13582 matches found
Remote Code Execution (RCE)
d8s-urls is vulnerable to remote code execution. The vulnerability exists because the library does not properly handle the package upload mechanism, allowing an attacker to inject and execute malicious packages...
Aruba Networks ClearPass Policy Manager 跨站请求伪造漏洞
Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager versions 6.10.x through 6.10.6 and 6.9.x through 6.9.11. An attacker could...
Dataprobe iBoot-PDU 代码问题漏洞
The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A code issue vulnerability exists in the Dataprobe iBoot-PDU FW that stems from the fact that an attacker can create URLs capable of changing host parameters via a carefully crafted PHP...
September 20, 2022—KB5017381 (OS Build 20348.1070) Preview
None None...
Directory traversal
Zentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information remote. The component is: URL : view-source:https://demo15.zentao.pm/user-login.html/zentao/index.php?mode=getconfig...
d8s-archives (0.1.0), d8s-grammars (0.1.0) +5 more potentially affected by unknown CVE via democritus-strings (2021.1.28901)
democritus-strings PYPI version 2021.1.28901 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-strings and may be impacted: - d8s-archives 0.1.0 - d8s-grammars 0.1.0 - d8s-json 0.1.0 - d8s-math 0.1.0 - d8s-netstrings 0.1.0 - d8s-urls 0.1.0 -...
CVE-2022-40424
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...
CVE-2022-40424
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...
CVE-2022-40811
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...
d8s-archives (0.1.0), d8s-json (0.1.0) +4 more potentially affected by unknown CVE via democritus-file-system (2021.1.2701)
democritus-file-system PYPI version 2021.1.2701 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-file-system and may be impacted: - d8s-archives 0.1.0 - d8s-json 0.1.0 - d8s-pdfs 0.1.0 - d8s-urls 0.1.0 - d8s-utility 0.1.0 - d8s-yaml 0.1.0...
PYSEC-2022-43110
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...
PYSEC-2022-43110
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...
Code injection
The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package...
d8s-urls (0.1.0) potentially affected by unknown CVE via democritus-domains (2021.1.2101)
democritus-domains PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-domains and may be impacted: - d8s-urls 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSDOMAINS-8400830...
CVE-2022-40811
CVE-2022-40811 affects the Python package d8s-urls distributed on PyPI, specifically version 0.1.0. Multiple connected sources confirm a backdoor named democritus-file-system was inserted by a third party, enabling potential remote code execution. NVD and Red Hat entries describe a critical risk ...
CVE-2022-40805
CVE-2022-40805 concerns the d8s-urls Python package (version 0.1.0 on PyPI). The vulnerability arises from a backdoor inserted by a third party (democritus-hypothesis package), enabling potential remote code execution. Multiple sources describe the issue as a backdoor in the PyPI distribution, wi...
CVE-2022-40805
The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package...
CVE-2022-40424
CVE-2022-40424 affects d8s-urls 0.1.0 (Python, PyPI). A third-party backdoor in the democritus-networking package is implicated in potential arbitrary code execution. Connected sources confirm the vulnerability context and indicate a remediation path: avoid/use of this democritus-networking packa...
CVE-2022-40424
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...