CVE-2021-46364

CVE-2021-46364: إلغاء تسلسل YAML في Magnolia CMS Magnolia الإصدارات =6.2.3 تحتوي على محلل Snake YAML والذي يعاني من ثغرات إلغاء التسلسل التي يمكن أن تسمح للمهاجم باستدعاء منشئات Java عشوائية عند استيراد ملفات YAML. تم تحقيق تنفيذ التعليمات البرمجية عن بُعد باستخدام هذه الثغرة. إفصاح البائع: يمكن...

CVE-2022-47986

CVE-2022-47986 Porquê Esta vulnerabilidade está sendo explorada ativamente. O IceFire usa esta vulnerabilidade para implantar o ransomware em sistemas visados, eu gostaria de ajudar as equipes de SOC/Blue Team a identificar os sistemas impactados e os Pentesters/Red Teams a explorá-la e reportá-l...

CVE-2020-1947

CVE-2020-1947 ApacheShardingShpereUIYAML पार्सिंग रिमोट कोड एक्ज़ीक्यूशन भेद्यता पुनरुत्पादन और विश्लेषण सारांश shardingsphere अपाचे का एक ओपन-सोर्स इकोसिस्टम है, जो वितरित डेटाबेस मिडलवेयर समाधानों का एक सेट है। यह तीन स्वतंत्र फ्रेमवर्कों से बना है: sharding-jdbc, sharding-proxy, और...

CVE-2013-0156

Référence du script original Pour plus de détails sur le script d'exploitation original, référez-vous au lien gist CVE-2013-0156 Script d'exploitation CVE-2013-0156 Ce script est spécialement conçu pour résoudre le défi sur PentesterLab pour l'exploitation de la CVE-2013-0156. Vous pouvez accéder...

CVE-2013-0156

Rails YAML Deserialization RCE CVE-2013-0156 - PentesterLab kompatibel Ronin-freie, Ruby 3.x-kompatible Version von https://gist.github.com/postmodern/4499206 Verwendung: ruby railsrce.rb http://ziel/ "system'/usr/local/bin/score UUID'" ⚠️ RECHTLICHER HINWEIS ⚠️ Dieses Skript dient NUR ZU...

CVE-2022-31691

CVE-2022-31691 Un resoconto del mio esame finora inconcludente su CVE-2022-31691. Contesto Sono un utente frequente di Spring Tool Suite STS per Eclipse e tendo a farci affidamento per inizializzare nuovi progetti Spring Boot. Questa vulnerabilità vedi...

CVE-2021-41078

CVE-2021-41078 nameko Esecuzione di codice arbitrario dovuta alla deserializzazione YAML Descrizione NVD Nameko fino alla versione 2.13.0 può essere indotto a eseguire codice arbitrario durante la deserializzazione del file di configurazione. Demo Configurazione 1. Crea un'immagine da un Dockerfi...

CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 è vulnerabile a Directory Traversal nell'interfaccia POST /viz/image, poiché il server utilizza direttamente MultipartFile.transferTo per salvare il file caricato in un percorso controllabile dall'utente e non effettua una verifica rigorosa del nome del file...

CVE-2026-53451

Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated save-waterfall-snapshot Socket.IO command passes attacker-controlled snapshotName input from backend/handlers/entities/sdr.py to...

CVE-2026-53451

Ground Station (a browser-based suite for satellite tracking, SDR reception, and telemetry decoding) prior to version 0.4.13 is vulnerable to unauthenticated remote code execution via a path traversal in the save-waterfall-snapshot Socket.IO command. The snapshotName parameter is passed to os.pat...

Exploit for Improper Input Validation in Pyyaml

Seal Security — Python pip Example A minimal, intentionally...

CVE-2026-44795

CVE-2026-44795 affects Spinnaker (Cloud deployments/baking paths) where unsafe YAML processing bypasses safe deserialization via a non-safe constructor, enabling arbitrary Java class loading and remote code execution. Affected versions precede fixed releases and include 2026.1.0, 2026.0.3, 2025.4...

CVE-2026-44795 Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types

Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to 2026.1.0, 2026.0.3, 2025.4.4, and 2025.3.3, unsafe YAML processing bypasses safe deserialization when using CloudFormation deployments or CloudFoundry baking. The use of a non-safe constructor allows arbitrary loading...

docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage

ImpactA PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. PatchesThe...

PYSEC-2026-1366 Feast vulnerable to Deserialization of Untrusted Data

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at feast/sdk/python/feast/infra/computeengines/kubernetes/main.py. The vulnerability arises from the use of yaml.load..., Loader=yaml.Loader to...

PYSEC-2026-1683 MS SWIFT Remote Code Execution via unsafe PyYAML deserialization

Description A Remote Code Execution RCE vulnerability exists in the modelscope/ms-swift project due to unsafe use of yaml.load in combination with vulnerable versions of the PyYAML library ≤ 5.3.1. The issue resides in the tests/run.py script, where a user-supplied YAML configuration file is...

PYSEC-2026-462 PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading

Summary The AgentService.loadAgentFromFile method uses the js-yaml library to parse YAML files without disabling dangerous tags such as !!js/function and !!js/undefined. This allows an attacker to craft a malicious YAML file that, when parsed, executes arbitrary JavaScript code. An attacker can...

PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading

SummaryThe AgentService.loadAgentFromFile method uses the js-yaml library to parse YAML files without disabling dangerous tags such as !!js/function and !!js/undefined. This allows an attacker to craft a malicious YAML file that, when parsed, executes arbitrary JavaScript code. An attacker can...

PYSEC-2026-393 Unsafe yaml deserialization in llama-hub

The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the YAML processing. An attacker can execute arbitrary code by supplying crafted YAML input that triggers unsafe class loading during operations such as CloudFormation deployments or CloudFoundry...