4 matches found
cve-2021-21425
漏洞利用:GravCMS 1.10.7 - 任意YAML写入/更新(未经身份验证) 使用方法: root@kitploit: python3 exploit.py --url http://192.168.204.12/grav-admin 预期行为 请勿在未经授权的系统上使用此漏洞利用程序! 快乐黑客。...
9.8CVSS8.3AI score0.806EPSS
SaveExploits12
Malicious code in yaml-update-action (npm)
--- -= Per source details. Do not edit below this line.=-...
7AI score
SaveExploits0
MAL-2025-2919 Malicious code in yaml-update-action (npm)
--- -= Per source details. Do not edit below this line.=-...
7.1AI score
SaveExploits0
ROS-2-2225
2.2225 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...
10CVSS8.1AI score0.05984EPSS
SaveExploits4
20