Lucene search
+L

174 matches found

Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•2 views

PT-2022-37396

Name of the Vulnerable Software and Affected Versions drxhello version 0.0.1 Description The issue allows attackers to execute code, potentially accessing sensitive user information and digital currency keys, as well as escalating privileges. This is achieved via the request package in the drxhel...

9.8CVSS6.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•5 views

PT-2022-21637

Name of the Vulnerable Software and Affected Versions KGExplore versions 0.1.1 through 0.1.2 Description The KGExplore package was discovered to contain a code execution backdoor via the request package. This issue allows attackers to access sensitive user information and digital currency keys, a...

9.8CVSS0.02042EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•5 views

CVE-2022-32997: Undefined Security Weakness

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•6 views

CVE-2022-34053: Undefined Security Weakness

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•7 views

CVE-2022-34055: Undefined Security Weakness

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•7 views

CVE-2022-32998: Undefined Security Weakness

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•3 views

PT-2022-21630

Name of the Vulnerable Software and Affected Versions django-navbar-client versions 0.9.50 through 1.0.1 Description The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges via a code execution backdoor in the request package...

9.8CVSS0.02EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•3 views

PT-2022-21988

Name of the Vulnerable Software and Affected Versions DR-Web-Engine version 0.2.0b0 Description The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges via a code execution backdoor in the request package. Recommendations For versi...

9.8CVSS0.02042EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•6 views

CVE-2022-34056: Undefined Security Weakness

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•5 views

CVE-2022-32996: Undefined Security Weakness

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•3 views

PT-2022-21635

Name of the Vulnerable Software and Affected Versions ML-Scanner versions 0.1.0 through 0.1.5 Description The ML-Scanner package was discovered to contain a code execution backdoor via the request package. This issue allows attackers to access sensitive user information and digital currency keys,...

9.8CVSS0.02EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•7 views

CVE-2022-34057: Undefined Security Weakness

The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.01402EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•2 views

PT-2022-37406

Name of the Vulnerable Software and Affected Versions Sixfab-Tool versions 0.0.2 through 0.0.3 Description The issue allows attackers to execute code, potentially accessing sensitive user information and digital currency keys, as well as escalating privileges. This is achieved via the request...

9.8CVSS6.1AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•5 views

CVE-2022-34054: Undefined Security Weakness

The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•7 views

CVE-2022-33003: Undefined Security Weakness

The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•6 views

CVE-2022-33002: Undefined Security Weakness

The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•4 views

PT-2022-37334

Name of the Vulnerable Software and Affected Versions AAmiles version 0.1.0 Description The issue allows attackers to execute code, potentially accessing sensitive user information and digital currency keys, as well as escalating privileges. This is achieved via the request package. Recommendatio...

9.8CVSS5.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•2 views

PT-2022-21631

Name of the Vulnerable Software and Affected Versions RootInteractive versions 0.0.5 through 0.0.19b0 Description The RootInteractive package was discovered to contain a code execution backdoor via the request package. This issue allows attackers to access sensitive user information and digital...

9.8CVSS0.02EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•2 views

PT-2022-37336

Name of the Vulnerable Software and Affected Versions cloudlabeling version 0.0.1 Description The issue allows attackers to execute code, potentially accessing sensitive user information and digital currency keys, as well as escalating privileges. This is achieved via the request package in the...

9.8CVSS6.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/06/24 12:00 a.m.•5 views

PT-2022-21633

Name of the Vulnerable Software and Affected Versions cloudlabeling version 0.0.1 Description The cloudlabeling package was discovered to contain a code execution backdoor via the request package. This issue allows attackers to access sensitive user information and digital currency keys, as well ...

9.8CVSS0.02042EPSS
SaveExploits1References7
Rows per page
Query Builder