481 matches found
salus
Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...
Hadoop-Yarn-ResourceManager-RCE
漏洞影响 Hadoop yarn ResourceManager 存在未授权访问漏洞。此漏洞存在于 Hadoop 的核心组件 Hadoop yarn 中。由于 Hadoop yarn 默认向公众开放 RPC 服务,远程攻击者可利用该未授权漏洞,通过 RPC 服务执行任意命令,从而控制目标服务器。鉴于该漏洞风险级别高、危害性大,且细节已被公开并被攻击方利用,建议所有使用 Apache Hadoop 的用户进行自查并及时采取安全措施。 漏洞产品 Apache Hadoop Yarn 漏洞检测 基本用法 python3 HadoopYanRPCRCE.py 漏洞检测 python3...
Hadoop-YARN-RCE
Unauthenticated RCE in Apache Hadoop YARN ResourceManager An unauthorized access vulnerability exists in Apache Hadoop YARN ResourceManager when its REST API default port 8088 or RPC ports are exposed without authentication enabled. By default, Hadoop leaves HTTP web consoles and RPC services...
CVE-2021-24901
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:56+00:00| seen| https://t.me/hackingAttack/42050 2026-09-02 01:02:17+00:00| seen| https://t.me/hackingAttack/42050 2026-09-06 10:00:06+00:00| published-proof-of-concept| https://t.me/hackingAttack/42050 2026-09-07 01:00:24+00:00|...
CLSA-2026-1786471987 TuxCare security update for yarn (3 CVEs)
TuxCare rebuilt yarn to address 3 CVEs. Fixed in 1.21.0-tuxcare.1...
CLSA-2026-1786471978 TuxCare security update for yarn (1 CVE)
TuxCare rebuilt yarn to address 1 CVE. Fixed in 1.22.1-tuxcare.1...
PT-2026-80085
TuxCare rebuilt yarn to address 1 CVE. Fixed in 1.22.1-tuxcare.1...
PT-2026-80086
TuxCare rebuilt yarn to address 3 CVEs. Fixed in 1.21.0-tuxcare.1...
CLSA-2026-1786378841 TuxCare security update for yarn (5 CVEs)
TuxCare rebuilt yarn to address 5 CVEs. Fixed in 1.15.2-tuxcare.1...
MAL-2026-6718 Malicious code in test-pkg-yarn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b74339843ee482f3f135dd43e855f1f30758e20857333e0e6153748888769a package.json declares bin: "node": "./shim.js" , causing npm/yarn to symlink node in nodemodules/.bin and in a system bin dir on global install to a...
CVE-2019-5448 vulnerabilities
Vulnerabilities for packages: yarn...
CVE-2021-4435 vulnerabilities
Vulnerabilities for packages: yarn...
GHSA-HJXC-462X-X77J vulnerabilities
Vulnerabilities for packages: yarn...
GHSA-5XF4-F2FQ-F69J vulnerabilities
Vulnerabilities for packages: yarn...
CVE-2019-10773 vulnerabilities
Vulnerabilities for packages: yarn...
GHSA-MPWJ-FCR6-X34C vulnerabilities
Vulnerabilities for packages: yarn...
CVE-2019-15608 vulnerabilities
Vulnerabilities for packages: yarn...
GHSA-WQFC-CR59-H64P vulnerabilities
Vulnerabilities for packages: yarn...