CVE-2022-34057

The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34056

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34056

CVE-2022-34056 affects the Watertools package for PyPI, v0.0.0. Connected sources identify a code execution backdoor introduced via the request package, enabling an attacker to run arbitrary code and access sensitive data (including digital currency keys) and escalate privileges. The issue is des...

CVE-2022-34057

The CVE-2022-34057 entry concerns the Scoptrial package on PyPI (version v0.0.5). A code execution backdoor via the request package is described, enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. The connected documents confirm a backd...

CVE-2022-34054

The CVE-2022-34054 entry concerns the Perdido package on PyPI (versions 0.0.1–0.0.2) that allegedly contains a code execution backdoor introduced via the request package. Reported impact in sources includes access to sensitive user information and digital currency keys, with privilege escalation....

CVE-2022-34054

The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34055

The CVE-2022-34055 entry concerns the drxhello PyPI package (version 0.0.1). Documents describe a code execution backdoor introduced via the request package, enabling attackers to access sensitive user information and digital currency keys and to escalate privileges. Affected component is the drx...

CVE-2022-34055

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34053

CVE-2022-34053 concerns the DR-Web-Engine package for PyPI, v0.2.0b0, featuring a code execution backdoor via the request package. The root cause is a backdoor enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. Documented sources (NVD, ...

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33004

The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33004

CVE-2022-33004 affects the PyPI Beginner package (v0.0.2–v0.0.4) via the request package, described as a code execution backdoor. Exploitation could grant access to sensitive user data and digital currency keys and enable privilege escalation. The incident is documented across multiple sources (N...

CVE-2022-33003

The watools package for Python (PyPI) versions 0.0.1–0.0.8 contains a code execution backdoor via the request package, enabling attackers to access sensitive user information and digital currency keys and to escalate privileges. Root cause: backdoor in watools; vulnerable component: watools packa...

CVE-2022-33002

CVE-2022-33002 affects the KGExplore package for PyPI, versions v0.1.1–v0.1.2. All connected sources describe a code execution backdoor introduced via the request package, enabling attackers to access sensitive user information and digital currency keys and to escalate privileges. The root cause ...

CVE-2022-33002

The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33001

The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33001

Technical details about CVE-2022-33001 are not publicly provided in the supplied documents. Monitor for updates from NVD/Red Hat/Veracode reports to obtain affected versions, exploit details, and remediations.

CVE-2022-33000

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33000

CVE-2022-33000 concerns the ML-Scanner package on PyPI, versions v0.1.0–v0.1.5, which reportedly contains a code execution backdoor via the request package. The vulnerability, as described across multiple sources, could allow an attacker to access sensitive user information and digital currency k...

CVE-2022-32998

The CVE-2022-32998 entry concerns the cryptoasset-data-downloader package for PyPI, affected versions 1.0.0 through 1.0.1. The root cause is a code execution backdoor introduced via the requests package, enabling an attacker to execute arbitrary code. Reported impact includes access to sensitive ...