13582 matches found
CVE-2022-38880
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...
PYSEC-2022-43118
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...
PYSEC-2022-43118
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...
CVE-2022-38880
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...
CVE-2022-38880
CVE-2022-38880 concerns the d8s-urls Python package (version 0.1.0) distributed via PyPI, where a third-party-inserted backdoor enables potential remote code execution. Multiple sources (NVD/Red Hat/Veracode/OSV/Politically diverse advisories) describe a backdoor and RCE risk tied to this version...
CVE-2022-38880
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...
PT-2022-37365 · Pypi · Democritus-Hypothesis +1
Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 democritus-hypothesis affected versions not specified Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls package for python, distributed on PyPI. This backdoor poses a risk ...
PT-2022-37361 · Pypi · Democritus-File-System +1
Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls package for python distributed on PyPI. The backdoor is related to the democritus-file-system package. Recommendations: Fo...
PT-2022-24605 · Pypi · D8S-Urls
Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. Recommendations: For version 0.1.0, avoid using the affected package until a fixed...
PT-2022-37373 · Unknown +1 · Democritus-Networking +1
Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls package for Python, distributed on PyPI. Another affected package is democritus-networking. Recommendations: For d8s-urls...
Democritus Project 安全漏洞
Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus, Inc. A security vulnerability exists in Democritus Project d8s-urls version 0.1.0 that originates from a potential code execution backdoor inserted by a third party...
PT-2022-25373 · Pypi · Democritus-Networking +1
Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls package for Python, distributed on PyPI. The democritus-networking package is also identified as a potential code executio...
Democritus Project 安全漏洞
Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus, Inc. A security vulnerability exists in Democritus Project d8s-urls version 0.1.0, which stems from the presence of a potential code execution backdoor inserted by a third...
Shopware access control list bypassed via crafted specific URLs
Impact If backend admin controllers are called with a certain notation, the ACL could be bypassed. Users could execute actions, which they are normally not able to do. Patches We recommend updating to the current version 5.7.15. You can get the update to 5.7.15 regularly via the Auto-Updater or...
GHSA-PQW5-JMP5-PX4V parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing
parse-url prior to 8.1.0 is vulnerable to Misinterpretation of Input. parse-url parses certain http or https URLs incorrectly, identifying the URL's protocol as ssh. It may also parse the host name incorrectly...
PT-2022-20899 · Unknown · Openam Consortium Edition
Name of the Vulnerable Software and Affected Versions: OpenAM Consortium Edition version 14.0.0 Description: The issue allows an open redirect when accessing an affected server through a specially crafted URL, potentially redirecting the user to an arbitrary website. Recommendations: For OpenAM...
CVE-2022-36102 Acess control list bypassed via crafted specific URLs
Shopware is an open source e-commerce software. In affected versions if backend admin controllers are called with a certain notation, the ACL could be bypassed. Users could execute actions, which they are normally not able to do. Users are advised to update to the current version 5.7.15. Users ca...
CVE-2022-36102 Acess control list bypassed via crafted specific URLs
Shopware is an open source e-commerce software. In affected versions if backend admin controllers are called with a certain notation, the ACL could be bypassed. Users could execute actions, which they are normally not able to do. Users are advised to update to the current version 5.7.15. Users ca...