Lucene search
+L

8223 matches found

Cvelist
Cvelist
added 2022/10/11 12:00 a.m.48 views

CVE-2022-42042

The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0...

9.8AI score0.01264EPSS
SaveExploits1References3
CVE
CVE
added 2022/10/11 12:00 a.m.53 views

CVE-2022-42036

CVE-2022-42036 affects the Python package d8s-urls (distributed on PyPI); the 0.1.0 release allegedly contained a third-party injected backdoor named democritus-csv that enables code execution. Multiple connected records (Red Hat, OSV, NVD, PRION, ENISA/EUVD adapters, OSV, PySEC advisories) confi...

9.8CVSS9.4AI score0.01264EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/10/11 12:00 a.m.39 views

CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

9.8AI score0.01264EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/10/11 12:00 a.m.8 views

CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

6.8AI score0.01264EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/10/11 12:00 a.m.6 views

CVE-2022-41380

The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

9.5AI score0.01264EPSS
SaveExploits1References3
OSV
OSV
added 2022/10/11 12:00 a.m.20 views

CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

9.8CVSS9.6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2022/10/11 12:00 a.m.25 views

CVE-2022-41381

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

9.8AI score0.01264EPSS
SaveExploits1References3
OSV
OSV
added 2022/10/11 12:00 a.m.19 views

CVE-2022-41385

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS9.6AI score
SaveExploits0References5
OSV
OSV
added 2022/10/11 12:00 a.m.19 views

CVE-2022-41380

The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

9.8CVSS9.6AI score
SaveExploits0References5
CVE
CVE
added 2022/10/11 12:00 a.m.72 views

CVE-2022-42044

The CVE-2022-42044 issue concerns the d8s-asns package for Python (PyPI), with a backdoor component democritus-html inserted by a third party in version 0.1.0. Affected component/file is the PyPI package content that includes the democritus-html backdoor, enabling potential code execution. Exploi...

9.8CVSS9.4AI score0.01264EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2022/10/11 12:00 a.m.69 views

CVE-2022-42038

CVE-2022-42038 affects the Python package d8s-ip-addresses on PyPI, with version 0.1.0 containing a backdoor (democritus-csv) inserted by a third party that can enable remote code execution. The issue is documented across multiple connected sources confirming a code-execution backdoor rather than...

9.8CVSS9.5AI score0.01264EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/11 12:00 a.m.4 views

CVE-2022-42043

The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

6.8AI score0.01264EPSS
SaveExploits1References3
CVE
CVE
added 2022/10/11 12:00 a.m.78 views

CVE-2022-42042

The issue centers on d8s-networking for Python (PyPI): version 0.1.0 allegedly contains a third‑party backdoor, democritus-hashes, enabling potential code execution. Red Hat and CNVD entries reiterate the same description; Red Hat notes the affected version 0.1.0 and branding as a Python PyPI pac...

9.8CVSS9.4AI score0.01264EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/11 12:00 a.m.13 views

PT-2022-25835 · Pypi · D8S-Domains +1

Name of the Vulnerable Software and Affected Versions: d8s-domains version 0.1.0 Description: The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. Recommendations: For versi...

9.8CVSS9.5AI score0.01264EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.11 views

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-utility version 0.1.0, which stems from the presence of a potential code execution package democritus-urls inserted...

9.8CVSS9.3AI score0.01264EPSS
SaveExploits1References4
CVE
CVE
added 2022/10/11 12:00 a.m.55 views

CVE-2022-41386

The CVE-2022-41386 entry concerns the d8s-utility package for Python (PyPI), where a third-party backdoor (democritus-urls) was inserted into version 0.1.0, enabling potential remote code execution. Connected sources confirm the backdoor presence in the PyPI distribution and describe the resultin...

9.8CVSS9.4AI score0.01264EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/11 12:00 a.m.7 views

CVE-2022-42040

The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0...

6.8AI score0.05173EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.11 views

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-ip version 0.1.0, which stems from the presence of a potential code execution package, democritus-csv, inserted by ...

9.8CVSS9.3AI score0.01264EPSS
SaveExploits1References4
CVE
CVE
added 2022/10/11 12:00 a.m.69 views

CVE-2022-42040

The CVE-2022-42040 entry concerns the Python package d8s-algorithms (PyPI) with version 0.1.0 affected by a backdoor injected by a third party (democritus-dicts), enabling potential remote code execution. Connected sources consistently describe the issue as a backdoor compromising the package dis...

9.8CVSS9.4AI score0.05173EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/10/11 12:00 a.m.54 views

CVE-2022-42044

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

9.8AI score0.01264EPSS
SaveExploits1References3
Rows per page
Query Builder