CVE-2022-34061

CVE-2022-34061 concerns the Catly-Translate PyPI package, where versions 0.0.3–0.0.5 are described as containing a code execution backdoor. The description notes attacker access to sensitive user information and digital currency keys, plus privilege escalation. The initial and connected records i...

CVE-2022-34064

CVE-2022-34064 affects the PyPI package zibal (v1.0.0). Multiple connected sources describe a code execution backdoor in Zibal, enabling an attacker to execute arbitrary code and access sensitive user information and digital currency keys, with privilege escalation. The documents do not specify a...

CVE-2022-34060

Technical details (affected products, root cause, versions, exploits) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2022-34060

The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34059

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34059

CVE-2022-34059 concerns the Sixfab-Tool package for PyPI (versions 0.0.2–0.0.3). The provided documents attribute a code execution backdoor introduced via the requests usage, enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. The core v...

CVE-2022-34057

The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34056

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34057

The CVE-2022-34057 entry concerns the Scoptrial package on PyPI (version v0.0.5). A code execution backdoor via the request package is described, enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. The connected documents confirm a backd...

CVE-2022-34056

CVE-2022-34056 affects the Watertools package for PyPI, v0.0.0. Connected sources identify a code execution backdoor introduced via the request package, enabling an attacker to run arbitrary code and access sensitive data (including digital currency keys) and escalate privileges. The issue is des...

CVE-2022-34054

The CVE-2022-34054 entry concerns the Perdido package on PyPI (versions 0.0.1–0.0.2) that allegedly contains a code execution backdoor introduced via the request package. Reported impact in sources includes access to sensitive user information and digital currency keys, with privilege escalation....

CVE-2022-34055

The CVE-2022-34055 entry concerns the drxhello PyPI package (version 0.0.1). Documents describe a code execution backdoor introduced via the request package, enabling attackers to access sensitive user information and digital currency keys and to escalate privileges. Affected component is the drx...

CVE-2022-34054

The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34055

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34053

CVE-2022-34053 concerns the DR-Web-Engine package for PyPI, v0.2.0b0, featuring a code execution backdoor via the request package. The root cause is a backdoor enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. Documented sources (NVD, ...

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33004

The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33004

CVE-2022-33004 affects the PyPI Beginner package (v0.0.2–v0.0.4) via the request package, described as a code execution backdoor. Exploitation could grant access to sensitive user data and digital currency keys and enable privilege escalation. The incident is documented across multiple sources (N...

CVE-2022-33002

CVE-2022-33002 affects the KGExplore package for PyPI, versions v0.1.1–v0.1.2. All connected sources describe a code execution backdoor introduced via the request package, enabling attackers to access sensitive user information and digital currency keys and to escalate privileges. The root cause ...

CVE-2022-33003

The watools package for Python (PyPI) versions 0.0.1–0.0.8 contains a code execution backdoor via the request package, enabling attackers to access sensitive user information and digital currency keys and to escalate privileges. Root cause: backdoor in watools; vulnerable component: watools packa...