175 matches found
atomic-red-team
Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...
CVE-2026-63500
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/schemas/dfiq.py accepts an unvalidated uuid from DFIQ YAML through POST /api/v2/dfiq/fromyaml, and core/web/apiv2/dfiq.py later interpolates that stored value...
CVE-2026-63489
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. In version 2.5.0 and earlier, YETI directly interpolates user-controlled sorting fields and filteraliases attribute paths into ArangoDB AQL identifier and expression positions in...
CVE-2026-63482
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI registers the audit router without Dependsauth.getcurrentactiveuser, and core/web/apiv2/audit.py does not perform a route-level authentication check for...
CVE-2026-63500
The Yeti forensics intelligence platform (prior to version 2.5.1 ) is vulnerable to a path traversal flaw in its DFIQ processing. The application fails to validate a uuid provided via POST /api/v2/dfiq/from_yaml in core/schemas/dfiq.py. This unvalidated value is later interpolated into a filesyst...
EUVD-2026-116268
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/schemas/dfiq.py accepts an unvalidated uuid from DFIQ YAML through POST /api/v2/dfiq/fromyaml, and core/web/apiv2/dfiq.py later interpolates that stored value...
CVE-2026-63500 Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/schemas/dfiq.py accepts an unvalidated uuid from DFIQ YAML through POST /api/v2/dfiq/fromyaml, and core/web/apiv2/dfiq.py later interpolates that stored value...
CVE-2026-63502
The Yeti forensics intelligence platform is vulnerable to a path traversal flaw in its ExportTask name prior to version 2.5.1 . The root cause is the lack of sanitization for traversal sequences or path confinement when deriving ExportTask.file_name from user-controlled task names, specifically w...
CVE-2026-63502 Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI derives ExportTask.filename from the user-controlled task name and passes it to core/clients/filestorage/classes/localstorage.py without sanitizing traversal...
EUVD-2026-116264
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI registers the audit router without Dependsauth.getcurrentactiveuser, and core/web/apiv2/audit.py does not perform a route-level authentication check for...
CVE-2026-63482
The Yeti Forensics Intelligence platform is vulnerable to unauthenticated access to full audit timelines in versions prior to 2.5.1 . The root cause is that the audit router is registered without the required auth.get_current_active_user dependency, and core/web/apiv2/audit.py fails to perform a ...
CVE-2026-63482 Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI registers the audit router without Dependsauth.getcurrentactiveuser, and core/web/apiv2/audit.py does not perform a route-level authentication check for...
CVE-2026-63489
In Yeti version 2.5.0 and earlier, a low-privileged authenticated user can perform AQL injection due to the direct interpolation of user-controlled sorting fields and filter_aliases attribute paths into ArangoDB AQL identifiers within core/database_arango.py . Attackers can send crafted values to...
CVE-2026-63500: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/schemas/dfiq.py accepts an unvalidated uuid from DFIQ YAML through POST /api/v2/dfiq/fromyaml, and core/web/apiv2/dfiq.py later interpolates that stored value...
CVE-2026-63502: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI derives ExportTask.filename from the user-controlled task name and passes it to core/clients/filestorage/classes/localstorage.py without sanitizing traversal...
yeti
Plataforma Yeti Yeti tiene como objetivo cerrar la brecha entre los profesionales de CTI y DFIR al proporcionar una plataforma de inteligencia forense y un pipeline para equipos de DFIR. Nació de la frustración de tener que responder a la pregunta "¿dónde he visto este artefacto antes?" o "¿cómo...
Malicious code in leopard-yeti-kzy985-project (npm)
The package leopard-yeti-kzy985-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in kiwi-yeti-kdz317-project (npm)
The package kiwi-yeti-kdz317-project was found to contain malicious code. --- Credit: OpenSSF source...