Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
136 results · page 2 of 3
Oct 11, 2022The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41384 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.
- Product
- D8s-domains
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41383 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- D8s-archives
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41382 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- D8s-json
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41381 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- D8s-utility
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2022The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-41380 · Other software · Democritus · reported by MITRECritical 9.8
The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- D8s-yaml
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40812 · Other software · Democritus Pdfs Project · reported by MITRECritical 9.8
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- Democritus Pdfs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40810 · Other software · Democritus IP Addresses Project · reported by MITRECritical 9.8
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus IP Addresses
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40809 · Other software · Democritus Dicts Project · reported by MITRECritical 9.8
The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus Dicts
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40432 · Other software · D8s-strings Project · reported by MITRECritical 9.8
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0.
- Product
- D8s-strings
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40431 · Other software · D8s-pdfs Project · reported by MITRECritical 9.8
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-pdfs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40430 · Other software · D8s-utility Project · reported by MITRECritical 9.8
The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-utility
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40429 · Other software · D8s-ip-addresses Project · reported by MITRECritical 9.8
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-ip-addresses
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40428 · Other software · D8s-mpeg Project · reported by MITRECritical 9.8
The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s Mpeg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40426 · Other software · D8s-asns Project · reported by MITRECritical 9.8
The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-asns
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40425 · Other software · D8s-html Project · reported by MITRECritical 9.8
The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
- Product
- D8s-html
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38887 · Other software · D8s-python Project · reported by MITRECritical 9.8
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-python
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38886 · Other software · D8s-xml Project · reported by MITRECritical 9.8
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-xml
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38885 · Other software · D8s-netstrings Project · reported by MITRECritical 9.8
The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-netstrings
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38884 · Other software · D8s-grammars Project · reported by MITRECritical 9.8
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-grammars
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38883 · Other software · D8s-math Project · reported by MITRECritical 9.8
The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-math
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38882 · Other software · D8s-json Project · reported by MITRECritical 9.8
The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-json
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38881 · Other software · D8s-archives Project · reported by MITRECritical 9.8
The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
- Product
- D8s-archives
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40811 · Other software · Democritus Urls Project · reported by MITRECritical 9.8
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.
- Product
- Democritus Urls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40808 · Other software · Democritus Dates Project · reported by MITRECritical 9.8
The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus Dates
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40807 · Other software · Democritus Domains Project · reported by MITRECritical 9.8
The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus Domains
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40806 · Other software · Democritus Uuids Project · reported by MITRECritical 9.8
The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
- Product
- Democritus Uuids
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40805 · Other software · Democritus Urls Project · reported by MITRECritical 9.8
The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package.
- Product
- Democritus Urls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40427 · Other software · Democritus Domains Project · reported by MITRECritical 9.8
The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0
- Product
- Democritus Domains
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-40424 · Other software · Democritus Urls Project · reported by MITRECritical 9.8
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0
- Product
- Democritus Urls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 19, 2022The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.CVE-2022-38880 · Other software · Democritus Urls Project · reported by MITRECritical 9.8
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0.
- Product
- Democritus Urls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 27, 2022The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.CVE-2022-38792 · Other software · Exotel Project · reported by MITRECritical 9.8
The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.
- Product
- Exotel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2022An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary inputCVE-2022-1930 · Other software · eth-account · reported by reefs@jfrog.comMedium 5.9
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encode_structured_data method
- Product
- eth-account
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordresearch.jfrog.comresearch.jfrog.com
Jul 22, 2022The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.CVE-2022-34983 · Other software · Scu-captcha Project · reported by MITRECritical 9.8
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
- Product
- Scu-captcha
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jul 22, 2022The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.CVE-2022-34982 · Other software · Eziod Project · reported by MITRECritical 9.8
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
- Product
- Eziod
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jul 22, 2022The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.CVE-2022-34981 · Other software · Pycrowdtangle Project · reported by MITRECritical 9.8
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
- Product
- Pycrowdtangle
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jul 22, 2022The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party.CVE-2022-34509 · Other software · Wikifaces Project · reported by MITRECritical 9.8
The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party.
- Product
- Wikifaces
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jul 22, 2022The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.CVE-2022-34501 · Other software · Pypi · reported by MITRECritical 9.8
The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
- Product
- Pypi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jul 22, 2022The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.CVE-2022-34500 · Other software · Pypi · reported by MITRECritical 9.8
The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
- Product
- Pypi
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor.CVE-2022-34066 · Other software · Texercise Project · reported by MITRECritical 9.8
The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Texercise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor.CVE-2022-34065 · Other software · Rondolu-yt-concate Project · reported by MITRECritical 9.8
The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Rondolu-yt-concate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor.CVE-2022-34064 · Other software · Zibal Project · reported by MITRECritical 9.8
The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Zibal
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.compypi.org
Jun 24, 2022The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor.CVE-2022-34061 · Other software · Catly Translate Project · reported by MITRECritical 9.8
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Catly Translate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor.CVE-2022-34060 · Other software · Togglee · reported by MITRECritical 9.8
The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Togglee
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package.CVE-2022-34059 · Other software · Sixfab-tool Project · reported by MITRECritical 9.8
The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Sixfab-tool
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package.CVE-2022-34057 · Other software · Scoptrial Project · reported by MITRECritical 9.8
The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Scoptrial
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.compypi.org
Jun 24, 2022The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package.CVE-2022-34056 · Other software · Pypi · reported by MITRECritical 9.8
The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Watertools
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package.CVE-2022-34055 · Other software · Pypi · reported by MITRECritical 9.8
The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Drxhello
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package.CVE-2022-34054 · Other software · Pypi · reported by MITRECritical 9.8
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Perdido
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package.CVE-2022-34053 · Other software · Pypi · reported by MITRECritical 9.8
The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Dr-web-engine
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Jun 24, 2022The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package.CVE-2022-33004 · Other software · Pypi · reported by MITRECritical 9.8
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
- Product
- Beginner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpypi.doubanio.comgithub.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.