Design/Logic Flaw

The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Design/Logic Flaw

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Design/Logic Flaw

The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-43133

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-43165

The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34066

The CVE-2022-34066 entry concerns the Texercise package on PyPI, with versions 0.0.1–0.0.12 reported to contain a code execution backdoor. Root cause and exploit details are not explicitly enumerated in the connected sources, but multiple records describe an RCE/backdoor enabling attackers to acc...

CVE-2022-34065

CVE-2022-34065 affects the PyPI package Rondolu-YT-Concate v0.1.0 . Multiple connected documents describe a code execution backdoor in this package, enabling attackers to access sensitive user information and digital currency keys and to escalate privileges. The root cause is reported as backdoor...

CVE-2022-34064

The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34060

The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34059

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34057

The CVE-2022-34057 entry concerns the Scoptrial package on PyPI (version v0.0.5). A code execution backdoor via the request package is described, enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. The connected documents confirm a backd...

CVE-2022-34055

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33002

The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33000

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32998

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32996

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32996

CVE-2022-32996 affects the django-navbar-client package, version 0.9.50 through 1.0.1. Multiple connected documents describe a code execution backdoor introduced via the request package, enabling an attacker to execute arbitrary code and access sensitive user information and digital currency keys...

cryptoasset-data-downloader 安全漏洞

cryptoasset-data-downloader is a desktop application that downloads historical data on desired crypto assets by connecting to the APIs of several different crypto exchanges. A security vulnerability exists in cryptoasset-data-downloader. An attacker exploited the vulnerability to access sensitive...

Samsung Account Privilege Management Improper Vulnerability (CNVD-2022-64088)

Samsung Account is a cell phone account from Samsung, a South Korean company. versions prior to Samsung Account 13.2.00.6 contain a privilege management vulnerability that could be exploited to obtain a user's email or phone number with normal-level privileges...

CVE-2022-32254

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. A customized HTTP POST request could force the application to write the status of a given user to a log file, exposing sensitive user information that could provide valuable guidance to an attacker...