CVE-2022-41384

The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

CVE-2022-41387

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

PT-2022-25833 · Pypi · Democritus-File-System +1

Name of the Vulnerable Software and Affected Versions: d8s-json version 0.1.0 Description: The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. Recommendations: For...

CVE-2022-41385

CVE-2022-41385 affects the Python d8s-html package from PyPI (version 0.1.0). Multiple connected sources confirm a backdoor (democritus-urls) inserted by a third party, creating a potential code execution vector. The root cause is the presence of this backdoor in the distributed package. Document...

CVE-2022-41381

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-lists version 0.1.0, which stems from the presence of a potential code execution package, democritus-dicts, inserte...

CVE-2022-41384

Summary (CVE-2022-41384) The Python PyPI package d8s-domains (version 0.1.0) was found to include a potential code‑execution backdoor introduced by a third party (the democritus-urls package). This backdoor is the stated vulnerability mechanism and is the primary cause of the CVE. The connected d...

PT-2022-26212 · Pypi · D8S-Urls +1

Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. Recommendations: For version 0.1....

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-urls, which arises from the distribution of the package containing a potential code execution backdoor inserted by...

PT-2022-26213 · Pypi · Democritus-Csv +1

Name of the Vulnerable Software and Affected Versions: d8s-asns version 0.1.0 Description: The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. Recommendations: For version 0.1....

PT-2022-37340 · Pypi · Democritus-Csv +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-csv package, which was inserted by a third party. Recommendations:...

CVE-2022-41382

The CVE-2022-41382 issue affects the d8s-json package for Python distributed on PyPI, with the demo extracted backdoor democritus-file-system injected by a third party in version 0.1.0. The vulnerability enables potential code execution (described as a backdoor backdoor in the PyPI package), carr...

PT-2022-26220 · Pypi · Democritus-Html +1

Name of the Vulnerable Software and Affected Versions: d8s-asns version 0.1.0 Description: The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. Recommendations: For version...

CVE-2022-41384

The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

CVE-2022-42039

The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0...

PT-2022-25837 · Pypi · D8S-Utility +1

Name of the Vulnerable Software and Affected Versions: d8s-utility version 0.1.0 Description: The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. Recommendations: For versi...

CVE-2022-42038

The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

CVE-2022-42041

The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0...

PT-2022-26217 · Pypi · D8S-File-System +1

Name of the Vulnerable Software and Affected Versions: d8s-file-system version 0.1.0 Description: The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. Recommendations:...

CVE-2022-42039

The CVE-2022-42039 entry concerns the Python package d8s-lists (PyPI) with a backdoor inserted by a third party: the democritus-dicts package, affecting version 0.1.0. According to connected sources, this allows potential code execution if the compromised package is installed. The CVSSv3.1 base s...