CVE-2022-41380

The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

CVE-2022-41385

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-file, which originates from the distribution of the package containing a potential code execution backdoor inserte...

CVE-2022-42043

The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-utility version 0.1.0, which stems from the presence of a potential code execution package democritus-urls inserted...

CVE-2022-42038

The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

CVE-2022-41380

The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

PT-2022-37358 · Pypi · Democritus-Csv +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-csv package, which was inserted by a third party. Recommendations:...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-ip version 0.1.0, which stems from the presence of a potential code execution package, democritus-csv, inserted by ...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-pdfs that originates from the distribution of the package containing a potential code execution backdoor inserted ...

CVE-2022-42043

The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

CVE-2022-41385

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

CVE-2022-42036

The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

CVE-2022-42044

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

CVE-2022-41380

The CVE-2022-41380 entry concerns the Python d8s-yaml package distributed on PyPI, with a backdoor payload introduced by a third party identified as the democritus-file-system package in version 0.1.0. Several connected sources (Red Hat, CNVD, NVD/NVD-derived, OSV, PRION/PRs, CNVD) corroborate a ...

CVE-2022-41386

The CVE-2022-41386 entry concerns the d8s-utility package for Python (PyPI), where a third-party backdoor (democritus-urls) was inserted into version 0.1.0, enabling potential remote code execution. Connected sources confirm the backdoor presence in the PyPI distribution and describe the resultin...

CVE-2022-42040

The CVE-2022-42040 entry concerns the Python package d8s-algorithms (PyPI) with version 0.1.0 affected by a backdoor injected by a third party (democritus-dicts), enabling potential remote code execution. Connected sources consistently describe the issue as a backdoor compromising the package dis...

CVE-2022-42037

CVE-2022-42037 concerns the Python PyPI package d8s-asns . The description states a third‑party backdoor, democritus-csv , was inserted into version 0.1.0 , creating a potential code execution vulnerability. The CVSS v3.1 score is 9.8 (CRITICAL) with high impact on confidentiality, integrity, and...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-algorithms version 0.1.0, which stems from the presence of a potential code execution package democritus-dicts...