Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:56 a.m.•18 views

CVE-2022-38885

The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

9.8CVSS8.5AI score0.01699EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2022-0374

Malicious code in bioql PyPI...

9.8CVSS8.6AI score0.01699EPSS
SaveExploits1References4
PyPA
PyPA
•added 2022/09/19 4:15 p.m.•26 views

PYSEC-2022-43123

The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

9.8CVSS7AI score0.01699EPSS
SaveExploits1References4Affected Software1
osv_pysec
osv_pysec
•added 2022/09/19 4:15 p.m.•23 views

PYSEC-2022-43080

The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

9.8CVSS7.2AI score
SaveExploits0References3
osv_pysec
osv_pysec
•added 2022/09/19 4:15 p.m.•24 views

PYSEC-2022-43123

The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

9.8CVSS7.2AI score
SaveExploits0References3
Mend
Mend
•added 2022/09/19 3:34 p.m.•6 views

CVE-2022-38885

The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

9.8CVSS0.01699EPSS
SaveExploits1References5
CVE
CVE
•added 2022/09/19 3:34 p.m.•82 views

CVE-2022-38885

CVE-2022-38885 concerns the Python package d8s-netstrings (PyPI), where a third-party backdoor in the democritus-strings package affects version 0.1.0. Multiple connected sources describe a potential remote code execution backdoor that could allow an attacker to run arbitrary code on a vulnerable...

9.8CVSS9.4AI score0.01699EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/19 12:00 a.m.•5 views

CVE-2022-38885: Unrestricted Upload of File with Dangerous Type

The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

9.8CVSS8.2AI score0.01699EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/09/19 12:00 a.m.•38 views

PT-2022-24610 · Pypi · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-netstrings version 0.1.0 Description: The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. Recommendations: For...

9.8CVSS9.6AI score0.01699EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/09/19 12:00 a.m.•2 views

PT-2022-37386

Name of the Vulnerable Software and Affected Versions d8s-netstrings version 0.1.0 Description The d8s-netstrings package for Python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-strings package, which was inserted by a third...

9.8CVSS5.8AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2022/09/19 12:00 a.m.•20 views

Democritus Project code-related vulnerabilities

Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-netstrings version 0.1.0, which stems from the presence of a potential code execution backdoor inserted by a third...

9.8CVSS8.8AI score0.01699EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/09/19 12:00 a.m.•12 views

PT-2022-37343 · Pypi · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-netstrings version 0.1.0 Description: The d8s-netstrings package for Python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-strings package, which was inserted by a third...

9.8CVSS7.2AI score
SaveExploits0References4
Rows per page
Query Builder