Lucene search
+L

953 matches found

OSV
OSV
•added 2022/09/19 3:15 p.m.•12 views

PYSEC-2022-43105

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

9.8CVSS7.2AI score
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2022/09/19 3:15 p.m.•4 views

d8s-timer (0.1.0) potentially affected by unknown CVE via democritus-dates (2021.2.1101)

democritus-dates PYPI version 2021.2.1101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-dates and may be impacted: - d8s-timer 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSDATES-8400836...

5.4AI score
SaveExploits0
Snyk
Snyk
•added 2022/09/19 3:15 p.m.•5 views

Malicious Package

Overview democritus-dates is a malicious package. This package is used for dependency confusion attempts and contains malicious code. The package now exists as a placeholder on PyPI. Remediation Avoid using all malicious instances of the democritus-dates package. References - GitHub Issue - GitHu...

9.8CVSS6.9AI score
SaveExploits0References3
Mend
Mend
•added 2022/09/19 3:00 p.m.•2 views

CVE-2022-40808

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

9.8CVSS0.0136EPSS
SaveExploits1References4
CVE
CVE
•added 2022/09/19 3:00 p.m.•66 views

CVE-2022-40808

CVE-2022-40808 affects the Python package d8s-dates distributed on PyPI, where a third-party backdoor (democritus-hypothesis) in version 0.1.0 enables potential remote code execution. Affected component is the d8s-dates package as shipped; root cause is insertion of a code-execution backdoor by a...

9.8CVSS9.4AI score0.0136EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/09/19 3:00 p.m.•25 views

CVE-2022-40808

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

6.9AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2022/09/19 12:00 a.m.•17 views

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A code execution vulnerability exists in Democritus Project version 0.1.0, which stems from a potential code execution backdoor in d8s-dates inserted by a third party, which...

9.8CVSS8.3AI score0.0136EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/09/19 12:00 a.m.•10 views

PT-2022-37368 · Pypi · D8S-Dates +1

Name of the Vulnerable Software and Affected Versions: d8s-dates version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-dates package for python, distributed on PyPI. The backdoor is related to the democritus-hypothesis package. Recommendations:...

9.8CVSS7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/19 12:00 a.m.•13 views

PT-2022-25547 · Pypi · D8S-Dates +1

Name of the Vulnerable Software and Affected Versions: d8s-dates version 0.1.0 Description: The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. Recommendations: For version...

9.8CVSS9.5AI score0.0136EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/19 12:00 a.m.•4 views

CVE-2022-40808: Undefined Security Weakness

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

9.8CVSS8.2AI score0.0136EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/09/15 6:50 p.m.•13 views

Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Process Server

Summary WebSphere Application Server is shipped as a component of WebSphere Process Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...

6.6AI score
SaveExploits0Affected Software2
Circl
Circl
•added 2022/09/05 4:12 p.m.•48 views

CVE-2022-2376

creationtimestamp| type| source ---|---|--- 2022-09-05 16:12:11+00:00| seen| https://t.me/cibsecurity/49285 2024-11-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-25 2024-11-28 00:00:00+00:00| exploited| The Shadowserver...

5.3CVSS6AI score0.01836EPSS
SaveIn wildExploits2References4
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•31 views

Ubuntu: Security Advisory (USN-5109-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.03258EPSS
SaveExploits1References2
Citrix
Citrix
•added 2022/08/19 12:00 a.m.•22 views

Additional Lifecycle Information for Receiver for Mac

This article is a supplement to theLifecycle Milestones for Citrix Workspace App and Citrix Receiver . It provides additional details on End of Maintenance and End of Support dates for the listed versions of Citrix Receiver for Mac. Additional Lifecycle Information for Receiver for Mac Receiver f...

7.2AI score
SaveExploits0
Circl
Circl
•added 2022/08/18 12:40 a.m.•47 views

CVE-2022-1373

creationtimestamp| type| source ---|---|--- 2022-08-18 00:40:43+00:00| seen| https://t.me/cibsecurity/48303 2024-07-19 17:55:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/softingsisrce.rb 2025-02-06 03:13:45+00:00| seen|...

7.2CVSS7.2AI score0.12802EPSS
SaveExploits3References3
Circl
Circl
•added 2022/08/03 1:20 p.m.•18 views

CVE-2022-20345

creationtimestamp| type| source ---|---|--- 2022-08-03 13:20:04+00:00| seen| https://t.me/truesecator/3248 2022-08-04 07:00:05+00:00| seen| https://t.me/TopCyberTechNews/83 2022-08-11 00:26:13+00:00| seen| https://t.me/cibsecurity/47890 2022-08-20 17:00:04+00:00| seen| https://t.me/poxek/2320...

8.8CVSS8.1AI score0.00466EPSS
SaveExploits0References4
Fedora
Fedora
•added 2022/07/30 2:00 a.m.•21 views

[SECURITY] Fedora 36 Update: golang-github-rickb777-date-1.19.1-3.fc36

A Go package for working with dates...

7.3AI score
SaveExploits0
Circl
Circl
•added 2022/07/25 6:39 p.m.•15 views

CVE-2022-34961

creationtimestamp| type| source ---|---|--- 2022-07-25 18:39:15+00:00| seen| https://t.me/cibsecurity/46931 2022-07-26 14:26:03+00:00| published-proof-of-concept| https://t.me/intelexch/15828 2022-07-26 16:33:25+00:00| seen| Telegram/FFymLLIK1VykiTo0qiu5oiOuLgw0sFOxywUPTyY6TqRLAw 2022-07-30...

5.4CVSS5.5AI score0.01098EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2022/07/21 12:00 a.m.•13 views

Fedora: Security Advisory for golang-github-rickb777-date (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/07/20 1:40 a.m.•18 views

[SECURITY] Fedora 35 Update: golang-github-rickb777-date-1.15.3-4.fc35

A Go package for working with dates...

7.3AI score
SaveExploits0
Rows per page
Query Builder