THREATIST.IORead the docs No Pypi vulnerabilities are listed in CISA KEV.
16 records
The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package.
The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package.
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package.
The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package.
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package.
The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package.
The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package.
The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package.
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package.
The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package.
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package.
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package.
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package.
The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via a crafted patch file.