ExploitTensorflowCVE-2021-37678

CVE-2021-37678 エクスプロイト この脆弱性を悪用するには、まだ脆弱性が存在する バージョン 2.2.3 で Tensorflow を起動するための環境を用意した Docker コンテナを立ち上げる必要があります。 構成は次のとおりです: AMD 64ビットアーキテクチャ、 AVX 命令を実行できる CPU または GPU Python 64ビット バージョン 3.6.9 Pip3 バージョン 20.2.4 Tensorflow バージョン 2.2.3 PyYAML バージョン 3.12 マシンに docker がインストールされているか確認するには、次を実行します:...

loader-CVE-2020-14343

loader-CVE-2020-14343 一个存在 CVE-2020-14343 不安全反序列化漏洞的 Web 应用，该漏洞可导致对 PyYAML 包执行命令。 Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

CVE-2025-50460

CVE-2025-50460: 不安なPyYAMLデシリアライゼーションによるmodelscope/ms-swiftのリモートコード実行 ステータス: 分析待ち このCVEレコードはNVDの強化努力のためにマークされています。...

CVE-2020-14343-PyYAML

CVE-2020-14343 PyYAML 反序列化漏洞 POC 漏洞概述 项目| 信息 ---|--- CVE编号| CVE-2020-14343 影响组件| PyYAML 示例： root@kitploit: python poc.py http://vulnerable-site.com 192.168.1.100 4444 攻击流程 1. 脚本在本地启动 TCP 监听器 2. 上传恶意 YAML 文件到目标 /upload 接口 3. 触发 /login 接口加载并解析 YAML 4. 目标服务器执行 payload，反弹 shell 到攻击者 依赖安装 root@kitploi...

CVE-2026-10036-speechbrain-rce

CVE-2026-10036: SpeechBrain の CKPT.yaml 解析による任意コード実行 深刻度: 高、CVSS 4.0 8.7 、CVSS 3.1 8.8 （CNA である VulnCheck により割り当て） ベクター v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N ベクター v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 影響を受けるバージョン: SpeechBrain 1.1.1 修正バージョン: 1.1.1 / コミッ...

docling-core-CVE-2026-24009

CVE-2026-24009 — docling-core 安全でないYAMLデシリアライゼーション（PoC + メモ） このリポジトリには、CVE-2026-24009 の概念実証（PoC）と簡単なスキャナーが含まれています。この脆弱性では、特定の依存関係条件下で攻撃者が制御するYAMLを読み込む際に、docling-core がコード実行を可能にする可能性があります。 TL;DR 影響: YAML解析中の潜在的なRCE 脆弱なチェーン（すべて必須）: docling-core = 2.21.0 かつ = 2.48.4 にアップグレード（yaml.SafeLoader に切り替え）...

CVE-2026-84202

A flaw was found in ModelScope. This vulnerability arises from the use of PyYAML's unsafe yaml.Loader when parsing model configuration files. A remote attacker can exploit this by crafting malicious model repositories containing poisoned configuration files. When these files are loaded by a user,...

CVE-2026-84202

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

EUVD-2026-69289

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

CVE-2026-84202

ModelScope (through v1.40.0 ) uses PyYAML's unsafe yaml.Loader to parse model configuration files, enabling arbitrary code execution via Python object construction tags. An attacker can craft a malicious model repository with a poisoned configuration file that executes code when a user loads the ...

CVE-2026-84202 ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

PT-2026-84300

Name of the Vulnerable Software and Affected Versions ModelScope versions prior to 1.40.1 Description ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files. This allows arbitrary code execution through Python object construction tags, enabling attackers to craft malicious...

CVE-2019-14319

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:08+00:00| seen| Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxyXdixQ 2026-08-30 00:00:12+00:00| seen| Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxyXdixQ 2026-08-31 00:00:46+00:00| published-proof-of-concept|...

CVE-2026-10036

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

CVE-2026-10036

SpeechBrain versions before 1.1.1 contain an arbitrary code execution vulnerability in its checkpoint recovery mechanism. The root cause is the use of PyYAML's unsafe loader when parsing CKPT.yaml metadata files during candidate enumeration in Checkpointer.recover_if_possible(). An attacker who c...

CVE-2026-10036 SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

EUVD-2026-67226

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

CVE-2026-10036 SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

CVE-2026-10036 SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pyyaml (UTSA-2026-093159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093159 advisory. A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML...