rabl-old

RABL RABL Ruby API Builder Language is a Rails and Padrino ruby templating system for generating JSON, XML, MessagePack, PList and BSON. When using the ActiveRecord 'tojson' method, I find myself wanting a more expressive and powerful solution for generating APIs. This is especially true when the...

dawnscanner

Dawnscanner - El escáner de seguridad emergente para aplicaciones web Ruby dawn es un escáner de código fuente diseñado para revisar sus aplicaciones web en busca de problemas de seguridad. La herramienta puede escanear aplicaciones web escritas en Ruby y soporta todos los principales frameworks...

CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

EUVD-2019-0677

Malware in sbrugna...

Cross-site scripting in padrino-contrib

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

GHSA-RWPR-83G3-96G7 Cross-site scripting in padrino-contrib

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

padrino-contrib XSS via caption parameter of breadcrumbs helper

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

Cross site scripting

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

CVE-2019-16145 affects the padrino-contrib breadcrumbs module (up to version 0.2.0) used with Padrino Framework. The root cause is an XSS in the caption parameter of breadcrumbs.rb that is not properly escaped, allowing script injection. This can enable an attacker to steal session tokens or perf...

CVE-2019-16145: Improper Neutralization of Input During Web Page Generation

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

PT-2019-14541

Name of the Vulnerable Software and Affected Versions Padrino Framework breadcrumbs contributed module version 0.2.0 and earlier Description The issue allows for XSS via a caption in the breadcrumbs contributed module. Recommendations For Padrino Framework breadcrumbs contributed module version...