PYSEC-2022-43173

The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party...

PYSEC-2022-242

The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party...

PYSEC-2022-43166

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

PYSEC-2022-241

The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party...

PYSEC-2022-43173

The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party...

CVE-2022-34983

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party...

CVE-2022-34981

The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34501

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

SCU-Captcha 安全漏洞

SCU-Captcha is the SCU JWC CAPTCHA recognition model, based on Pytorch, which has been released on PYPI. A security vulnerability exists in SCU-Captcha that stems from the presence of a code execution backdoor inserted by a third party...

wikifaces 安全漏洞

wikifaces is a downloader of the Wikipedia "People" image dataset. A security vulnerability exists in wikifaces that stems from a code execution backdoor that allows third-party injection...

PyCrowdTangle 安全漏洞

PyCrowdTangle is a Python wrapper that retrieves data from the CrowdTangle API. A security vulnerability exists in PyCrowdTangle that originates from a code execution backdoor inserted by a third party...

eziod 安全漏洞

eziod is simple image object dataset. A security vulnerability exists in eziod that originates from a code execution backdoor inserted by a third party...

bin_collection 安全漏洞

bincollection is used to check if an iCal file has a specified date. A security vulnerability exists in bincollection that stems from the presence of a code execution backdoor that allows third-party injection...

bin_collection 安全漏洞

bincollection is used to check an iCal file for a specified date. A security vulnerability exists in bincollection that originates from a code execution backdoor inserted by a third party...

undici 输入验证错误漏洞

undici is an HTTP/1.1 client. undici suffers from an input validation error vulnerability that stems from the cookie header found in the specification to be a sensitive header and an official header, which remains unpurged. There are active users in undici that use cookie headers. This could resu...

MySQL -- Multiple vulnerabilities

Oracle reports: This Critical Patch Update contains 34 new security patches plus additional third party patches noted below for Oracle MySQL. 10 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials...

IBM Engineering Lifecycle Optimization Cross-Site Scripting Vulnerability (CNVD-2022-55503)

IBM Engineering Lifecycle Optimization ELO is an extension of the Engineering Lifecycle Management ELM portfolio from IBM America. They make it easier to collect and analyze data across the development environment to make better decisions. Automate reporting to ensure that the entire organization...

[SECURITY] Fedora 35 Update: golang-github-mholt-archiver-3.5.1-3.fc35

Package Archiver makes it trivially easy to make and extract common archive formats such as zip and tarball and its compressed variants. Simply name the input and output files. The arc command runs the same on all platforms and has no external dependencies not even libc. It is powered by the Go...

Google Removes "App Permissions" List from Play Store for New "Data Safety" Section

Following the launch of a new "Data safety" section for the Android app on the Play Store, Google appears to be readying to remove the app permissions list from both the mobile app and the web. The change was highlighted by Esper's Mishaal Rahman earlier this week. The Data safety section, which...

Microsoft Details App Sandbox Escape Bug Impacting Apple iOS, iPadOS, macOS Devices

Microsoft on Wednesday shed light on a now patched security vulnerability affecting Apple's operating systems that, if successfully exploited, could allow attackers to escalate device privileges and deploy malware. "An attacker could take advantage of this sandbox escape vulnerability to gain...