EUVD-2022-0395

Malicious code in bioql PyPI...

EUVD-2022-0066

Malicious code in bioql PyPI...

EUVD-2022-5414

Malicious code in bioql PyPI...

EUVD-2022-0410

Malicious code in bioql PyPI...

EUVD-2022-0133

Malicious code in bioql PyPI...

EUVD-2022-0381

Malicious code in bioql PyPI...

EUVD-2022-0056

Malicious code in bioql PyPI...

EUVD-2022-0059

Malicious code in bioql PyPI...

EUVD-2022-0383

Malicious code in bioql PyPI...

EUVD-2022-0386

Malicious code in bioql PyPI...

EUVD-2022-0071

Malicious code in bioql PyPI...

EUVD-2022-0377

Malicious code in bioql PyPI...

CVE-2025-34061 PHPStudy 2016-2018 Backdoor Remote Code Execution Vulnerability

A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations. The backdoor listens for base64-encoded PHP payloads in the Accept-Charset HTTP header of incoming requests, decodes and executes the payload without...

PT-2025-27824 · Phpstudy · Phpstudy

Name of the Vulnerable Software and Affected Versions: PHPStudy versions 2016 through 2018 Description: A backdoor in PHPStudy allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations. The backdoor listens for base64-encoded PHP payloads in the Accept-Charse...

CVE-2022-43306

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0...

CVE-2022-34055

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-38883

The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

CVE-2022-41382

The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

CVE-2022-42044

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...