CVE-2022-33002

The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33001

The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33001

Technical details about CVE-2022-33001 are not publicly provided in the supplied documents. Monitor for updates from NVD/Red Hat/Veracode reports to obtain affected versions, exploit details, and remediations.

CVE-2022-33000

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33000

CVE-2022-33000 concerns the ML-Scanner package on PyPI, versions v0.1.0–v0.1.5, which reportedly contains a code execution backdoor via the request package. The vulnerability, as described across multiple sources, could allow an attacker to access sensitive user information and digital currency k...

CVE-2022-32998

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32999

The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32998

The CVE-2022-32998 entry concerns the cryptoasset-data-downloader package for PyPI, affected versions 1.0.0 through 1.0.1. The root cause is a code execution backdoor introduced via the requests package, enabling an attacker to execute arbitrary code. Reported impact includes access to sensitive ...

CVE-2022-32999

CVE-2022-32999 affects the Python package cloudlabeling on PyPI, version 0.0.1. The vulnerability is a code execution backdoor introduced via the dependency on the request package, enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. Docu...

CVE-2022-32997

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32997

RootInteractive PyPI package versions v0.0.5–v0.0.19b0 are affected by a code execution backdoor introduced via the request package, enabling an attacker to access sensitive user data and digital currency keys and to escalate privileges. The issue is described across multiple sources as a backdoo...

CVE-2022-32996

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-32996

CVE-2022-32996 affects the django-navbar-client package, version 0.9.50 through 1.0.1. Multiple connected documents describe a code execution backdoor introduced via the request package, enabling an attacker to execute arbitrary code and access sensitive user information and digital currency keys...

DR-Web-Engine 安全漏洞

DR-Web-Engine is built on python based on the lxml package and uses JSON as the query structure. A security vulnerability exists in DR-Web-Engine. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

AAmiles 安全漏洞

AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

Perdido 安全漏洞

Perdido is a Python text geoanalyzer. It provides NLP and GIS methods for parsing French text. A security vulnerability exists in Perdido. An attacker could exploit this vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

PyPI cloudlabeling 安全漏洞

PyPI is a software repository for Python's official third-party software suite from the Python Foundation. cloudlabeling is an API for individual developers to deploy CloudLabeling locally. A security vulnerability exists in the PyPI v0.0.1 version of the cloudlabeling package. An attacker...

Watertools 安全漏洞

Watertools is a data acquisition and data processing tool for remote sensing data by an individual developer. A security vulnerability exists in the Watertools package for PyPI version v0.0.0. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, ...

Catly-Translate 安全漏洞

Catly-Translate is the easy-to-use Baidu translation method. A security vulnerability exists in Catly-Translate. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

KGExplore 安全漏洞

KGExplore is a publicly available knowledge graph exploration project for individual developers. A security vulnerability exists in the KGExplore package for PyPI versions v0.1.1 through v0.1.2. An attacker exploited the vulnerability to access sensitive user information and digital currency keys...