4495 matches found
Red Hat CloudForms Management Engine 5.1 agent/linuxpkgs Path Traversal
This module exploits a path traversal vulnerability in the "linuxpkgs" action of "agent" controller of the Red Hat CloudForms Management Engine 5.1 ManageIQ Enterprise Virtualization Manager 5.0 and earlier. It uploads a fake controller to the controllers directory of the Rails application with t...
Fedora Update for rubygem-passenger FEDORA-2013-13297
Check for the Version of rubygem-passenger OpenVAS Vulnerability Test Fedora Update for rubygem-passenger FEDORA-2013-13297 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Rgpg 0.2.2 Ruby Gem Remote Command Injection
Title: Rgpg 0.2.2 Ruby Gem Remote Command Injection Date: 7/31/2013 Advisory Author: Larry W. Cashdollar, @larry0 CVE: CVE-2013-4203 Download: https://rubygems.org/gems/rgpg Description: "A simple Ruby wrapper around gpg command for file encryption. rgpg is a simple API for interacting with the g...
Ruby on Rails - Known Secret Session Cookie Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank =...
Squash - YAML Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'zlib' class Metasploit3 'Squash YAML Code...
Ruby on Rails Known Secret Session Cookie Remote Code Execution
This Metasploit module implements remote command execution on Ruby on Rails applications. Prerequisite is knowledge of the "secrettoken" Rails 2/3 or "secretkeybase" Rails 4. The values for those can be usually found in the file "RAILSROOT/config/initializers/secrettoken.rb". The module achieves...
Ruby on Rails Known Secret Session Cookie Remote Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 NullSe...
Squash YAML Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'zlib' class Metasploit3 'Squash YAML Code...
Squash YAML Code Execution Vulnerability
This Metasploit module exploits a remote code execution vulnerability in the YAML request processor of the Squash application. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on...
rubygem-json: Denial of Service and SQL Injection
The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...
Squash YAML Code Execution
This module exploits a remote code execution vulnerability in the YAML request processor of the Squash application. Module Options msf use exploit/unix/webapp/squash/yamlexec msf undefinedyamlexec show actions ...actions... msf undefinedyamlexec set ACTION msf undefinedyamlexec show options ...sh...
Ruby Gem Rgpg 0.2.2 Command Injection
Title: Rgpg 0.2.2 Ruby Gem Remote Command Injection Date: 7/31/2013 Advisory Author: Larry W. Cashdollar, @larry0 CVE: CVE-2013-4203 Download: https://rubygems.org/gems/rgpg Description: "A simple Ruby wrapper around gpg command for file encryption. rgpg is a simple API for interacting with the g...
Fedora Update for rubygem-passenger FEDORA-2013-13231
Check for the Version of rubygem-passenger OpenVAS Vulnerability Test Fedora Update for rubygem-passenger FEDORA-2013-13231 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
[SECURITY] Fedora 18 Update: rubygem-passenger-3.0.21-4.fc18
Phusion Passenger=E2=84=A2 =E2=80=94 a.k.a. modrails or modrack =E2=80=94 makes deployment of Ruby web applications, such as those built on the revolutionary Ruby on Rails web framework, a breeze. It follows the usual Ruby on Rails conventions, such as...
[SECURITY] Fedora 19 Update: rubygem-passenger-3.0.21-4.fc19
Phusion Passenger=E2=84=A2 =E2=80=94 a.k.a. modrails or modrack =E2=80=94 makes deployment of Ruby web applications, such as those built on the revolutionary Ruby on Rails web framework, a breeze. It follows the usual Ruby on Rails conventions, such as...
[SECURITY] Fedora 17 Update: rubygem-passenger-3.0.21-4.fc17
Phusion Passenger=E2=84=A2 =E2=80=94 a.k.a. modrails or modrack =E2=80=94 makes deployment of Ruby web applications, such as those built on the revolutionary Ruby on Rails web framework, a breeze. It follows the usual Ruby on Rails conventions, such as...
[Netsparker v3.0.2.0 Community Edition] Web Application Security Scanner
Netsparker can crawl, attack and identify vulnerabilities in all custom web applications regardless of the platform and the technology they are built on, just like an actual attacker. It can identify web application vulnerabilities like SQL Injection, Cross-site Scripting XSS, Remote Code Executi...
Fedora Update for rubygem-passenger FEDORA-2013-9771
Check for the Version of rubygem-passenger OpenVAS Vulnerability Test Fedora Update for rubygem-passenger FEDORA-2013-9771 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Fedora Update for rubygem-passenger FEDORA-2013-9789
Check for the Version of rubygem-passenger OpenVAS Vulnerability Test Fedora Update for rubygem-passenger FEDORA-2013-9789 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
[SECURITY] Fedora 19 Update: rubygem-passenger-3.0.21-1.fc19
Phusion Passenger=E2=84=A2 =E2=80=94 a.k.a. modrails or modrack =E2=80=94 makes deployment of Ruby web applications, such as those built on the revolutionary Ruby on Rails web framework, a breeze. It follows the usual Ruby on Rails conventions, such as...