364 matches found
name_reverser
== 欢迎使用 Rails Rails 是一个 Web 应用框架，包含了一切根据模型-视图-控制（Model-View-Control）模式创建数据库驱动 Web 应用所需的内容。 该模式将视图（也称为表示层）拆分为“哑”模板，主要负责在 HTML 标签之间插入预构建的数据。模型包含“智能”领域对象（如 Account、Product、Person、Post），这些对象拥有所有业务逻辑，并知道如何将自身持久化到数据库。控制器通过操作模型并将数据导向视图来处理传入的请求（如 Save New Account、Update Product、Show Post）。 在 Rails 中，模型由名...
Astra Linux – Vulnerability in Rails
There is a potential escalation to an RCE vulnerability when using YAML serialized columns in Active Record versions 7.0.3.1, 6.1.6.1, 6.0.5.1, and 5.2.8.1. This could allow an attacker, who can manipulate data in the database through methods like SQL injection, to escalate the attack to an RCE...
CVE-2026-73491 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce, ruby3.2-rails, pghero, gitlab-rails-ce-fips, pghero-fips, ruby3.3-rails, ruby4.0-rails...
PT-2026-69243
Summary Active Record Tenanted's override of Active Storage's DiskServicepath for does not validate that the resolved filesystem path remains within the storage root directory. If a blob key containing path traversal sequences e.g. ../ is used, it could allow reading, writing, or deleting arbitra...
ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal
Active Record Tenanted's override of Active Storage's DiskServicepathfor does not validate that the resolved filesystem path remains within the storage root directory. If a blob key containing path traversal sequences e.g. ../ is used, it could allow reading, writing, or deleting arbitrary files ...
[SECURITY] [DLA 4578-1] rails security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4578-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 11, 2026 https://wiki.debian.org/LTS -...
Debian dla-4578 : rails - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4578 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4578-1 [email protected] https://www.debian.org/lts/security/...
RHCOS 6 : Red Hat OpenShift Enterprise 1.1 update (Important) (RHSA-2013:0220)
The remote Red Hat Enterprise Linux CoreOS 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0220 advisory. - Origin: rhc-chk.rb password exposure in log files CVE-2012-5658 - Jenkins: HTTP response splitting CVE-2012-6072 - Jenkins: open...
EUVD-2026-2921
ActiveRecord-JDBC-Adapter AR-JDBC lib/arjdbc/jdbc/adapter.rb sql.gsub Function SQL Injection...
ActiveRecord-JDBC-Adapter (AR-JDBC) lib/arjdbc/jdbc/adapter.rb sql.gsub() Function SQL Injection
ActiveRecord-JDBC-Adapter AR-JDBC contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the sql.gsub function in lib/arjdbc/jdbc/adapter.rb not properly sanitizing user-supplied input before using it in SQL queries. This may allow a remote attacker to inject or...
EUVD-2017-0273
Malware in sbrugna...
EUVD-2017-0298
Malware in sbrugna...
EUVD-2017-0254
Malware in sbrugna...
EUVD-2021-0633
Malware in sbrugna...
EUVD-2017-0334
Malware in sbrugna...
EUVD-2015-5671
Malware in sbrugna...
EUVD-2013-3159
Malware in sbrugna...
EUVD-2021-0645
Malware in sbrugna...