CVE-2026-102599 vulnerabilities

Vulnerabilities for packages: redisinsight, gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2016-2098-my-first-exploit

CVE-2016-2098-my-first-exploit This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. It's written in python3, and remember to install the requests library. here is the command. pip3 install requests...

PoC_CVE-2016-2098_Rails42

A PoC of CVE-2016-2098 rails 4.2.5.1 view has a vulnerable code app/views/poc/render1.html.erb following command will cause remote code execution $ curl ':3000/poc/render1?template\inline='...

name_reverser

== Welcome to Rails Rails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Control pattern. This pattern splits the view also called the presentation into "dumb" templates that are primarily responsible for...

CVE-2013-0156

Rails YAML deserialization RCE CVE-2013-0156 - PentesterLab Compatible Ronin-free, Ruby 3.x compatible version of https://gist.github.com/postmodern/4499206 Usage: ruby railsrce.rb http://target/ "system'/usr/local/bin/score UUID'" ⚠️ LEGAL DISCLAIMER ⚠️ This script is for EDUCATIONAL PURPOSES ONLY...

rails-cve-2012-5664-test

Démonstration de la vulnérabilité Rails CVE-2012-5664 Cette application de démonstration montre comment fonctionne la vulnérabilité Rails CVE-2013-5664. Plus d'informations : http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts...

Rocky Linux 8 [CIQ] Security Update: libdb-cxx / libdb-cxx-debuginfo / libdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_8506)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228506 advisory. netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data CVE-2021-37136 netty-codec: SnappyFrameDecoder doesn't restrict chu...

CVE-2026-92530 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce-fips...

GHSA-WR3R-JHMC-F6JW vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce-fips...

CVE-2026-92628 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce-fips...

GHSA-VP7F-562J-4QGR vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce-fips...

CVE-2026-92874 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce-fips...

GHSA-C3RM-3HQR-4QWM vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce-fips...

cve-2019-5420-POC

Rails ActiveSupport Exploit cve-2019-5420 POC consider this to chain CVE-2019-5418! Pairs lovely with CVE-2019-5418! POC Screenshot 🚨 Warning This repository contains a proof-of-concept PoC exploit demonstrating remote code execution RCE in Ruby on Rails applications via...

cve-2022-32224-rails

CVE-2022-3222 ActiveRecord Serialization Behavior Verification https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017 https://api.rubyonrails.org/classes/ActiveRecord/AttributeMethods/Serialization/ClassMethods.html...

CVE-2020-8163

CVE-2020-8163 CVE-2020-8163 - Remote code execution of user-provided local names in Rails Remote code execution of user-provided local names in Rails 5.0.1 There was a vulnerability in versions of Rails prior to 5.0.1 that would allow an attacker who controlled the locals argument of a render cal...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Ruby on Rails Active Storage + libvips arbitrary file read → conditional remote code execution RCE PoC tool. Single-file, Python 3.11+ pure standard library with zero dependencies , includes MAT/HDF5 hybrid payloads, a pure-Python PNG pixel decoder, offset reads,...

CVE-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started echo ""...

heroku-CVE-2013-0156

heroku-CVE-2013-0156 This vulnerability has been supplanted by CVE-2013-0333. See https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo for more details. A replacement for this script, covering CVE-2013-0333, can be found at...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...