7916 matches found
PYSEC-2022-242
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party...
PYSEC-2022-43173
The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party...
Code injection
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...
PYSEC-2022-241
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party...
PYSEC-2022-43166
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...
Code injection
The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party...
PYSEC-2022-43166
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...
PYSEC-2022-43173
The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party...
CVE-2022-34982
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party...
CVE-2022-34982
CVE-2022-34982 affects the Python package eziod on PyPI, where versions prior to 0.0.1 included a code execution backdoor inserted by a third party. The vulnerability enables remote code execution with high impact (confidentiality, integrity, and availability), as indicated by the CVSS 3.1 score ...
CVE-2022-34983
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...
CVE-2022-34983
CVE-2022-34983 affects the PyPI package scu-captcha, versions 0.0.1–0.0.4, where a backdoor inserted by a third party enables code execution. Multiple sources (Veracode) describe the impact as remote code execution and note the library can execute malicious code via tampered packages on mirrors. ...
CVE-2022-34509
The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party...
CVE-2022-34509
The CVE-2022-34509 entry concerns the wikifaces package on PyPI v1.0, where a backdoor enabling remote code execution was inserted by a third party. Multiple trusted sources (Red Hat, Veracode, NVD, and others) corroborate that the wikifaces package contained a backdoor leading to code execution,...
CVE-2022-34981
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party...
CVE-2022-34981
CVE-2022-34981 affects the PyCrowdTangle package hosted on PyPI prior to v0.0.1, where a third-party backdoor enabled code execution. The issue is described across multiple sources as enabling remote code execution via the malicious package, with high-severity impact (network access, no user inte...
CVE-2022-34500
The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...
CVE-2022-34501
CVE-2022-34501 concerns the bin-collection package for Python (PyPI) prior to v0.1, where a third-party backdoor enables code execution. The vulnerability affects the library’s handling of external packages mirrored from various sources, allowing an attacker to inject and execute malicious code. ...
CVE-2022-34500
CVE-2022-34500 affects the PyPI package bin-collect (also referenced as bin_collection). The provided documents indicate a backdoor enabling arbitrary code execution was inserted by a third party in the package before v0.1, leading to a critical risk (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...