d8s-asns (0.5.0), d8s-utility (>=0.5.0, <=0.6.0) potentially affected by CVE-2022-42042 via d8s-networking (0.3.0)

d8s-networking PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-networking and may be impacted: - d8s-asns 0.5.0 - d8s-utility =0.5.0, =0.6.0 Source cves: CVE-2022-42042 Source advisory: OSV:PYSEC-2022-43028...

d8s-utility (0.5.0) potentially affected by CVE-2022-42041 via d8s-file-system (0.4.0)

d8s-file-system PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-file-system and may be impacted: - d8s-utility 0.5.0 Source cves: CVE-2022-42041 Source advisory: OSV:PYSEC-2022-43024...

PYSEC-2022-43031

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

PYSEC-2022-43040

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

PYSEC-2022-43031

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

d8s-utility (>=0.5.0, <=0.6.0) potentially affected by CVE-2022-42039 via d8s-lists (0.5.0)

d8s-lists PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-lists and may be impacted: - d8s-utility =0.5.0, =0.6.0 Source cves: CVE-2022-42039 Source advisory: OSV:PYSEC-2022-43027...

CVE-2022-41386

The CVE-2022-41386 entry concerns the d8s-utility package for Python (PyPI), where a third-party backdoor (democritus-urls) was inserted into version 0.1.0, enabling potential remote code execution. Connected sources confirm the backdoor presence in the PyPI distribution and describe the resultin...

CVE-2022-41386

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-utility version 0.1.0, which stems from the presence of a potential code execution package democritus-urls inserted...

PT-2022-6533 · Schneider Electric · Ecostruxure Operator Terminal Expert +1

Name of the Vulnerable Software and Affected Versions: EcoStruxure Operator Terminal Expert versions V3.3 Hotfix 1 or prior Pro-face BLUE versions V3.3 Hotfix 1 or prior Description: A path traversal vulnerability exists in the SGIUtility component, allowing adversaries with local user privileges...

CVE-2022-41386: Unrestricted Upload of File with Dangerous Type

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

CVE-2022-41386

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

PT-2022-25837 · Pypi · D8S-Utility +1

Name of the Vulnerable Software and Affected Versions: d8s-utility version 0.1.0 Description: The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. Recommendations: For versi...

CVE-2022-41386

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0...

CVE-2022-41381: Unrestricted Upload of File with Dangerous Type

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

CVE-2022-41381

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

PT-2022-25832 · Pypi · Democritus-File-System +1

Name of the Vulnerable Software and Affected Versions: d8s-utility version 0.1.0 Description: The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. Recommendations: Fo...

CVE-2022-41381

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

CVE-2022-41381

The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-utility version 0.1.0, which stems from the presence of a potential code execution package democritus-file-system...