PYSEC-2022-215

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Design/Logic Flaw

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-43133

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-43176

The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-43132

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-220

Reserved The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2...

PYSEC-2022-218

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-30885

The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2...

CVE-2022-30885

CVE-2022-30885 concerns the PyPI package pyesasky . A code-execution backdoor was inserted by a third party. The vulnerability affects versions prior to 1.2.0; the non-backdoored current version range is 1.2.0-1.4.2. Red Hat and PT Security entries corroborate the backdoor and provide remediation...

CVE-2022-34066

The CVE-2022-34066 entry concerns the Texercise package on PyPI, with versions 0.0.1–0.0.12 reported to contain a code execution backdoor. Root cause and exploit details are not explicitly enumerated in the connected sources, but multiple records describe an RCE/backdoor enabling attackers to acc...

CVE-2022-34066

The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34065

CVE-2022-34065 affects the PyPI package Rondolu-YT-Concate v0.1.0 . Multiple connected documents describe a code execution backdoor in this package, enabling attackers to access sensitive user information and digital currency keys and to escalate privileges. The root cause is reported as backdoor...

CVE-2022-34064

The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34061

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34061

CVE-2022-34061 concerns the Catly-Translate PyPI package, where versions 0.0.3–0.0.5 are described as containing a code execution backdoor. The description notes attacker access to sensitive user information and digital currency keys, plus privilege escalation. The initial and connected records i...

CVE-2022-34064

CVE-2022-34064 affects the PyPI package zibal (v1.0.0). Multiple connected sources describe a code execution backdoor in Zibal, enabling an attacker to execute arbitrary code and access sensitive user information and digital currency keys, with privilege escalation. The documents do not specify a...

CVE-2022-34060

Technical details (affected products, root cause, versions, exploits) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2022-34060

The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34059

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34059

CVE-2022-34059 concerns the Sixfab-Tool package for PyPI (versions 0.0.2–0.0.3). The provided documents attribute a code execution backdoor introduced via the requests usage, enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. The core v...