CVE-2022-32998: Undefined Security Weakness

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PT-2022-21996

Name of the Vulnerable Software and Affected Versions Zibal package in PyPI version 1.0.0 Description The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges due to a code execution backdoor. Recommendations For Zibal package in Py...

PT-2022-37404

Name of the Vulnerable Software and Affected Versions Rondolu-YT-Concate version 0.1.0 Description The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges due to a code execution backdoor in the package. Recommendations For version...

PT-2022-21993

Name of the Vulnerable Software and Affected Versions Sixfab-Tool versions 0.0.2 through 0.0.3 Description The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges via a code execution backdoor in the request package. Recommendation...

CVE-2022-34066: Undefined Security Weakness

The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34056: Undefined Security Weakness

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-30885: Undefined Security Weakness

The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2...

CVE-2022-32996: Undefined Security Weakness

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33003: Undefined Security Weakness

The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PT-2022-21994

Name of the Vulnerable Software and Affected Versions Togglee version v0.0.8 Description The Togglee package was discovered to contain a code execution backdoor, allowing attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Recommendations For...

PT-2022-20363 · Pypi · Pyesasky

Name of the Vulnerable Software and Affected Versions: pyesasky versions prior to 1.2.0 Description: The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. Recommendations: For versions prior to 1.2.0, update to version 1.2.0 or later to...

CVE-2022-34059: Undefined Security Weakness

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PT-2022-21631

Name of the Vulnerable Software and Affected Versions RootInteractive versions 0.0.5 through 0.0.19b0 Description The RootInteractive package was discovered to contain a code execution backdoor via the request package. This issue allows attackers to access sensitive user information and digital...

CVE-2022-30877

The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2...

CVE-2022-30877

The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2...

PYSEC-2022-43056

The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2...

rest-client Gem Contains Malicious Code

The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Users of an affected version should consider downgrading to the last non-affected version of 1.6.9, or upgrading to 1.7.x. Additionally, a set of other...

Code execution backdoor in blockchain_wallet

The blockchainwallet gem 0.0.6 through 0.0.7 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Users of an affected version should consider downgrading to the last non-affected version of 0.0.5...

CVE-2019-15224

The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions =1.6.14 are unaffected...

CVE-2019-15224

The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions =1.6.14 are unaffected...