Lucene search
K

7 matches found

NVD
NVD
added 2022/06/24 9:15 p.m.10 views

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS0.00734EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/06/24 9:15 p.m.1 views

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.3AI score0.00734EPSS
Exploits1References4
OSV
OSV
added 2022/06/24 9:15 p.m.1 views

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.2AI score0.00734EPSS
Exploits1References3
Prion
Prion
added 2022/06/24 9:15 p.m.8 views

Design/Logic Flaw

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

7.5CVSS9.7AI score0.00734EPSS
Exploits1References3Affected Software1
PyPA
PyPA
added 2022/06/24 9:15 p.m.4 views

PYSEC-2022-43132

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8AI score0.00734EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2022/06/24 8:39 p.m.82 views

CVE-2022-34053

CVE-2022-34053 concerns the DR-Web-Engine package for PyPI, v0.2.0b0, featuring a code execution backdoor via the request package. The root cause is a backdoor enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. Documented sources (NVD, ...

9.8CVSS9.7AI score0.00734EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.1 views

DR-Web-Engine 安全漏洞

DR-Web-Engine is built on python based on the lxml package and uses JSON as the query structure. A security vulnerability exists in DR-Web-Engine. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

9.8CVSS8.4AI score0.00734EPSS
Exploits1References4
Rows per page
Query Builder