Lucene search
+L

11 matches found

osv_cve
osv_cve
•added 2022/06/24 9:15 p.m.•22 views

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.2AI score0.02042EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/06/24 9:15 p.m.•10 views

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.3AI score0.02042EPSS
SaveExploits1References4
NVD
NVD
•added 2022/06/24 9:15 p.m.•41 views

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS0.02042EPSS
SaveExploits1References3
PyPA
PyPA
•added 2022/06/24 9:15 p.m.•32 views

PYSEC-2022-43132

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8AI score0.02042EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2022/06/24 9:15 p.m.•29 views

Design/Logic Flaw

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

7.5CVSS9.7AI score0.02042EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2022/06/24 8:39 p.m.•11 views

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS0.02042EPSS
SaveExploits1References3
CVE
CVE
•added 2022/06/24 8:39 p.m.•117 views

CVE-2022-34053

CVE-2022-34053 concerns the DR-Web-Engine package for PyPI, v0.2.0b0, featuring a code execution backdoor via the request package. The root cause is a backdoor enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. Documented sources (NVD, ...

9.8CVSS9.7AI score0.02042EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•6 views

PT-2022-37395

Name of the Vulnerable Software and Affected Versions DR-Web-Engine version 0.2.0b0 Description The issue allows attackers to execute code, potentially accessing sensitive user information and digital currency keys, as well as escalating privileges. Recommendations For version 0.2.0b0, consider...

9.8CVSS6.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•8 views

PT-2022-21988

Name of the Vulnerable Software and Affected Versions DR-Web-Engine version 0.2.0b0 Description The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges via a code execution backdoor in the request package. Recommendations For versi...

9.8CVSS0.02042EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•11 views

CVE-2022-34053: Undefined Security Weakness

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/06/24 12:00 a.m.•19 views

DR-Web-Engine security vulnerabilities

DR-Web-Engine is built on python based on the lxml package and uses JSON as the query structure. A security vulnerability exists in DR-Web-Engine. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References4
Rows per page
Query Builder