Lucene search
+L

24 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 12:39 a.m.•20 views

CVE-2022-40425

The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS8.5AI score0.0136EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:07 p.m.•23 views

CVE-2022-41385

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS8.5AI score0.01633EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/10/13 12:00 a.m.•49 views

Democritus Project d8s-html Code Execution Vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-html version 0.1.0, which stems from the presence of a potential code execution package, democritus-urls, inserted ...

9.8CVSS9.6AI score0.01633EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
•added 2022/10/11 10:15 p.m.•3 views

d8s-asns (0.5.0) potentially affected by CVE-2022-41385 via d8s-html (0.3.0)

d8s-html PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-html and may be impacted: - d8s-asns 0.5.0 Source cves: CVE-2022-41385 Source advisory: OSV:PYSEC-2022-43025...

9.8CVSS8.3AI score0.01633EPSS
SaveExploits1
PyPA
PyPA
•added 2022/10/11 10:15 p.m.•15 views

PYSEC-2022-43025

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS7AI score0.01633EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
•added 2022/10/11 10:15 p.m.•15 views

PYSEC-2022-43048

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS7AI score0.01633EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2022/10/11 10:15 p.m.•26 views

Code injection

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

7.5CVSS9.4AI score0.01633EPSS
SaveExploits1References3Affected Software1
osv_pysec
osv_pysec
•added 2022/10/11 10:15 p.m.•23 views

PYSEC-2022-43025

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS7.2AI score0.01633EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/10/11 12:00 a.m.•12 views

CVE-2022-41385

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

6.8AI score0.01633EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/11 12:00 a.m.•5 views

CVE-2022-41385: Unrestricted Upload of File with Dangerous Type

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS8.2AI score0.01633EPSS
SaveExploits1References3
Mend
Mend
•added 2022/10/11 12:00 a.m.•8 views

CVE-2022-41385

The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

9.8CVSS0.01633EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•20 views

PT-2022-25836 · Pypi · D8S-Htm +1

Name of the Vulnerable Software and Affected Versions: d8s-html version 0.1.0 Description: The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. Recommendations: For version...

9.8CVSS9.6AI score0.01633EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•23 views

Democritus Project code-related vulnerabilities

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-html version 0.1.0, which stems from the presence of a potential code execution package, democritus-urls, inserted ...

9.8CVSS9.3AI score0.01633EPSS
SaveExploits1References4
CVE
CVE
•added 2022/10/11 12:00 a.m.•90 views

CVE-2022-41385

CVE-2022-41385 affects the Python d8s-html package from PyPI (version 0.1.0). Multiple connected sources confirm a backdoor (democritus-urls) inserted by a third party, creating a potential code execution vector. The root cause is the presence of this backdoor in the distributed package. Document...

9.8CVSS9.4AI score0.01633EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2022/09/19 4:15 p.m.•13 views

CVE-2022-40425

The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS7.3AI score0.0136EPSS
SaveExploits1References3
osv_pysec
osv_pysec
•added 2022/09/19 4:15 p.m.•18 views

PYSEC-2022-43111

The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS5.9AI score
SaveExploits0References2
PyPA
PyPA
•added 2022/09/19 4:15 p.m.•28 views

PYSEC-2022-43111

The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS7AI score0.0136EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2022/09/19 3:15 p.m.•77 views

CVE-2022-40425

The CVE-2022-40425 entry refers to the PyPI package d8s-html (Python) where version 0.1.0 bundles a backdoor via the third‑party democritus-networking package. The vulnerability is described as potential remote code execution with a high impact across confidentiality, integrity, and availability ...

9.8CVSS9.4AI score0.0136EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/09/19 3:15 p.m.•6 views

CVE-2022-40425

The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS0.0136EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/19 12:00 a.m.•8 views

CVE-2022-40425: Undefined Security Weakness

The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS8.2AI score0.0136EPSS
SaveExploits1References1
Rows per page
Query Builder