1649 matches found
Hadoop-Yarn-ResourceManager-RCE
Vuln Impact There was an unauthorized access vulnerability in Hadoop yarn ResourceManager. This vulnerability existed in Hadoop yarn, the core component of Hadoop. Because Hadoop yarn opened the RPC service to the public by default, a remote attacker could take advantage of this unauthorized...
salus
Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...
ROOT-APP-NPM-CVE-2020-8131 CVE-2020-8131 in yarn - Patched by Root
Root has patched CVE-2020-8131 in the yarn package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2019-10773 CVE-2019-10773 in yarn - Patched by Root
Root has patched CVE-2019-10773 in the yarn package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-4435 CVE-2021-4435 in yarn - Patched by Root
Root has patched CVE-2021-4435 in the yarn package for Root:npm. Multiple fixed versions available...
Hadoop-YARN-RCE
Unauthenticated RCE in Apache Hadoop YARN ResourceManager An unauthorized access vulnerability exists in Apache Hadoop YARN ResourceManager when its REST API default port 8088 or RPC ports are exposed without authentication enabled. By default, Hadoop leaves HTTP web consoles and RPC services...
Malicious code in iris-7cmmq-sgta5-yarn-project (npm)
The package iris-7cmmq-sgta5-yarn-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in example-yarn (npm)
The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...
Malicious code in ember-pvd7i-encu7-yarn-project (npm)
The package ember-pvd7i-encu7-yarn-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dynamo-r1fvy-txt19-yarn-project (npm)
The package dynamo-r1fvy-txt19-yarn-project was found to contain malicious code. --- Credit: OpenSSF source...
Apache Hadoop YARN - Unauthenticated RCE
Exploits unauthenticated YARN ResourceManager REST API to submit a malicious application whose AM container runs self.payload on a cluster worker node. Blind execution — use a reverse CMD payload. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Hadoop YARN ResourceManager unauthenticated RCE ...
CVE-2021-24901
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:56+00:00| seen| https://t.me/hackingAttack/42050 2026-09-02 01:02:17+00:00| seen| https://t.me/hackingAttack/42050 2026-09-06 10:00:06+00:00| published-proof-of-concept| https://t.me/hackingAttack/42050 2026-09-07 01:00:24+00:00|...
Malware in test-pkg-yarn
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CLSA-2026-1786471987 TuxCare security update for yarn (3 CVEs)
TuxCare rebuilt yarn to address 3 CVEs. Fixed in 1.21.0-tuxcare.1...
CLSA-2026-1786471978 TuxCare security update for yarn (1 CVE)
TuxCare rebuilt yarn to address 1 CVE. Fixed in 1.22.1-tuxcare.1...
PT-2026-80086
TuxCare rebuilt yarn to address 3 CVEs. Fixed in 1.21.0-tuxcare.1...
PT-2026-80085
TuxCare rebuilt yarn to address 1 CVE. Fixed in 1.22.1-tuxcare.1...
CLSA-2026-1786378841 TuxCare security update for yarn (5 CVEs)
TuxCare rebuilt yarn to address 5 CVEs. Fixed in 1.15.2-tuxcare.1...
PT-2026-80047
TuxCare rebuilt yarn to address 5 CVEs. Fixed in 1.15.2-tuxcare.1...
Apache Hadoop YARN ResourceManager - Unauthenticated API Detection
Apache Hadoop YARN ResourceManager is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Apache...