Lucene search
+L

270 matches found

PyPA
PyPA
•added 2022/06/24 9:15 p.m.•19 views

PYSEC-2022-43066

The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8AI score0.02042EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/06/24 9:15 p.m.•9 views

PYSEC-2022-43133

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score
SaveExploits0References3
OSV
OSV
•added 2022/06/24 9:15 p.m.•15 views

PYSEC-2022-43172

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.3AI score
SaveExploits0References3
OSV
OSV
•added 2022/06/24 9:15 p.m.•9 views

PYSEC-2022-43169

The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score
SaveExploits0References3
PyPA
PyPA
•added 2022/06/24 9:15 p.m.•22 views

PYSEC-2022-43168

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score0.02079EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/06/24 9:15 p.m.•9 views

PYSEC-2022-43168

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score
SaveExploits0References3
OSV
OSV
•added 2022/06/24 9:15 p.m.•9 views

PYSEC-2022-43132

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score
SaveExploits0References3
OSV
OSV
•added 2022/06/24 9:15 p.m.•9 views

PYSEC-2022-43164

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score
SaveExploits0References3
OSV
OSV
•added 2022/06/24 9:15 p.m.•10 views

PYSEC-2022-43073

The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2022/06/24 8:41 p.m.•66 views

CVE-2022-30885

The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2...

9.7AI score0.02141EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/06/24 8:39 p.m.•37 views

CVE-2022-34064

The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.9AI score0.01402EPSS
SaveExploits0References2
CVE
CVE
•added 2022/06/24 8:39 p.m.•86 views

CVE-2022-34057

The CVE-2022-34057 entry concerns the Scoptrial package on PyPI (version v0.0.5). A code execution backdoor via the request package is described, enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. The connected documents confirm a backd...

9.8CVSS9.7AI score0.01402EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/06/24 8:39 p.m.•40 views

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.9AI score0.02042EPSS
SaveExploits1References3
Mend
Mend
•added 2022/06/24 8:39 p.m.•3 views

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS0.02042EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/06/24 8:39 p.m.•43 views

CVE-2022-33001

The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.9AI score0.02042EPSS
SaveExploits1References3
Mend
Mend
•added 2022/06/24 8:39 p.m.•3 views

CVE-2022-32999

The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS0.02042EPSS
SaveExploits1References3
Mend
Mend
•added 2022/06/24 8:39 p.m.•7 views

CVE-2022-32996

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS0.02EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•5 views

CVE-2022-32997: Undefined Security Weakness

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•6 views

CVE-2022-34053: Undefined Security Weakness

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•7 views

CVE-2022-34055: Undefined Security Weakness

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rows per page
Query Builder