Lucene search
+L

27 matches found

ATTACKERKB
ATTACKERKB
added 2022/09/19 4:15 p.m.5 views

CVE-2022-40430

The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS7.3AI score0.01328EPSS
SaveExploits1References3
PyPA
PyPA
added 2022/09/19 4:15 p.m.14 views

PYSEC-2022-43116

The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS7AI score0.01328EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/09/19 4:15 p.m.8 views

PYSEC-2022-43116

The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS5.9AI score
SaveExploits0References2
CVE
CVE
added 2022/09/19 3:21 p.m.53 views

CVE-2022-40430

The CVE-2022-40430 issue affects the Python package d8s-utility (PyPI) where a backdoor component, democritus-networking, was inserted into version 0.1.0, enabling potential remote code execution. Connected sources consistently describe a third-party backdoor in the distribution that can lead to ...

9.8CVSS9.4AI score0.01328EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/09/19 3:21 p.m.15 views

CVE-2022-40430

The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

6.9AI score
SaveExploits0References4
vulnersOsv
vulnersOsv
added 2022/09/19 3:15 p.m.4 views

d8s-archives (0.1.0), d8s-json (0.1.0) +4 more potentially affected by unknown CVE via democritus-file-system (2021.1.2701)

democritus-file-system PYPI version 2021.1.2701 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-file-system and may be impacted: - d8s-archives 0.1.0 - d8s-json 0.1.0 - d8s-pdfs 0.1.0 - d8s-urls 0.1.0 - d8s-utility 0.1.0 - d8s-yaml 0.1.0...

5.4AI score
SaveExploits0
CNNVD
CNNVD
added 2022/09/19 12:00 a.m.10 views

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-utility version 0.1.0 that originates from a potential code execution backdoor inserted by a third party...

9.8CVSS8.8AI score0.01328EPSS
SaveExploits1References3
Rows per page
Query Builder