5174 matches found
CVE-2026-54464 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, gitlab-rails-ce...
GHSA-8J3G-F24P-4MPW vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, gitlab-rails-ce...
GHSA-GHHP-3QVG-889P vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, gitlab-rails-ce...
CVE-2026-73330 CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the testemail settings action, which are evaluated when an SMTP rejection reflects the recipient address...
CVE-2026-73330 CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the testemail settings action, which are evaluated when an SMTP rejection reflects the recipient address...
CVE-2026-73330: Improper Neutralization of Special Elements Used in a Template Engine
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the testemail settings action, which are evaluated when an SMTP rejection reflects the recipient address...
PT-2026-71260
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the test email settings action, which are evaluated when an SMTP rejection reflects the recipient addres...
CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the testemail settings action, which are evaluated when an SMTP rejection reflects the recipient address...
CVE-2026-72915 Mastodon: Personally-identifying information disclosure due to incorrect access control validation
Mastodon is a free, open-source social network server based on ActivityPub. From 4.6.0-beta.1 until 4.6.4 and 4.7.0-beta.1, any logged-in local user could use the show action in app/controllers/admin/collectionscontroller.rb to access personally identifying information about another local user in...
CVE-2026-67214 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, jupyter-base-notebook, langfuse-fips, arangodb, langfuse, opensearch-dashboards-fips, dotstatsuite-supercore, commercial-gitlab-rails-ee-fips, jitsucom-jitsu, gitlab-rails-ce, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards,...
GHSA-28WG-GHJ8-5HJV vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, jupyter-base-notebook, langfuse-fips, arangodb, langfuse, opensearch-dashboards-fips, dotstatsuite-supercore, commercial-gitlab-rails-ee-fips, jitsucom-jitsu, gitlab-rails-ce, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards,...
Rails - XML YAML Deserialization Detection (CVE-2013-0156)
Detects CVE-2013-0156 by POSTing XML probes string vs yaml Time vs null-byte object to /posts/search and comparing status codes. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails XML/YAML deserialization probe CVE-2013-0156.""" from kittysploit import from lib.protocols.http.httpclient...
Ruby on Rails Web Console - IP Bypass RCE (CVE-2015-3224)
Exploits CVE-2015-3224 by bypassing Web Console IP restrictions with X-Forwarded-For: 0000::1 and evaluating backtick OS commands. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails Web Console IP whitelist bypass RCE CVE-2015-3224 — opens execute...
Ruby on Rails Web Console - IP Bypass RCE Detection (CVE-2015-3224)
Detects CVE-2015-3224 by requesting a random path with X-Forwarded-For: 0000::1, extracting the web-console mount/session, then PUTting a backtick command. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails Web Console IP whitelist bypass RCE CVE-2015-3224.""" import re from urllib.parse...
Ruby on Rails - Accept Header File Read (CVE-2019-5418)
Reads arbitrary files via CVE-2019-5418 Accept-header path traversal ../../../../file. !/usr/bin/env python3 -- coding: utf-8 -- """Rails Accept-header arbitrary file read CVE-2019-5418.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi...
CVE-2026-71847 vulnerabilities
Vulnerabilities for packages: logstash-fips, ruby3.2-rails, pact-broker-docker-fips, cinc-auditor, pact-broker-docker, ruby3.4-rails, logstash, ruby3.3-rails...
GHSA-9HJ4-R449-HFVC vulnerabilities
Vulnerabilities for packages: logstash-fips, ruby3.2-rails, pact-broker-docker-fips, cinc-auditor, pact-broker-docker, ruby3.4-rails, logstash, ruby3.3-rails...
CVE-2026-66066-POC — Updated!
PoC for CVE-2026-66066 - Minimal stock Rails/libvips lab This repository reproduces the Rails Active Storage file-read-to-RCE chain described by GHSA-xr9x-r78c-5hrm against Rails 8.1.3, the newest affected Rails 8.1 release. Rails 8.1.3.1 is the patched control. Use it only in the disposable loca...
Fedora 45 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2026-000149d00e)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-000149d00e advisory. Update Ruby on Rails 8.1.3.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...
