PT-2022-26838 · D8S-Htm +1 · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-timer versions affected versions not specified Description: A potential code-execution backdoor was inserted by a third party into the d8s-timer for python, distributed on PyPI. Additionally, the democritus-uuids...

PT-2022-37357 · Unknown +2 · Democritus-Algorithms +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-python affected versions not specified democritus-algorithms affected versions not specified Description: A potential code-execution backdoor was inserted by a third party in the d8s-python package distributed on PyP...

PT-2022-26839 · D8S-Htm +2 · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-python affected versions not specified democritus-algorithms affected versions not specified Description: A potential code-execution backdoor was inserted by a third party in the d8s-python package distributed on PyP...

PT-2022-37353 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-timer version not specified d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party in the d8s-timer package distributed on PyPI. Additionally, the democritus-dates package also contains a...

PT-2022-37338 · Pypi · D8S-Dates +2

Name of the Vulnerable Software and Affected Versions: d8s-dates version 0.1.0 d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-dates package for python distributed on PyPI. Another affected package is democritus-timezones...

PT-2022-27092 · D8S-Htm +2 · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 democritus-math affected versions not specified Description: A potential code-execution backdoor was inserted by a third party into the d8s-stats for python distributed on PyPI. The democritus-math package also contains ...

PT-2022-37347 · Unknown +2 · Democritus-Algorithms +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 democritus-algorithms affected versions not specified Description: A potential code-execution backdoor was inserted by a third party into the d8s-python package distributed on PyPI. The democritus-algorithms package also...

PT-2022-27095 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-xml version 0.1.0 d8s-htm version 0.1.0 Description: The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is...

PT-2022-37360 · Unknown +2 · Democritus-Domains +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 democritus-domains affected versions not specified Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls for python distributed on PyPI. The democritus-domains package also...

PT-2022-37354 · Unknown +2 · Democritus-Domains +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 democritus-domains affected versions not specified Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls for python distributed on PyPI. The democritus-domains package also...

PT-2022-27091 · Pypi · D8S-Networking +2

Name of the Vulnerable Software and Affected Versions: d8s-networking version 0.1.0 d8s-htm version 0.1.0 Description: The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by thi...

PT-2022-37393 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-timer version not specified d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party in the d8s-timer package distributed on PyPI. Another package, democritus-uuids, also contains a potential co...

PT-2022-37344 · Pypi · Democritus-Json +2

Name of the Vulnerable Software and Affected Versions: d8s-networking version not specified d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party in the d8s-networking package distributed on PyPI. Additionally, the democritus-json package also contai...

PT-2022-27093 · D8S-Htm +1 · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-dates affected versions not specified democritus-timezones affected versions not specified Description: A potential code-execution backdoor was inserted by a third party in the d8s-dates package for python, distribut...

PT-2022-37345 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-networking affected versions not specified d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-networking package for Python, distributed on PyPI. Another affected package is...

PT-2022-37371 · Pypi +1 · Democritus-Json +2

Name of the Vulnerable Software and Affected Versions: d8s-networking version not specified d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-networking package for Python distributed on PyPI. Another affected package is...

PT-2022-37348 · Unknown +2 · Democritus-Grammars +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 democritus-grammars affected versions not specified Description: A potential code-execution backdoor was inserted by a third party into the d8s-python package distributed on PyPI. The democritus-grammars package also...

PT-2022-27089 · Pypi +1 · D8S-Urls +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-urls affected versions not specified democritus-domains affected versions not specified Description: A potential code-execution backdoor was inserted by a third party in the d8s-urls for python, as distributed on PyP...

CVE-2022-43303

CVE-2022-43303 affects the Python package d8s-strings distributed on PyPI, with a potential code-execution backdoor inserted by a third party, associated with the democritus-uuids package; the initial advisory notes the affected component as d8s-htm 0.1.0. Connected documents corroborate a malici...

Cross-site Scripting (XSS) - Stored in requarks/wiki

Description Stored XSS can be performed by malicious XML / HTM files. There is no check in place to prevent such files from being uploaded. Proof of Concept 1 XML 1: Upload the following file as payload.xml: alert1 alert2 confirmdocument.domain Hello http://google.com Proof of Concept 2 HTM 2:...