loader-CVE-2020-14343

loader-CVE-2020-14343 A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package. Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

CVE-2020-14343-PyYAML

CVE-2020-14343 PyYAML Deserialization Vulnerability POC Vulnerability Overview Item| Information ---|--- CVE ID| CVE-2020-14343 Affected Component| PyYAML Example: python poc.py http://vulnerable-site.com 192.168.1.100 4444 Attack Flow 1. The script starts a TCP listener locally 2. Uploads...

ExploitTensorflowCVE-2021-37678

CVE-2021-37678 Exploit To exploit the vulnerability, it is necessary to start a Docker container with an environment prepared to run Tensorflow with version 2.2.3 which still has the vulnerability. It consists of: An AMD 64-bit architecture, CPU or GPU that can execute AVX instructions Python...

CVE-2026-10036-speechbrain-rce

CVE-2026-10036: SpeechBrain Arbitrary Code Execution via CKPT.yaml Parsing Severity: High, CVSS 4.0 8.7 , CVSS 3.1 8.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected:...

SUSE SLES12 Security Update : python-PyYAML (SUSE-SU-2026:4402-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4402-1 advisory. - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code...

docling-core-CVE-2026-24009

CVE-2026-24009 — docling-core Unsafe YAML Deserialization PoC + Notes This repo contains a proof-of-concept PoC and a simple scanner demonstrating CVE-2026-24009 , where docling-core can enable code execution when loading attacker-controlled YAML under specific dependency conditions. TL;DR Impact...

Rocky Linux 8.6 [CIQ] Security Update: python39-pyyaml / python39-pyyaml-debuginfo (ciqsa-2026_0239)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260239 advisory. This advisory aggregates security fixes for the PyYAML SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-28861. Tenable has extracted the preceding description...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / numpy-debugsource / etc Multiple Vulnerabilities (crlsa-2020_4641)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204641 advisory. PyYAML: command execution through python/object/apply constructor in FullLoader CVE-2019-20477 python: infinite loop in the tarfile module via crafted TAR...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / numpy-debugsource / etc (crlsa-2021_2583)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20212583 advisory. PyYAML: incomplete fix for CVE-2020-1747 CVE-2020-14343 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8.6 [CIQ] Security Update: python2-pyyaml / python2-pyyaml-debuginfo Multiple Vulnerabilities (ciqsa-2026_0186)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260186 advisory. This advisory aggregates security fixes for the PyYAML SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python38-pyyaml / python38-pyyaml-debuginfo Multiple Vulnerabilities (ciqsa-2026_0218)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260218 advisory. This advisory aggregates security fixes for the PyYAML SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python39-pyyaml / python39-pyyaml-debuginfo Multiple Vulnerabilities (ciqsa-2026_0765)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260765 advisory. This advisory aggregates security fixes for the PyYAML SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: Update to 5.3.1. CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader...

SUSE-SU-2026:4402-1 Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loade...

cve-2020-14343-lab

CVE-2020-14343 – PyYAML Unsafe YAML Loading Lab 1. Project Overview This project demonstrates CVE-2020-14343 in a controlled and isolated Docker environment. The lab contains two environments: A vulnerable environment using PyYAML 5.3.1 A patched environment using PyYAML 5.4 and yaml.safeload The...

CVE-2025-50460

CVE-2025-50460: Remote Code Execution in modelscope/ms-swift via unsafe PyYAML deserialization Status: Awaiting Analysis This CVE record has been marked for NVD enrichment efforts. A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization...

Exploit for Improper Input Validation in Pyyaml

CVE-2020-14343 – PyYAML Unsafe YAML Loading Lab 1. Project...

Astra Linux – Vulnerability in pyyaml

A vulnerability was discovered in the PyYAML library in versions prior to 5.4. In these versions, the library is susceptible to arbitrary code execution when it processes untrusted YAML files using the fullload method or the FullLoader loader. Applications that use this library to process untrust...

SUSE CVE-2026-84202

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

CVE-2026-84202

A flaw was found in ModelScope. This vulnerability arises from the use of PyYAML's unsafe yaml.Loader when parsing model configuration files. A remote attacker can exploit this by crafting malicious model repositories containing poisoned configuration files. When these files are loaded by a user,...