CVE-2019-5420

CVE-2019-5420 Ruby-on-Rails は、development、test、production の3つの異なる環境で実行できます。当然、development や test で実行されているコードをインターネット上に公開すべきではありませんが、実際には（ステージング環境などで）よく発生します。 Ruby-on-Rails は「署名付きセッション signed-sessions」を使用して、アプリケーションを簡単にスケールできるようにしています。時間の経過とともに、セッションの処理方法は変化しました。バージョン 5.2.2 以降、セッションは JSON...

CVE-2019-5420

CVE-2019-5420 脆弱性により、攻撃者が自動生成された開発モードのシークレットトークンを推測できる可能性があります。 Ruby-on-Railsが開発モードで実行されている場合。開発モードでは、攻撃者がセッションを保護するために使用されるキーを推測することが可能です。 復号化: キー生成: Railsは3つの環境（development, test, production）を使用します。アプリケーションが開発モードを使用する場合、シークレットトークンを推測し、暗号化されたセッションを復号化することができます。...

Apache-Struts-2-CVE-2017-5638-Exploit-

Apache-Struts-2-CVE-2017-5638-Exploit 이 익스플로잇은 Apache Struts2 취약점CVE-2017-5638을 악용하여 원격으로 Apache 서버에서 명령을 실행할 수 있게 합니다. 사용 방법: $ sudo python Struts2Shell001.py root@kitploit: ! Exploit Apache Struts2 DEMO Code of Rvbk + HOST con https 취약점이 있는 사이트 struts를 사용하는 사이트를 찾는 google dork: intitle:"Struts...

CVE-2019-5420

CVE-2019-5420 PoC 開発モードのRails 5.2.2.1、6.0.0.beta3におけるリモートコード実行の脆弱性により、攻撃者が自動生成された開発モードのシークレットトークンを推測できる可能性があります。このシークレットトークンは、他のRails内部機構と組み合わせてリモートコード実行エクスプロイトに昇格させることができます。CVE-2019-5420用のこのPoCコードは、リモートコード実行自体は行わず、管理者アカウントへの権限昇格を行います。 使い方 cookieの値をコピーし、11行目の"VALUEOFTHECOOKIE"に置き換えてください: cookie =...

CVE-2019-5420

CVE-2019-5420 Rails CVE-2019-5420 のエクスプロイト 問題 Rails v5.2.2 までは、開発モードでセッションを保護する場合、アプリケーションはアプリケーション名からキーを導出します。...

Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host

Impact Nuxt DevTools development mode only exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authentication: any client that can reach the Vite HMR endpoint ws://:/, subprotocol vite-hmr can call RPC methods,...

PYSEC-2026-3515 PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

Summary The published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without authentication when the operator starts the documented CLI entrypoint: text praisonai serve...

PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default

Summary The published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without authentication when the operator starts the documented CLI entrypoint: text praisonai serve...

CVE-2026-22599

Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in the Strapi Content-Type Builder write API. An authenticated administrator could inject arbitrary...

CVE-2026-22599

Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in the Strapi Content-Type Builder write API. An authenticated administrator could inject arbitrary...

CVE-2026-22599 Strapi Vulnerable to SQL Injection in Content Type Builder

Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in the Strapi Content-Type Builder write API. An authenticated administrator could inject arbitrary...

CVE-2026-22599 Strapi Vulnerable to SQL Injection in Content Type Builder

Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in the Strapi Content-Type Builder write API. An authenticated administrator could inject arbitrary...

EUVD-2026-30352

Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in the Strapi Content-Type Builder write API. An authenticated administrator could inject arbitrary...

CVE-2026-22599

Strapi Content-Type Builder contains a database-query injection in the write API for the 4.x and 5.x branches prior to 4.26.1 and 5.33.2. An authenticated administrator could pass arbitrary SQL via column.defaultTo (as [value, { isRaw: true }]) to Knex during schema migrations, enabling statement...

SQL Injection

Overview @strapi/plugin-content-type-builder is a Strapi plugin to create content type Affected versions of this package are vulnerable to SQL Injection via the column.defaultTo attribute in the content type creation or modification. An attacker can execute arbitrary database statements by...

Linux Distros Unpatched Vulnerability : CVE-2026-33167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does no...

SUSE CVE-2026-33167

Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary HTML and JavaScript into the page,...

CVE-2026-33167

Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary HTML and JavaScript into the page,...

UBUNTU-CVE-2026-33167

Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary HTML and JavaScript into the page,...

CVE-2026-33167

Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary HTML and JavaScript into the page,...