CVE-2022-41381

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

PT-2022-37340 · Pypi · Democritus-Csv +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-csv package, which was inserted by a third party. Recommendations:...

PT-2022-26212 · Pypi · D8S-Urls +1

Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. Recommendations: For version 0.1....

CVE-2022-42039

The CVE-2022-42039 entry concerns the Python package d8s-lists (PyPI) with a backdoor inserted by a third party: the democritus-dicts package, affecting version 0.1.0. According to connected sources, this allows potential code execution if the compromised package is installed. The CVSSv3.1 base s...

CVE-2022-41385

CVE-2022-41385 affects the Python d8s-html package from PyPI (version 0.1.0). Multiple connected sources confirm a backdoor (democritus-urls) inserted by a third party, creating a potential code execution vector. The root cause is the presence of this backdoor in the distributed package. Document...

CVE-2022-41387

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

CVE-2022-41383

The CVE-2022-41383 entry concerns the PyPI package d8s-archives for Python (version 0.1.0) that reportedly shipped with a third‑party inserted backdoor in the democritus-file-system component. Connected records consistently describe the issue as code execution via a backdoor present in this packa...

CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-utility version 0.1.0, which stems from the presence of a potential code execution package democritus-file-system...

CVE-2022-41382

The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

CVE-2022-41382

The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

PT-2022-26215 · Pypi · D8S-Lists +1

Name of the Vulnerable Software and Affected Versions: d8s-lists version 0.1.0 Description: The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. Recommendations: For version...

PT-2022-25831 · D8S-Yaml +1 · D8S-Yaml +1

Name of the Vulnerable Software and Affected Versions: d8s-yaml version 0.1.0 Description: The d8s-yaml package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-file-system package, which was inserted by a third party. Recommendations: For...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus, Inc. A security vulnerability exists in Democritus Project d8s-domains, which arises from the distribution of a software package that contains a potential code execution...

CVE-2022-41381

CVE-2022-41381 affects the PyPI package d8s-utility (version 0.1.0); a third-party‑inserted backdoor (democritus-file-system) enables potential remote code execution. Available connected releases identify the backdoor and the affected version, with high impact across confidentiality, integrity, a...

CVE-2022-41386

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

PT-2022-26218 · Pypi · D8S-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-networking version 0.1.0 Description: The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. Recommendations: F...

CVE-2022-41380

The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

CVE-2022-42042

The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0...

CVE-2022-41384

The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...