Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

Threat actors are targeting misconfigured and vulnerable servers running Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis services as part of an emerging malware campaign designed to deliver a cryptocurrency miner and spawn a reverse shell for persistent remote access. "The attackers...

New Linux Malware Alert: ‘Spinning YARN’ Hits Docker, Other Key Apps

By Deeba Ahmed Another day, another Linux malware! This is a post from HackRead.com Read the original post: New Linux Malware Alert: Spinning YARN Hits Docker, Other Key Apps...

Important Photon OS Security Update - PHSA-2024-3.0-0723

Updates of 'linux-aws', 'yarn', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

Untrusted Search Path

Yarn is vulnerable to Untrusted Search Path. The vulnerability is caused due to improper validation before constructing a file path within the validate method in child.js .This could allow an attacker to execute malicious commands in unexpected ways if the attacker tricks a user into executing...

7ghost-cli (>=1.17.6-next.0, <=1.18.4), @6river/rosbag (>=1.0.2-6river, <=1.1.0-browserOrNode.2) +63 more potentially affected by CVE-2021-4435 via yarn (>=1.0.2, <=1.22.11)

yarn NPM version =1.0.2, =1.17.6-next.0, =1.0.2-6river, =0.0.9, =0.0.1, =1.6.0, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.4.0-next.7, =0.3.0-next.1, =0.3.0-next.1, =1.1.0-dev.2, =5.6.4, =3.1.264, =1.15.3, =1.15.5 and more Source cves: CVE-2021-4435 Source advisory: OSV:GHSA-MPWJ-FCR6-X34C...

Yarn untrusted search path vulnerability

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

GHSA-MPWJ-FCR6-X34C Yarn untrusted search path vulnerability

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

DEBIAN-CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

Design/Logic Flaw

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

UBUNTU-CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435 Yarn: untrusted search path

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435 Yarn: untrusted search path

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

CVE-2021-4435 describes an untrusted search path vulnerability in Yarn. The issue can allow execution of malicious commands when a victim runs certain Yarn commands in a directory containing attacker-controlled content. Impact details in the NVD entry show a high-severity, local attack with requi...

Yarn Security Vulnerabilities

Yarn is an open source package installation and management tool. A security vulnerability exists in Yarn that stems from an untrustworthy search path vulnerability...

PT-2024-11033 · Yarn +2 · Yarn +2

Name of the Vulnerable Software and Affected Versions: Yarn affected versions not specified Description: An untrusted search path issue was found, allowing malicious commands to be executed in unexpected ways when certain commands are run in a directory with attacker-controlled content...