CVE-2022-40806

CVE-2022-40806 affects the Python package d8s-uuids from PyPI (version 0.1.0). The root cause is a backdoor inserted by a third party in the package, tracked across multiple feeds (e.g., Red Hat, NVD, OSV, Veracode). The vulnerability enables remote code execution with a high impact : attacker-co...

CVE-2022-40811

CVE-2022-40811 affects the Python package d8s-urls distributed on PyPI, specifically version 0.1.0. Multiple connected sources confirm a backdoor named democritus-file-system was inserted by a third party, enabling potential remote code execution. NVD and Red Hat entries describe a critical risk ...

CVE-2022-40811

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

CVE-2022-40805

The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package...

CVE-2022-40805

CVE-2022-40805 concerns the d8s-urls Python package (version 0.1.0 on PyPI). The vulnerability arises from a backdoor inserted by a third party (democritus-hypothesis package), enabling potential remote code execution. Multiple sources describe the issue as a backdoor in the PyPI distribution, wi...

CVE-2022-40424

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

CVE-2022-40424

CVE-2022-40424 affects d8s-urls 0.1.0 (Python, PyPI). A third-party backdoor in the democritus-networking package is implicated in potential arbitrary code execution. Connected sources confirm the vulnerability context and indicate a remediation path: avoid/use of this democritus-networking packa...

CVE-2022-40424

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

PYSEC-2022-43118

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

PYSEC-2022-43118

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

CVE-2022-38880

CVE-2022-38880 concerns the d8s-urls Python package (version 0.1.0) distributed via PyPI, where a third-party-inserted backdoor enables potential remote code execution. Multiple sources (NVD/Red Hat/Veracode/OSV/Politically diverse advisories) describe a backdoor and RCE risk tied to this version...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

SparklingGoblin Revamps SideWalk Backdoor for Linux Variant

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary SparklingGoblin aka Earth Baku State-backed Chinese hackers has integrated a Linux variant of the SideWalk backdoor. SparklingGoblin Threat actors typically target East and Southeast Asian countries, wit...

PT-2022-37377 · Unknown +1 · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-mpeg version 0.1.0 Description: The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-mpeg version 0.1.0 that originates from a potential code execution backdoor inserted by a third party...

PT-2022-37365 · Pypi · Democritus-Hypothesis +1

Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 democritus-hypothesis affected versions not specified Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls package for python, distributed on PyPI. This backdoor poses a risk ...

PT-2022-37374 · Pypi · D8S-Htm +1

Name of the Vulnerable Software and Affected Versions: d8s-html version 0.1.0 Description: The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...