Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-0370

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.00439EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/22 10:59 p.m.5 views

CVE-2022-32999

The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.7AI score0.00439EPSS
Exploits1References1
Veracode
Veracode
added 2022/06/27 5:57 a.m.36 views

Remote Code Execution Backdoor

cloudlabeling is vulnerable to remote code execution. The use of the request package opens up a code execution backdoor, allowing an attacker to perform unauthorized actions and accesses to sensitive information and digital currency keys...

9.8CVSS9.4AI score0.00439EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2022/06/24 9:15 p.m.6 views

CVE-2022-32999

The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS0.00439EPSS
Exploits1References3
OSV
OSV
added 2022/06/24 9:15 p.m.1 views

CVE-2022-32999

The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.2AI score
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/06/24 9:15 p.m.0 views

CVE-2022-32999

The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.2AI score0.00439EPSS
Exploits1References4
PyPA
PyPA
added 2022/06/24 9:15 p.m.4 views

PYSEC-2022-43073

The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8AI score0.00439EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/06/24 9:15 p.m.1 views

PYSEC-2022-43073

The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score
Exploits0References3
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.1 views

PyPI cloudlabeling 安全漏洞

PyPI is a software repository for Python's official third-party software suite from the Python Foundation. cloudlabeling is an API for individual developers to deploy CloudLabeling locally. A security vulnerability exists in the PyPI v0.0.1 version of the cloudlabeling package. An attacker...

9.8CVSS8.4AI score0.00439EPSS
Exploits1References4
Rows per page
Query Builder