Lucene search
+L

161 matches found

Prion
Prion
•added 2022/06/24 9:15 p.m.•26 views

Design/Logic Flaw

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

7.5CVSS9.7AI score0.02EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2022/06/24 9:15 p.m.•15 views

PYSEC-2022-217

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8AI score0.02EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2022/06/24 9:15 p.m.•22 views

PYSEC-2022-43168

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.9AI score0.02079EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
•added 2022/06/24 9:15 p.m.•15 views

PYSEC-2022-218

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8AI score0.02EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/06/24 9:15 p.m.•33 views

PYSEC-2022-219

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.9AI score0.02EPSS
SaveExploits1References3
Prion
Prion
•added 2022/06/24 9:15 p.m.•25 views

Design/Logic Flaw

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

7.5CVSS9.7AI score0.02042EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/06/24 9:15 p.m.•37 views

PYSEC-2022-216

The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.7AI score0.02EPSS
SaveExploits1References3
OSV
OSV
•added 2022/06/24 9:15 p.m.•37 views

PYSEC-2022-214

The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.8AI score0.02EPSS
SaveExploits1References3
OSV
OSV
•added 2022/06/24 9:15 p.m.•12 views

PYSEC-2022-43172

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.3AI score
SaveExploits0References3
OSV
OSV
•added 2022/06/24 9:15 p.m.•30 views

PYSEC-2022-218

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS6.9AI score0.02EPSS
SaveExploits1References3
Prion
Prion
•added 2022/06/24 9:15 p.m.•24 views

Design/Logic Flaw

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

7.5CVSS9.7AI score0.02EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2022/06/24 9:15 p.m.•20 views

PYSEC-2022-43133

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8AI score0.02042EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2022/06/24 9:15 p.m.•18 views

Design/Logic Flaw

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

7.5CVSS9.7AI score0.02EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2022/06/24 9:15 p.m.•26 views

Design/Logic Flaw

The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

7.5CVSS9.7AI score0.02042EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2022/06/24 9:15 p.m.•14 views

PYSEC-2022-216

The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8AI score0.02EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2022/06/24 9:15 p.m.•13 views

PYSEC-2022-215

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8AI score0.02EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/06/24 8:39 p.m.•35 views

CVE-2022-34059

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.9AI score0.02079EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/06/24 8:39 p.m.•31 views

CVE-2022-34057

The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.9AI score0.01402EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/06/24 8:39 p.m.•42 views

CVE-2022-34056

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.9AI score0.02042EPSS
SaveExploits1References3
Mend
Mend
•added 2022/06/24 8:39 p.m.•0 views

CVE-2022-34057

The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS0.01402EPSS
SaveExploits0References2
Rows per page
Query Builder