
    Last Modified:Apr 15, 2026
    EPS:Oct 28, 2024
    EPSS Score:0.83924
    CVSS Score:9.8

    Affected Products

    Vendor
    Pyload-ng Project
    Product
    Pyload-ng

    Exploits

    https://github.com/btar1gan/exploit_CVE-2024-39205https://github.com/Marven11/CVE-2024-39205-Pyload-RCE

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-42315 (CVSS 8.1) — pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, when passing a f…
    CVE-2026-42314 (CVSS 6.5) — pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, package folder n…
    CVE-2026-42312 (CVSS 6.8) — pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_v…
    CVE-2026-42313 (CVSS 8.3) — pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_v…
    CVE-2026-40594 (CVSS 4.8) — pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev98, the set_session_c…
    CVE-2026-35592 (CVSS 5.3) — pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the _safe_extract…
    CVE-2026-35586 (CVSS 6.8) — pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev97, the ADMIN_ONLY_CO…
    CVE-2026-35463 (CVSS 8.8) — pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the ADMIN_O…
    CVE-2026-35459 (CVSS 9.3) — pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, pyLoad has …
    CVE-2026-35187 (CVSS 7.7) — pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the parse_u…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High