MAL-2025-39609 Malicious code in xenith-6elzx-79g7r-yeti-project (npm)

The package xenith-6elzx-79g7r-yeti-project was found to contain malicious code...

MAL-2025-40464 Malicious code in yeti-delta-cfj239-project (npm)

The package yeti-delta-cfj239-project was found to contain malicious code...

MAL-2025-40468 Malicious code in yeti-hammock-zdd498-project (npm)

The package yeti-hammock-zdd498-project was found to contain malicious code...

MAL-2025-40471 Malicious code in yeti-mountain-jzv065-project (npm)

The package yeti-mountain-jzv065-project was found to contain malicious code...

MAL-2025-40472 Malicious code in yeti-nectar-cny089-project (npm)

The package yeti-nectar-cny089-project was found to contain malicious code...

MAL-2025-40475 Malicious code in yeti-reef-sku061-project (npm)

The package yeti-reef-sku061-project was found to contain malicious code...

MAL-2025-40481 Malicious code in yeti-yawn-tuu230-project (npm)

The package yeti-yawn-tuu230-project was found to contain malicious code...

MAL-2025-40483 Malicious code in yeti-yonder-ssy506-project (npm)

The package yeti-yonder-ssy506-project was found to contain malicious code...

Malicious code in yeti-hammock-zdd498-project (npm)

The package yeti-hammock-zdd498-project was found to contain malicious code...

Malicious code in yeti-amber-ugd443-project (npm)

The package yeti-amber-ugd443-project was found to contain malicious code...

Malicious code in yeti-yonder-ssy506-project (npm)

The package yeti-yonder-ssy506-project was found to contain malicious code...

Malicious code in yeti-tide-whe735-project (npm)

The package yeti-tide-whe735-project was found to contain malicious code...

MAL-2025-40478 Malicious code in yeti-wisp-oyb043-project (npm)

The package yeti-wisp-oyb043-project was found to contain malicious code...

MAL-2025-40477 Malicious code in yeti-wave-wtx381-project (npm)

The package yeti-wave-wtx381-project was found to contain malicious code...

Malicious code in leopard-yeti-kzy985-project (npm)

The package leopard-yeti-kzy985-project was found to contain malicious code...

YETI Platform Input Verification SSTI

The vulnerability of the YETI platform for collecting and analyzing data on cyber threats is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or carry out Server Side Template Injection SSTI attacks...

Yeti threat analysis platform Privilege Escalation

The vulnerability of the Yeti threat analysis platform is related to the use of strictly encrypted credentials. Exploiting this vulnerability allows a remote attacker to enhance their privileges by using a static JWT token...

CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI)

The post CVE-2024-46507: Yeti Platform Server-Side Template Injection SSTI appeared first on Rhino Security Labs...

PT-2024-10438

Name of the Vulnerable Software and Affected Versions Yeti platform affected versions not specified Description The issue is related to the use of hardcoded credentials. An attacker can exploit this to gain elevated privileges by utilizing a static JWT token. Recommendations At the moment, there ...

CVE-2024-45412

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Remote user-controlled data tags can reach a Unicode normalization with a compatibility form NFKD. Under Windows, such normalization is costly in resources and may lead to denial o...