PYSEC-2022-43071

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

PYSEC-2022-43071

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

CVE-2022-31313

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

CVE-2022-31313

CVE-2022-31313 affects the PyPI package api-res-py (version 0.1). The vulnerability is a code execution backdoor in the request package, enabling an attacker to execute arbitrary code. Multiple connected sources (Red Hat, Veracode, OSV, GHSA) corroborate a malicious backdoor in the api-res-py ent...

PT-2022-3408

Name of the Vulnerable Software and Affected Versions api-res-py package in PyPI version 0.1 Description The issue is related to a code execution backdoor in the request package. This backdoor allows a remote attacker to execute arbitrary code. Recommendations For api-res-py package in PyPI versi...

CVE-2022-31313: Undefined Security Weakness

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

api-res-py 安全漏洞

api-res-py is an AS api responsive Python package from the Python Foundation. A security vulnerability exists in api-res-py version 0.1, which stems from the installation of request packages when installing the api-res-py package, and is exploited by an attacker to leave a malicious backdoor on a...

GHSA-PF3P-V9XP-MRVF py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mnflags, mdbcursorset triggers a memcpy with an invalid write operation within mdbxcursorinit1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mnflags, mdbcursorset triggers a memcpy with an invalid write operation within mdbxcursorinit1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

py-lmdb Divide by Zero interruptions

An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size field...

GHSA-GGWQ-VRGP-6GV4 py-lmdb Divide by Zero interruptions

An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size field...

GHSA-R8G9-W4F3-9CRM LMDB invalid write

An issue was discovered in py-lmdb 0.97. mdbnodedel does not validate a memmove in the case of an unexpected node-mnhi, leading to an invalid write operation...

GHSA-C74C-P4P7-R8Q5 py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mpflags, mdbpagetouch does not properly set up mc-mcpgmc-top, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

GHSA-9Q62-R72G-PVV7 py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mpflags, mdbpagetouch does not properly set up mc-mcpgmc-top, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

LMDB invalid write

An issue was discovered in py-lmdb 0.97. mdbnodedel does not validate a memmove in the case of an unexpected node-mnhi, leading to an invalid write operation...

py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

CVE-2022-30286

pyscriptjs aka PyScript Demonstrator in PyScript through 2022-05-04 allows a remote user to read Python source code...

Exploit for Incorrect Authorization in Polkit_Project Polkit

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalatio...

py-httpx -- input validation vulnerability

lebr0nli reports: Encode OSS httpx =1.0.0.beta0 is affected by improper input validation in httpx.URL, httpx.Client and some functions using httpx.URL.copywith...