Lucene search
+L

161 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•3 views

CVE-2022-32996: Undefined Security Weakness

The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•3 views

CVE-2022-32997: Undefined Security Weakness

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•5 views

CVE-2022-33003: Undefined Security Weakness

The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•3 views

CVE-2022-32998: Undefined Security Weakness

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•4 views

CVE-2022-33002: Undefined Security Weakness

The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•3 views

CVE-2022-34054: Undefined Security Weakness

The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•4 views

CVE-2022-34056: Undefined Security Weakness

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•3 views

CVE-2022-34057: Undefined Security Weakness

The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.01402EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•5 views

CVE-2022-34053: Undefined Security Weakness

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•4 views

CVE-2022-34059: Undefined Security Weakness

The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02079EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•6 views

CVE-2022-34055: Undefined Security Weakness

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS8.4AI score0.02042EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/06/09 4:41 a.m.•34 views

Arbitrary Code Execution

apirespy is vulnerable to arbitrary code execution. The vulnerability is possible because the library has a malicious backdoor in the request package which allows an attacker to inject and execute arbitrary commands...

9.8CVSS9.5AI score0.01825EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/06/09 12:00 a.m.•72 views

GHSA-6978-4W92-428P Backdoor in api-res-py

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

9.8CVSS9.6AI score0.01825EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/06/09 12:00 a.m.•44 views

Backdoor in api-res-py

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

9.8CVSS9.2AI score0.01825EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2022/06/08 8:15 p.m.•23 views

CVE-2022-30882

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code remote. When installing the pyanxdns package of version 0.2, the request package will be installed...

9.8CVSS0.02313EPSS
SaveExploits1References3
OSV
OSV
•added 2022/06/08 8:15 p.m.•16 views

CVE-2022-30882

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code remote. When installing the pyanxdns package of version 0.2, the request package will be installed...

9.8CVSS7.8AI score0.02313EPSS
SaveExploits1References3
OSV
OSV
•added 2022/06/08 8:15 p.m.•16 views

PYSEC-2022-43071

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

9.8CVSS9.6AI score0.01825EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/06/08 7:13 p.m.•49 views

CVE-2022-31313

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

9.8AI score0.01825EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/06/08 7:05 p.m.•36 views

CVE-2022-30882

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code remote. When installing the pyanxdns package of version 0.2, the request package will be installed...

9.9AI score0.02313EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/08 12:00 a.m.•3 views

CVE-2022-30882: Undefined Security Weakness

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code remote. When installing the pyanxdns package of version 0.2, the request package will be installed...

9.8CVSS8.8AI score0.02313EPSS
SaveExploits1References1
Rows per page
Query Builder