CVE-2019-5420

🗓️ 07 Oct 2026 06:03:34Reported by KitPloitType

kitploit🔗 kitploit.com👁 12 Views

Ruby-on-Rails dev mode session encryption key brute forced via app name enabling RCE.

Reporter	Title	Published	Views	Family All 92
zdt	Ruby On Rails DoubleTap Development Mode secret_key_base Remote Code Execution Exploit	2 May 201900:00	–	zdt
GithubExploit	Exploit for Command Injection in Rubyonrails Rails	6 Sep 202112:28	–	githubexploit
GithubExploit	Exploit for Command Injection in Rubyonrails Rails	20 Jan 202115:06	–	githubexploit
GithubExploit	Exploit for Command Injection in Rubyonrails Rails	6 Sep 202112:28	–	githubexploit
GithubExploit	Exploit for Command Injection in Rubyonrails Rails	21 Mar 201915:42	–	githubexploit
GithubExploit	Exploit for Command Injection in Rubyonrails Rails	11 May 202111:32	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rubyonrails Rails	23 Mar 201902:52	–	githubexploit
GithubExploit	Exploit for Command Injection in Rubyonrails Rails	2 Jul 202215:44	–	githubexploit
attackerkb	Ruby on Rails DoubleTap Development Mode secret_key_base Vulnerability	27 Mar 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the Ruby on Rails software platform, related to errors in the code for generating pseudo-random numbers, allows attackers to execute arbitrary code.	27 Mar 201900:00	–	bdu_fstec

07 Oct 2026 06:03Current

8High risk

Vulners AI Score8

CVSS 27.5

CVSS 3.19.8

EPSS0.8933

Ruby-on-Rails session key brute force development mode remote code execution signed sessions