EUVD-2022-6839

Malicious code in bioql PyPI...

EUVD-2023-27070

Malicious code in bioql PyPI...

EUVD-2022-2078

Malicious code in bioql PyPI...

EUVD-2021-8632

Malicious code in bioql PyPI...

EUVD-2023-56110

Malicious code in bioql PyPI...

EUVD-2022-1138

Malicious code in bioql PyPI...

EUVD-2024-35247

Malicious code in bioql PyPI...

EUVD-2022-5561

Malicious code in bioql PyPI...

poc-scaner

Java POC Scanner A powerful graphical POC Proof of Concept...

Stack Overflow in Snakeyaml

...

NewStart CGSL MAIN 6.06 : PyYAML Vulnerability (NS-SA-2025-0215)

The remote NewStart CGSL host, running version MAIN 6.06, has PyYAML packages installed that are affected by a vulnerability: - scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Console

Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.7. Vulnerability Details CVEID:CVE-2022-44566 DESCRIPTION: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter 7.0.4.1 and 6.1.7.1. When a value outside the range for a 64bit signed intege...

CVE-2025-56816

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal. The configuration file handling of the application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. The application parses this file using SnakeYAML's unsafe load or loadAs method without input...

Exploit for CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Tr...

CVE-2025-56816

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal via uploading YAML to config/jdbc-driver-ext.yml, parsed with SnakeYAML unsafe load/loadAs. This allows attacker-controlled YAML deserialization, potentially enabling remote code execution (RCE) under certain conditions. Exploitation details ...

PT-2025-39294

Name of the Vulnerable Software and Affected Versions Datart version 1.0.0-rc.3 Description The application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. The application parses these files using SnakeYAML's load or loadAs method without input sanitization...

xss.yaml

It is an offensive tool for web application security testing. Th...

weblogic-monitoring-exporter

This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...

CVE-2025-40908 affecting package perl-YAML-LibYAML for versions less than 0.902.0-2

CVE-2025-40908 affecting package perl-YAML-LibYAML for versions less than 0.902.0-2. An upgraded version of the package is available that resolves this issue...

better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +102 more potentially affected by unknown CVE via serde_yml (>=0.0.7, <=0.0.12)

serdeyml CARGO version =0.0.7, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HHW4-XG65-FP2X...