424 matches found
CVE-2016-2098
CVE-2016-2098 Ruby on Rails 中 Action Pack 在 3.2.22.2 之前、4.x 在 4.1.14.2 之前、以及 4.2.x 在 4.2.5.2 之前的版本，允许远程攻击者通过利用应用程序对 render 方法的无限制使用来执行任意 Ruby 代码。 https://vulners.com/cve/CVE-2016-2098 用法 root@kitploit: git clone https://github.com/its-arun/CVE-2016-2098.git cd CVE-2016-2098 /bin/bash...
name_reverser
== 欢迎使用 Rails Rails 是一个 Web 应用框架，包含了一切根据模型-视图-控制（Model-View-Control）模式创建数据库驱动 Web 应用所需的内容。 该模式将视图（也称为表示层）拆分为“哑”模板，主要负责在 HTML 标签之间插入预构建的数据。模型包含“智能”领域对象（如 Account、Product、Person、Post），这些对象拥有所有业务逻辑，并知道如何将自身持久化到数据库。控制器通过操作模型并将数据导向视图来处理传入的请求（如 Save New Account、Update Product、Show Post）。 在 Rails 中，模型由名...
CVE-2016-2098
CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 使用 git clone...
CVE-2016-2098
CVE-2016-2098 Ruby on Rails 中 Action Pack 在 3.2.22.2 之前版本、4.x 在 4.1.14.2 之前版本及 4.2.x 在 4.2.5.2 之前版本中，允许远程攻击者利用应用程序对 render 方法的无限制使用来执行任意 Ruby 代码。 分类 输入验证错误 致谢 来自 makandra 的 Tobias Kraze 和 Phenoelit 的 joernchen 使用方法 请对代码进行必要的修改以最好地满足您的需求 这并不完美，因为我正在持续学习 Python...
CVE-2016-2098
CVE-2016-2098 Ruby on Rails 3.2.22.2未満、4.x系4.1.14.2未満、4.2.x系4.2.5.2未満のAction Packでは、アプリケーションによるrenderメソッドの無制限な使用を悪用することで、リモート攻撃者が任意のRubyコードを実行できる脆弱性があります。 リソース https://vulners.com/cve/CVE-2016-2098 使用方法 このエクスプロイトスクリプトを使用するには、3つのパラメータが必要です。 1. 脆弱なWebサーバーのWebページURL 2. コマンド注入の可能性がある脆弱なパラメータ 3...
Ruby on Rails - Open Redirect via Host Header Injection
Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...
VulnCheck KEV: CVE-2026-66066
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...
Astra Linux – Vulnerability in Rails
The Actionpack Ruby gem versions prior to 6.1.3.2, 6.0.3.7, 5.2.4.6, and 5.2.6 have a possible denial-of-service vulnerability in the Token Authentication logic of the Action Controller, due to overly permissive regular expressions. Affected code uses authenticateorrequestwithhttptoken or...
Astra Linux – Vulnerability in Rails
An XSS vulnerability exists in Action Pack versions = 5.2.0 and 5.2.0, which could allow an attacker to bypass the Content Security Policy and generate non-HTML responses...
Astra Linux – Vulnerability in Rails
Action Pack is a framework for handling and responding to web requests. Under certain circumstances, response bodies may not be closed properly. If a response does not notify the system of a close operation, ActionDispatch::Executor will not know to reset the thread local state for the next...
K000162741: Ruby on Rails Action Pack vulnerability CVE-2026-66066
Security Advisory Description Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation...
Arbitrary File Read
Action Pack Active Storage is vulnerable to Arbitrary File Read. The vulnerability is due to unsafe libvips operations being permitted on untrusted image uploads, allowing attackers to craft malicious images that read arbitrary files accessible to the Rails process and expose sensitive applicatio...
CVE-2026-66066
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...
UBUNTU-CVE-2026-66066
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...
EUVD-2026-51270
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...
CVE-2026-66066 Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...
CVE-2026-66066
CVE-2026-66066 (CVSS 9.5 CRITICAL) affects Ruby on Rails Active Storage in versions prior to 7.2.3.2, 8.0.5.1, and 8.1.3.1 . The root cause is that Active Storage fails to disable libvips operations marked unfuzzed (unsafe for untrusted content), so a crafted image upload can invoke such an opera...
CVE-2026-66066 Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...
RHCOS 6 : Ruby on Rails (RHSA-2013:0153)
The remote Red Hat Enterprise Linux CoreOS 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0153 advisory. - rubygem-activesupport: Multiple vulnerabilities in parameter parsing in ActionPack CVE-2013-0156 Note that Nessus has not tested for this...
Linux Distros Unpatched Vulnerability : CVE-2026-33167
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does no...