Lucene search
+L

364 matches found

Kitploit
Kitploit
•added 2026/10/08 12:56 p.m.•20 views

name_reverser

== مرحبًا بكم في Rails Rails هو إطار عمل لتطبيقات الويب يتضمن كل ما يلزم لإنشاء تطبيقات ويب مدعومة بقاعدة بيانات وفق نمط Model-View-Control. يقسم هذا النمط العرض ويُسمى أيضًا طبقة العرض التقديمي إلى قوالب "البسيطة" المسؤولة بشكل أساسي عن إدراج البيانات الجاهزة بين وسوم HTML. أما النموذج فيحتوي عل...

5.9AI score
SaveExploits0
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•17 views

Astra Linux – Vulnerability in Rails

There is a potential escalation to an RCE vulnerability when using YAML serialized columns in Active Record versions 7.0.3.1, 6.1.6.1, 6.0.5.1, and 5.2.8.1. This could allow an attacker, who can manipulate data in the database through methods like SQL injection, to escalate the attack to an RCE...

9.8CVSS6.5AI score0.02601EPSS
SaveExploits1References1
Chainguard
Chainguard
•added 2026/08/13 8:26 p.m.•33 views

CVE-2026-73491 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, pghero, ruby3.2-rails, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.4-rails, ruby3.3-rails, pghero-fips...

2.3CVSS5.9AI score0.00394EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•4 views

PT-2026-69243

Summary Active Record Tenanted's override of Active Storage's DiskServicepath for does not validate that the resolved filesystem path remains within the storage root directory. If a blob key containing path traversal sequences e.g. ../ is used, it could allow reading, writing, or deleting arbitra...

2.3CVSS6AI score
SaveExploits0References7
GitLab Advisory Database
GitLab Advisory Database
•added 2026/07/29 12:00 a.m.•101 views

ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal

Active Record Tenanted's override of Active Storage's DiskServicepathfor does not validate that the resolved filesystem path remains within the storage root directory. If a blob key containing path traversal sequences e.g. ../ is used, it could allow reading, writing, or deleting arbitrary files ...

5.9AI score
SaveExploits0References6Affected Software1
Debian
Debian
•added 2026/05/11 2:17 p.m.•35 views

[SECURITY] [DLA 4578-1] rails security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4578-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 11, 2026 https://wiki.debian.org/LTS -...

9.8CVSS6.5AI score0.02601EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/05/11 12:00 a.m.•32 views

Debian dla-4578 : rails - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4578 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4578-1 [email protected] https://www.debian.org/lts/security/...

9.8CVSS6.6AI score0.02601EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/05/04 12:00 a.m.•17 views

RHCOS 6 : Red Hat OpenShift Enterprise 1.1 update (Important) (RHSA-2013:0220)

The remote Red Hat Enterprise Linux CoreOS 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0220 advisory. - Origin: rhc-chk.rb password exposure in log files CVE-2012-5658 - Jenkins: HTTP response splitting CVE-2012-6072 - Jenkins: open...

7.5CVSS5.8AI score0.04582EPSS
SaveExploits2References52
EUVD
EUVD
•added 2026/01/16 7:20 p.m.•15 views

EUVD-2026-2921

ActiveRecord-JDBC-Adapter AR-JDBC lib/arjdbc/jdbc/adapter.rb sql.gsub Function SQL Injection...

7.5AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/01/16 7:20 p.m.•20 views

ActiveRecord-JDBC-Adapter (AR-JDBC) lib/arjdbc/jdbc/adapter.rb sql.gsub() Function SQL Injection

ActiveRecord-JDBC-Adapter AR-JDBC contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the sql.gsub function in lib/arjdbc/jdbc/adapter.rb not properly sanitizing user-supplied input before using it in SQL queries. This may allow a remote attacker to inject or...

7.8AI score
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-0273

Malware in sbrugna...

7.5CVSS7.3AI score0.04278EPSS
SaveExploits0References15
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2017-0298

Malware in sbrugna...

7.5CVSS6AI score0.04181EPSS
SaveExploits0References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-0254

Malware in sbrugna...

6.8CVSS6.1AI score0.01266EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2021-0633

Malware in sbrugna...

7.5CVSS6.7AI score0.04434EPSS
SaveExploits1References15
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-0334

Malware in sbrugna...

5.3CVSS5.5AI score0.0425EPSS
SaveExploits0References20
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2015-5671

Malware in sbrugna...

9.8CVSS9.5AI score0.02321EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2013-3159

Malware in sbrugna...

6.4CVSS7.4AI score0.01962EPSS
SaveExploits2References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-0209

Malware in sbrugna...

7.5CVSS6.1AI score0.02797EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2017-0155

Malware in sbrugna...

5CVSS5.9AI score0.03504EPSS
SaveExploits0References22
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2017-0183

Malware in sbrugna...

7.5CVSS5.9AI score0.02981EPSS
SaveExploits2References16
Rows per page
Query Builder