EUVD-2022-0411

Malicious code in bioql PyPI...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

Remote Code Execution (RCE)

scu-captcha is vulnerable to remote code execution. An attacker can inject and execute malicious code through the malicious request packages as the library does not properly remove malicious packages from many mirror sites...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

PYSEC-2022-43166

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

PYSEC-2022-43166

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

CVE-2022-34983

CVE-2022-34983 affects the PyPI package scu-captcha, versions 0.0.1–0.0.4, where a backdoor inserted by a third party enables code execution. Multiple sources (Veracode) describe the impact as remote code execution and note the library can execute malicious code via tampered packages on mirrors. ...

CVE-2022-34983: Undefined Security Weakness

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

PT-2022-22471

Name of the Vulnerable Software and Affected Versions scu-captcha versions 0.0.1 through 0.0.4 Description The issue concerns a code execution backdoor that was inserted by a third party into the scu-captcha package. This backdoor allows for code execution, posing a significant risk...

SCU-Captcha 安全漏洞

SCU-Captcha is the SCU JWC CAPTCHA recognition model, based on Pytorch, which has been released on PYPI. A security vulnerability exists in SCU-Captcha that stems from the presence of a code execution backdoor inserted by a third party...