473 matches found
CVE-2020-14343-PyYAML
CVE-2020-14343 PyYAML POC per vulnerabilità di deserializzazione Panoramica della vulnerabilità...
ExploitTensorflowCVE-2021-37678
CVE-2021-37678 Exploit Per sfruttare la vulnerabilità, è necessario avviare un contenitore docker con un ambiente preparato per avviare Tensorflow con una versione 2.2.3 che ancora presenta la vulnerabilità. È composto da: Un'architettura AMD a 64 bit, CPU o GPU in grado di eseguire istruzioni AV...
CVE-2025-50460
CVE-2025-50460: रिमोट कोड निष्पादन modelscope/ms-swift में असुरक्षित PyYAML डीसीरियलाइज़ेशन के माध्यम से स्थिति: विश्लेषण की प्रतीक्षा है यह CVE रिकॉर्ड NVD संवर्धन प्रयासों के लिए चिह्नित किया गया है। एक रिमोट कोड निष्पादन RCE भेद्यता ms-swift प्रोजेक्ट संस्करण 3.3.0 में असुरक्षित डीसीरियलाइज़ेश...
loader-CVE-2020-14343
loader-CVE-2020-14343 Un'applicazione web vulnerabile a CVE-2020-14343 deserializzazione non sicura che porta all'esecuzione di comandi nel pacchetto PyYAML. Descrizione: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...
Security Bulletin: IBM Storage Defender - Data Protect critical vulnerabilities resolved in Release Defender 2.2.1/Data Protect 7.4.1
Summary IBM Storage Defender: Data Protect critical vulnerabilities resolved in release Defender 2.2.1/Data Protect 7.4.1. The vulnerabilities have been addressed in Data Protect 7.4.1, which is included in IBM Storage Defender 2.2.1 Vulnerability Details CVEID:CVE-2020-14343 DESCRIPTION: A...
Exploit for Improper Input Validation in Pyyaml
Seal Security — Python pip Example A minimal, intentionally...
PYSEC-2026-1313 docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
Impact A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. Patches The...
Astra Linux – Vulnerability in pyyaml
A vulnerability was discovered in the PyYAML library in versions prior to 5.4. In these versions, the library is susceptible to arbitrary code execution when it processes untrusted YAML files using the fullload method or the FullLoader loader. Applications that use this library to process untrust...
NewStart CGSL MAIN 6.06 (SP) : PyYAML Vulnerability (NS-SA-2026-0019)
The remote NewStart CGSL host, running version MAIN 6.06 SP, has PyYAML packages installed that are affected by a vulnerability: - scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service asserti...
Hackviser
Hackviser — Scenario Writeups A collection of detailed writeu...
docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
Impact A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. Patches The...
Deserialization of Untrusted Data
Overview docling-core is an A python library to define and validate data types in Docling. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the loadfromyaml function. An attacker can execute arbitrary code by providing malicious YAML input to the...
GHSA-VQXF-V2GG-X3HC docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
Impact A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. Patches The...
CVE-2026-24009
Docling Core or docling-core is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version...
CVE-2026-24009 Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage
Docling Core or docling-core is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version...
EUVD-2026-3807
Docling Core or docling-core is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version...
CVE-2026-24009
CVE-2026-24009: Docling Core contains a PyYAML deserialization flaw enabling RCE in versions 2.21.0–2.48.3 when untrusted YAML is loaded via docling_core.types.doc.DoclingDocument.load_from_yaml() with PyYAML = 5.4. Severity data indicate high risk (CVSSv3.1: HIGH/CRITICAL depending on metric; ne...
MiracleLinux 8 : python38:3.8 (AXSA:2021-1517:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1517:01 advisory. PyYAML: command execution through python/object/apply constructor in FullLoader CVE-2019-20477 python: infinite loop in the tarfile module via craft...
MiracleLinux 8 : python38:3.8 (AXSA:2021-2388:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2388:01 advisory. PyYAML: incomplete fix for CVE-2020-1747 CVE-2020-14343 Modularity name: python38 Stream name: 3.8 Tenable has extracted the preceding description block...