Code Injection in yogeshojha/rengine

Description RCE via the YAML configuration of reNgine. In this configuration, the settings of the tools used in scans can be adapted. This functionality can be abused to executy arbitrary code. PoC In the yaml configuration of reNgine, edit the extensions field of dirfilesearch to make it look li...

Remote Code Execution (RCE)

parlai is vulnerable to remote code execution RCE. The insecure parsing of YAML configuration files results in untrusted deserialization and allows a privileged attacker to modify local YAML configuration files to execute malicious code on the host OS...

CVE-2021-21371: Deserialization of Untrusted Data

Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Tasks and sub-tasks based on the vulnerabilities' current state. It published in pypi as "tenable-jira-cloud". In tenable-jira-cloud before version 1.1.21, it is possible to run...

PT-2021-14454

Name of the Vulnerable Software and Affected Versions Tenable for Jira Cloud versions prior to 1.1.21 Description The issue allows an attacker with local access to the host to run arbitrary code by running the application with a specially crafted YAML configuration file. This is possible due to t...

CVE-2020-10721

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

Deserialization of untrusted data

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

CVE-2020-10721

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

CVE-2020-10721

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

jw.util Operating System Command Injection Vulnerability

jw.util is a Python-based utility package that includes modules for versioning, file handling, and YAML configuration. jw.util suffers from an operating system command injection vulnerability. An attacker can exploit this vulnerability by inserting python into a loaded yaml to execute arbitrary...

PT-2025-31645

Name of the Vulnerable Software and Affected Versions ms-swift version 3.3.0 Description A remote code execution RCE vulnerability exists due to unsafe deserialization in tests/run.py using yaml.load from the PyYAML library versions = 5.3.1. An attacker controlling the YAML configuration file...

CVE-2018-18850

In Octopus Deploy, CVE-2018-18850 affects versions 2018.8.0 through 2018.9.x before 2018.9.1. An authenticated user with permission to modify deployment processes could upload a malicious YAML configuration, potentially allowing remote code execution within the Octopus Server process (often SYSTE...

PT-2018-14689

Name of the Vulnerable Software and Affected Versions Octopus Deploy versions 2018.8.0 through 2018.9.0 Description The issue allows an authenticated user with permission to modify deployment processes to upload a maliciously crafted YAML configuration. This could potentially allow for remote...

CVE-2018-18850: Undefined Security Weakness

In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission to modify deployment processes could upload a maliciously crafted YAML configuration, potentially allowing for remote execution of arbitrary code, running in the same context as the Octopus Server f...

CloudBees Jenkins Configuration as Code Plugin Information Disclosure Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task...

Machinae - Security Intelligence Collector

Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater , another excellent tool for collecting information. The Machinae...

Generic Emailer (SMTP)

This module can be used to automate email delivery. This code is based on Joshua Abraham's email script for social engineering. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'yaml' class MetasploitModule...