CVE-2026-73491 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby4.0-rails, ruby3.4-rails...

CVE-2026-73427 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, ruby3.3-rails, ruby3.4-rails...

CVE-2026-73491 vulnerabilities

Vulnerabilities for packages: pghero, gitlab-rails-ce, gitlab-rails-ce-fips, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails, ruby3.2-rails, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, pghero-fips...

UBUNTU-CVE-2026-73648

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVGALLOWLOCALHREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applicatio...

brakeman v8.0.6

Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...

CVE-2026-54463 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2026-72915 Mastodon: Personally-identifying information disclosure due to incorrect access control validation

Mastodon is a free, open-source social network server based on ActivityPub. From 4.6.0-beta.1 until 4.6.4 and 4.7.0-beta.1, any logged-in local user could use the show action in app/controllers/admin/collectionscontroller.rb to access personally identifying information about another local user in...

Ruby on Rails Web Console - IP Bypass RCE (CVE-2015-3224)

Exploits CVE-2015-3224 by bypassing Web Console IP restrictions with X-Forwarded-For: 0000::1 and evaluating backtick OS commands. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails Web Console IP whitelist bypass RCE CVE-2015-3224 — opens execute...

Ruby on Rails Web Console - IP Bypass RCE Detection (CVE-2015-3224)

Detects CVE-2015-3224 by requesting a random path with X-Forwarded-For: 0000::1, extracting the web-console mount/session, then PUTting a backtick command. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails Web Console IP whitelist bypass RCE CVE-2015-3224.""" import re from urllib.parse...

Ruby on Rails - Accept Header File Read (CVE-2019-5418)

Reads arbitrary files via CVE-2019-5418 Accept-header path traversal ../../../../file. !/usr/bin/env python3 -- coding: utf-8 -- """Rails Accept-header arbitrary file read CVE-2019-5418.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi...

Rails - XML YAML Deserialization Detection (CVE-2013-0156)

Detects CVE-2013-0156 by POSTing XML probes string vs yaml Time vs null-byte object to /posts/search and comparing status codes. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails XML/YAML deserialization probe CVE-2013-0156.""" from kittysploit import from lib.protocols.http.httpclient...

Ruby on Rails Active Storage CVE-2026-66066 Detection Tool

A safe detection tool for identifying Ruby on Rails Active Storage deployments that may be affected by the CVE-2026-66066 vulnerability. The utility performs non-invasive fingerprinting by checking for Rails and Active Storage indicators, exposed endpoints, and version information without...

Exploit for CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authenticatio...

Ruby on Rails - CRLF Injection and Cross-Site Scripting Detection

Ruby on Rails 6.0.0-6.0.3.1 contains a CRLF issue which allows JavaScript to be injected into the response, resulting in cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails 6.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Ruby on Rails Database Configuration File - Detect

Ruby on Rails database configuration file was detected, which may contain database credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails database configuration file was detected, which may contain database credentials.""" from kittysploit import from lib.protocols.http.httpclien...

Ruby on Rails Secret Token Disclosure Detection

Ruby on Rals Secret Token file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rals Secret Token file is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruby on Rails Secret Token Disclosure...

Ruby on Rails storage.yml File Disclosure Detection

Ruby on Rails storage.yml file is disclosed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails storage.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruby on Rails storage.yml File Disclosure Detection',...

Ruby on Rails secrets.yml File Exposure Detection

Ruby on Rails internal secret file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails internal secret file is exposed.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruby on Rails...

Ruby on Rails <5.0.1 - Remote Code Execution Detection

Ruby on Rails before version 5.0.1 is susceptible to remote code execution because it passes user parameters as local variables into partials. !/usr/bin/env python3 -- coding: utf-8 -- """Ruby on Rails before version 5.""" import re from kittysploit import from lib.protocols.http.httpclient impor...

Ruby on Rails - Accept Header LFI Detection (CVE-2019-5418)

Detects CVE-2019-5418 by sending Accept: ../../../../../../../../etc/passwd and looking for passwd contents in the response. !/usr/bin/env python3 -- coding: utf-8 -- """Rails File Content Disclosure via Accept header CVE-2019-5418.""" import re from kittysploit import from...