CVE-2013-4660

This Metasploit module exploits a code execution vulnerability in the 'js-yaml' Node.js package (versions < 2.0.5) by crafting a malicious YAML file that executes arbitrary JavaScript when parsed via the `load()` function. The exploit leverages YAML's ability to deserialize JavaScript functions, allowing for remote code execution.

This Metasploit module exploits a deserialization vulnerability in the 'js-yaml' Node.js package (versions < 2.0.5) by leveraging the unsafe !!js/function tag to execute arbitrary JavaScript code when parsing user-supplied YAML input.