Lucene search
+L

693 matches found

attackerkb
attackerkb
•added 2022/06/24 9:15 p.m.•4 views

CVE-2022-34061

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.3AI score0.02079EPSS
SaveExploits1References4
NVD
NVD
•added 2022/06/24 9:15 p.m.•18 views

CVE-2022-34061

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS0.02079EPSS
SaveExploits1References3
OSV
OSV
•added 2022/06/24 9:15 p.m.•11 views

CVE-2022-34061

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.2AI score0.02079EPSS
SaveExploits1References3
PyPA
PyPA
•added 2022/06/24 9:15 p.m.•11 views

PYSEC-2022-221

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score0.02079EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2022/06/24 9:15 p.m.•24 views

Privilege escalation

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

7.5CVSS9.7AI score0.02079EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/06/24 9:15 p.m.•28 views

PYSEC-2022-221

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.2AI score0.02079EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/06/24 8:39 p.m.•27 views

CVE-2022-34061

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.9AI score0.02079EPSS
SaveExploits1References3
CVE
CVE
•added 2022/06/24 8:39 p.m.•79 views

CVE-2022-34061

CVE-2022-34061 concerns the Catly-Translate PyPI package, where versions 0.0.3–0.0.5 are described as containing a code execution backdoor. The description notes attacker access to sensitive user information and digital currency keys, plus privilege escalation. The initial and connected records i...

9.8CVSS9.7AI score0.02079EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2022/06/24 12:00 a.m.•10 views

Catly-Translate 安全漏洞

Catly-Translate is the easy-to-use Baidu translation method. A security vulnerability exists in Catly-Translate. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

9.8CVSS8.4AI score0.02079EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•5 views

CVE-2022-34061: Undefined Security Weakness

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02079EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:25 p.m.•6 views

Malicious code in wf-translate-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1328b0a046ab215c07647d9ab5ec8f409dbbf97c2fdfb04ff82004faf5340c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:25 p.m.•14 views

MAL-2022-7123 Malicious code in wf-translate-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1328b0a046ab215c07647d9ab5ec8f409dbbf97c2fdfb04ff82004faf5340c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:15 p.m.•16 views

MAL-2022-531 Malicious code in @primeo/translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d7def3fb9b8d9b4e3d6cc24d2c370f676f0a709186e1079e051c5e48431c6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:08 p.m.•14 views

MAL-2022-1908 Malicious code in citrix-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5b966bf393cddd7def451e506d43725d5dfeac8bbd9d433f1e618a3422a1a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:08 p.m.•8 views

Malicious code in citrix-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5b966bf393cddd7def451e506d43725d5dfeac8bbd9d433f1e618a3422a1a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 6:19 p.m.•8 views

Malicious code in ngx-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1100a503faf33aad0489ce41d03404d9f250bc81751ec29be8109e87d9c6d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2022/06/20 6:19 p.m.•4 views

@eqproject/eqp-dashboard (>=2.0.3, <=2.5.2), @eqproject/eqp-datetimerangepicker (>=0.0.1, <=3.0.10) +7 more potentially affected by unknown CVE via ngx-translate (0.0.1-security)

ngx-translate NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ngx-translate and may be impacted: - @eqproject/eqp-dashboard =2.0.3, =0.0.1, =2.0.10, =0.0.1, =18.0.0-beta.2 - kms-ngx-ui 16.12.30 - mat-table-ext 0.0.0 -...

5.4AI score
SaveExploits0
OSV
OSV
•added 2022/06/20 6:19 p.m.•30 views

MAL-2022-4849 Malicious code in ngx-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1100a503faf33aad0489ce41d03404d9f250bc81751ec29be8109e87d9c6d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/06 12:00 a.m.•14 views

PT-2022-3768 · Qemu +4 · Qemu +4

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 7.0.0 Description: The issue in QEMU's softmmu/physmem.c file can lead to an uninitialized read on the translate fail path, resulting in an io readx or io writex crash. A third party notes that this might not be...

8.8CVSS6.8AI score0.0288EPSS
SaveExploits21References207
Github Security Blog
Github Security Blog
•added 2022/05/17 4:32 a.m.•32 views

Plone Cross-site scripting Vulnerability

Cross-site scripting XSS vulnerability in pythonscripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "u,translate."...

4.3CVSS6AI score0.01198EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder