Lucene search
K

238 matches found

OSV
OSV
added 2022/09/19 2:15 p.m.1 views

PYSEC-2022-43118

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

9.8CVSS7.2AI score
Exploits0References2
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.2 views

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus, Inc. A security vulnerability exists in Democritus Project d8s-urls version 0.1.0 that originates from a potential code execution backdoor inserted by a third party...

9.8CVSS8.8AI score0.00719EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.3 views

PT-2022-37342 · Unknown +1 · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-math version 0.1.0 Description: The d8s-math library for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-strings package, which was inserted by a third party. Recommendations: For version...

9.8CVSS7.2AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.1 views

PT-2022-37364 · Pypi · D8S-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-strings version 0.1.0 Description: The d8s-strings package for Python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-hypothesis package, which was inserted by a third part...

9.8CVSS7AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.1 views

PT-2022-37383 · Pypi · D8S-Json +1

Name of the Vulnerable Software and Affected Versions: d8s-json version 0.1.0 Description: The d8s-json package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-strings package, which was inserted by a third party. Recommendations: For version...

9.8CVSS7.2AI score
Exploits0References4
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.2 views

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus, Inc. A security vulnerability exists in Democritus Project d8s-url version 0.1.0 that stems from a potential code execution backdoor...

9.8CVSS8.8AI score0.00719EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.3 views

PT-2022-37387 · Pypi · D8S-Xml +1

Name of the Vulnerable Software and Affected Versions: d8s-xml version 0.1.0 Description: The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. Recommendations: For version 0.1.0, avo...

9.8CVSS7AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.4 views

PT-2022-37370 · Pypi · Democritus-Hypothesis +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is inserted by a third party through the democritus-hypothesis package...

9.8CVSS7.4AI score
Exploits0References3
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.2 views

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus, Inc. A security vulnerability exists in Democritus Project d8s-urls version 0.1.0 that originates from a potential code execution backdoor inserted by a third party...

9.8CVSS8.8AI score0.00719EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.4 views

PT-2022-25377 · Unknown +1 · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-mpeg version 0.1.0 Description: The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...

9.8CVSS9.6AI score0.00391EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.3 views

PT-2022-24605 · Pypi · D8S-Urls

Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. Recommendations: For version 0.1.0, avoid using the affected package until a fixed...

9.8CVSS9.5AI score0.0043EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.1 views

PT-2022-37375 · Unknown +1 · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-asns version 0.1.0 Description: The d8s-asns package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-networking package, which was inserted by a third party. Recommendations: For...

9.8CVSS7.2AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.2 views

PT-2022-24610 · Pypi · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-netstrings version 0.1.0 Description: The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. Recommendations: For...

9.8CVSS9.6AI score0.00796EPSS
Exploits1References6
OSV
OSV
added 2022/08/27 8:15 p.m.9 views

PYSEC-2022-43134

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

9.8CVSS9.7AI score0.00579EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/08/27 12:0 a.m.1 views

PT-2022-24570 · Pypi · Exotel

Name of the Vulnerable Software and Affected Versions: exotel aka exotel-py version 0.1.6 Description: The exotel package in PyPI includes a code execution backdoor inserted by a third party. This backdoor allows for code execution, posing a significant security risk. Users should be aware of thi...

9.8CVSS9.6AI score0.00579EPSS
Exploits0References12
CNNVD
CNNVD
added 2022/08/27 12:0 a.m.2 views

exotel 安全漏洞

exotel is a Python module for exotels calls and sms api. A security vulnerability exists in PyPI exotel package version 0.1.6, which stems from including a code execution backdoor inserted by a third party...

9.8CVSS7.5AI score0.00579EPSS
Exploits0References5
NVD
NVD
added 2022/07/22 3:15 p.m.12 views

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

9.8CVSS0.00776EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/07/22 3:15 p.m.1 views

CVE-2022-34501

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

9.8CVSS6.3AI score0.00532EPSS
Exploits0References4
OSV
OSV
added 2022/07/22 3:15 p.m.1 views

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

9.8CVSS6.2AI score
Exploits0References3
OSV
OSV
added 2022/07/22 3:15 p.m.1 views

CVE-2022-34509

The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party...

9.8CVSS6.2AI score0.00776EPSS
Exploits0References3
Rows per page
Query Builder