Description
pyload 是 Python 编写的开源下载管理器。pyLoad中存在信息泄露漏洞，当用户访问/render/info.html时，触发此漏洞。
pyLoad CVE-2024-21644 信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-21644
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21644.yaml
https://pentest-tools.com/vulnerabilities-exploits/pyload-flask-config-access-control_22487
https://advisories.gitlab.com/pkg/pypi/pyload-ng/
https://www.ameeba.com/blog/cve-2024-21644-unauthenticated-exposure-of-flask-config-in-pyload/
https://vulners.com/cve/CVE-2024-21644
https://www.ddpoc.com/DVB-2024-6161.html
https://stack.chaitin.com/vuldb/detail/80161369-e501-44f5-8a62-31461bda7385
https://cn-sec.com/archives/2530111.html
https://www.youtube.com/watch?v=C6I8Jxxjik0
https://baishya.xyz/posts/pyload-cves/
https://www.scribd.com/document/785098408/CVE-2024-21644
https://feedly.com/cve/vendors/pyload
https://zhuanlan.zhihu.com/p/1932214870562047555
https://www.ctfiot.com/blog/page/596
https://blog.csdn.net/2401_82670286/article/details/135914798