CVE-2022-35047

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05aa...

Democritus Project d8s-utility democritus-file-system code execution vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-utility version 0.1.0, which stems from the presence of a potential code execution package democritus-file-system...

Democritus Project d8s-utility democritus-urls code execution vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-utility version 0.1.0, which stems from the presence of a potential code execution package democritus-urls inserted...

CVE-2022-41381

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

PYSEC-2022-43040

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

PYSEC-2022-43032

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

d8s-utility (>=0.5.0, <=0.6.0) potentially affected by CVE-2022-42036 via d8s-urls (0.4.0)

d8s-urls PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-urls and may be impacted: - d8s-utility =0.5.0, =0.6.0 Source cves: CVE-2022-42036 Source advisory: OSV:PYSEC-2022-43030...

PYSEC-2022-43031

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

d8s-utility (0.5.0) potentially affected by CVE-2022-42041 via d8s-file-system (0.4.0)

d8s-file-system PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-file-system and may be impacted: - d8s-utility 0.5.0 Source cves: CVE-2022-42041 Source advisory: OSV:PYSEC-2022-43024...

PYSEC-2022-43031

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

PYSEC-2022-43049

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

PYSEC-2022-43049

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

d8s-utility (>=0.5.0, <=0.6.0) potentially affected by CVE-2022-41382 via d8s-json (0.3.0)

d8s-json PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-json and may be impacted: - d8s-utility =0.5.0, =0.6.0 Source cves: CVE-2022-41382 Source advisory: OSV:PYSEC-2022-43026...

d8s-asns (0.5.0), d8s-utility (>=0.5.0, <=0.6.0) potentially affected by CVE-2022-42042 via d8s-networking (0.3.0)

d8s-networking PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-networking and may be impacted: - d8s-asns 0.5.0 - d8s-utility =0.5.0, =0.6.0 Source cves: CVE-2022-42042 Source advisory: OSV:PYSEC-2022-43028...

d8s-utility (>=0.5.0, <=0.6.0) potentially affected by CVE-2022-42039 via d8s-lists (0.5.0)

d8s-lists PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-lists and may be impacted: - d8s-utility =0.5.0, =0.6.0 Source cves: CVE-2022-42039 Source advisory: OSV:PYSEC-2022-43027...

d8s-asns (0.5.0), d8s-urls (>=0.2.0, <=0.5.2) +1 more potentially affected by CVE-2022-41384 via d8s-domains (0.6.0)

d8s-domains PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-domains and may be impacted: - d8s-asns 0.5.0 - d8s-urls =0.2.0, =0.5.0, =0.6.0 Source cves: CVE-2022-41384 Source advisory: OSV:PYSEC-2022-43023...

CVE-2022-41386

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

CVE-2022-41386

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

Democritus Project code-related vulnerabilities

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-utility version 0.1.0, which stems from the presence of a potential code execution package democritus-file-system...

CVE-2022-41386: Unrestricted Upload of File with Dangerous Type

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...