CVE-2021-40899

A Regular Expression Denial of Service ReDOS vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories...

PT-2022-11327 · Unknown · Repo-Git-Downloader

Name of the Vulnerable Software and Affected Versions: repo-git-downloader version 0.1.1 Description: A Regular Expression Denial of Service ReDOS issue was found in the software when it downloads crafted invalid git repositories. This occurs due to a flaw in how regular expressions are handled,...

CVE-2021-40899: Inefficient Regular Expression Complexity

A Regular Expression Denial of Service ReDOS vulnerability was discovered in repo-git-downloader v0.1.1 when downloading crafted invalid git repositories...

repo-git-downloader 安全漏洞

repo-git-downloader is a tool for downloading git repositories. repo-git-downloader v0.1.1 contains a denial of service vulnerability, which stems from the presence of improper regular expressions and can be exploited by attackers to cause a denial of service DOS attack...

CVE-2022-32998

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32998

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32998

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-217

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Design/Logic Flaw

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-217

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32998

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32998

The CVE-2022-32998 entry concerns the cryptoasset-data-downloader package for PyPI, affected versions 1.0.0 through 1.0.1. The root cause is a code execution backdoor introduced via the requests package, enabling an attacker to execute arbitrary code. Reported impact includes access to sensitive ...

CVE-2022-32998

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2020-21046

A local privilege escalation vulnerability was identified within the "luminatinetupdaterwineaglegetcom" service in EagleGet Downloader version 2.1.5.20 Stable. This issue allows authenticated non-administrative user to escalate their privilege and conduct code execution as a SYSTEM privilege...

CVE-2020-21046

A local privilege escalation vulnerability was identified within the "luminatinetupdaterwineaglegetcom" service in EagleGet Downloader version 2.1.5.20 Stable. This issue allows authenticated non-administrative user to escalate their privilege and conduct code execution as a SYSTEM privilege...

Privilege escalation

A local privilege escalation vulnerability was identified within the "luminatinetupdaterwineaglegetcom" service in EagleGet Downloader version 2.1.5.20 Stable. This issue allows authenticated non-administrative user to escalate their privilege and conduct code execution as a SYSTEM privilege...

CVE-2020-21046

A local privilege escalation vulnerability was identified within the "luminatinetupdaterwineaglegetcom" service in EagleGet Downloader version 2.1.5.20 Stable. This issue allows authenticated non-administrative user to escalate their privilege and conduct code execution as a SYSTEM privilege...

CVE-2020-21046

The CVE-2020-21046 issue affects EagleGet Downloader 2.1.5.20 Stable, specifically the luminati_net_updater_win_eagleget_com service. The vulnerability is a local privilege escalation that allows an authenticated non-administrative user to escalate to SYSTEM and execute code. CVSS metrics indicat...

PT-2022-21632

Name of the Vulnerable Software and Affected Versions cryptoasset-data-downloader versions 1.0.0 through 1.0.1 Description The cryptoasset-data-downloader package was discovered to contain a code execution backdoor via the request package. This issue allows attackers to access sensitive user...

EagleGet Downloader 安全漏洞

EagleGet Downloader is a download manager from EagleGet, Inc. A security vulnerability exists in EagleGet Downloader version 2.1.5.20, which stems from a local elevation of privilege vulnerability in the luminatinetupdaterwineaglegetcom service, which can be exploited by an attacker to escalate i...