TTPForge

TTPForge TTPForge é uma plataforma de simulação de ataques cibernéticos projetada e construída por Sam Manzer @d3sch41n, Alek Straumann @CrimsonK1ng e Geoff Pamerleau @Sy14r, incluindo contribuições subsequentes de muitas pessoas boas nos times de segurança Vermelho, Azul e Roxo da Meta. Jayson...

yaml2yara

Introduzione Pubblicato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da David Cannings @edeca [email protected] http://www.github.com/nccgroup/yaml2yara Questo progetto è rilasciato sotto licenza AGPL. Si prega di consultare LICENSE per maggiori informazioni...

appspec-yaml-leaks

बैज लाइसेंस MIT इंस्टॉलेशन...

GravCMS_Nmap_Script

GravCMSNmapScript È uno script nmap per la vulnerabilità GravCMS CVE-2021-21425 USO -- nmap -p443 --script gravcms.nse -- PORT STATE SERVICE -- 443/tcp open https -- | gravcms: -- | VULNERABILE: -- | GravCMS CVE-2021-21425 -- | Stato: VULNERABILE Sfruttabile -- | ID: CVE:CVE-2021-21425 --...

mitigate-copy-fail.yml

Dieses Repository hat keine README-Datei...

docling-core-CVE-2026-24009

CVE-2026-24009 — Deserializzazione YAML non sicura in docling-core PoC + Note Questo repository contiene una proof-of-concept PoC e un semplice scanner che dimostrano la CVE-2026-24009 , in cui docling-core può abilitare l'esecuzione di codice quando carica YAML controllato da un attaccante in...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: cortex-fips, pulumi-language-yaml, cortex-geomys-fips, cortex, thanos-fips, thanos, tempo-fips...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: thanos, pulumi-language-yaml, cortex...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nodejs-grunt (UTSA-2026-093223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093223 advisory. The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load instead of its secure replacement safeLoad of...

CLSA-2026-1787592038 TuxCare security update for js-yaml (3 CVEs)

TuxCare rebuilt js-yaml to address 3 CVEs. Fixed in 3.15.0-tuxcare.1...

awxkit: path traversal via YAML !include directive

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.form...

awxkit: path traversal via YAML !include directive

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.form...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

awxkit: path traversal via YAML !include directive

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.form...

Astra Linux – Vulnerability in yaml-cpp

The SingleDocParser::HandleFlowMap function in yaml-cpp also known as LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service resource consumption and application crash through a crafted YAML file...

Astra Linux – Vulnerability in Rails

There is a potential escalation to an RCE vulnerability when using YAML serialized columns in Active Record versions 7.0.3.1, 6.1.6.1, 6.0.5.1, and 5.2.8.1. This could allow an attacker, who can manipulate data in the database through methods like SQL injection, to escalate the attack to an RCE...

Astra Linux – Vulnerability in yaml-cpp

The Scanner::EnsureTokensInQueue function in yaml-cpp also known as LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and application crash through a crafted YAML file...

Astra Linux – Vulnerability in snakeyaml

Those who use Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser runs on user-supplied input, an attacker may provide content that causes the parser to crash due to a stack overflow. This vulnerability could potentially allow for a Denial of...

Astra Linux – Vulnerability in yaml-cpp

The function “Token& Scanner::peek” in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a ‘!2’ string...

Astra Linux – Vulnerability in pyyaml

In PyYAML before version 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1, and the 'UnsafeLoader' has been introduced to maintain backward compatibility with this function...