CVE-2022-32996

CVE-2022-32996 affects the django-navbar-client package, version 0.9.50 through 1.0.1. Multiple connected documents describe a code execution backdoor introduced via the request package, enabling an attacker to execute arbitrary code and access sensitive user information and digital currency keys...

Velociraptor Version 0.6.5: Table Transformations, Multi-Lingual Support, and Better VQL Error-Handling Let You Dig Deeper Than Ever

Rapid7 is pleased to announce the release of Velociraptor version 0.6.5 – an advanced, open-source digital forensics and incident response DFIR tool that enhances visibility into your organization’s endpoints. This release has been in development and testing for several months now, and we are...

Zibal 安全漏洞

Zibal is the Zibal payment gateway. A security vulnerability exists in Zibal. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

Togglee 安全漏洞

Togglee is a simple library for separating feature deployment from release time. A security vulnerability exists in Togglee. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

PT-2022-21994

Name of the Vulnerable Software and Affected Versions Togglee version v0.0.8 Description The Togglee package was discovered to contain a code execution backdoor, allowing attackers to access sensitive user information and digital currency keys, as well as escalate privileges. Recommendations For...

Watertools 安全漏洞

Watertools is a data acquisition and data processing tool for remote sensing data by an individual developer. A security vulnerability exists in the Watertools package for PyPI version v0.0.0. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, ...

drxhello 安全漏洞

drxhello is a pip package for individual developers. A security vulnerability exists in the PyPI v0.0.1 version of the drxhello package. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

PT-2022-21631

Name of the Vulnerable Software and Affected Versions RootInteractive versions 0.0.5 through 0.0.19b0 Description The RootInteractive package was discovered to contain a code execution backdoor via the request package. This issue allows attackers to access sensitive user information and digital...

watools 安全漏洞

watools is the Water Accounting plus WA+ toolkit. A security vulnerability exists in watools. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

Beginner 安全漏洞

Beginner is a handy code package for Python beginners. A security vulnerability exists in Beginner. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

Perdido 安全漏洞

Perdido is a Python text geoanalyzer. It provides NLP and GIS methods for parsing French text. A security vulnerability exists in Perdido. An attacker could exploit this vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

DR-Web-Engine 安全漏洞

DR-Web-Engine is built on python based on the lxml package and uses JSON as the query structure. A security vulnerability exists in DR-Web-Engine. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

cryptoasset-data-downloader 安全漏洞

cryptoasset-data-downloader is a desktop application that downloads historical data on desired crypto assets by connecting to the APIs of several different crypto exchanges. A security vulnerability exists in cryptoasset-data-downloader. An attacker exploited the vulnerability to access sensitive...

AAmiles 安全漏洞

AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

rondolu-yt-concate 安全漏洞

rondolu-yt-concate is a pip package for individual developers. A security vulnerability exists in the rondolu-yt-concate package in PyPI version v0.1.0. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

PT-2022-21636

Name of the Vulnerable Software and Affected Versions AAmiles package in PyPI version 0.1.0 Description The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges, via a code execution backdoor in the request package. Recommendations...

IBM Financial Transaction Manager for Digital Payments SQL注入漏洞

IBM Financial Transaction Manager for Digital Payments is a financial transaction manager from IBM Corporation in the United States. IBM Financial Transaction Manager for Digital Payments for Multi-Platform versions 3.2.0 through 3.2.9 are vulnerable to SQL injection, which can be exploited by...

KGExplore 安全漏洞

KGExplore is a publicly available knowledge graph exploration project for individual developers. A security vulnerability exists in the KGExplore package for PyPI versions v0.1.1 through v0.1.2. An attacker exploited the vulnerability to access sensitive user information and digital currency keys...

Texercise 安全漏洞

Texercise is a python package. A security vulnerability exists in the Texercise package. An attacker exploits the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

AAmiles 安全漏洞

AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...