CVE-2024-45409

Ruby-SAML / GitLab Authentication Bypass CVE-2024-45409 exploit This script exploits the CVE-2024-45409 that allows an unauthenticated attacker with access to any signed SAML document issued by the IDP to forge a SAML Response/Assertion and gain access as any user on GitLab. All the following...

phishing-frenzy

Phishing Frenzy Framework de Phishing en Ruby on Rails Documentación e Información La documentación relevante y actualizada se puede encontrar en el sitio web oficial de Phishing Frenzy que se muestra a continuación Sitio web de Phishing Frenzy Por favor, envía cualquier ticket o incidencia a la...

phishing-frenzy

Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...

avo-CVE-2024-22411

README This README would normally document whatever steps are necessary to get the application up and running. Things you may want to cover: Ruby version System dependencies Configuration Database creation Database initialization How to run the test suite Services job queues, cache servers, searc...

-Ruby-dl-handle.c-CVE-2009-5147-

Ruby Advisory Database The Ruby Advisory Database is a community effort to compile all security advisories that are relevant to Ruby libraries. You can check your own Gemfile.locks against this database by using bundler-audit. Support Ruby security! Do you know about a vulnerability that isn't...

CVE-2009-5147

CVE-2009-5147 and CVE-2015-7551 PoC to run it: make foo export FOO=./foo.so ruby -v foo.rb with different versions of ruby you should get different results: vpereira@kimura:/poc rvm use 2.1.7 vpereira@kimura:/poc ruby -v foo.rb ruby 2.1.7p400 2015-08-18 revision 51632 x8664-linux some trash fom...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 Use git clone...

CVE-2015-1855

reproducer for CVE-2015-1855 how to reproduce it: create the necessary infra-structure $ bash 1.sh set the vulnerable ruby my system ruby is vulnerable $ rvm use system $ ruby -v 1.rb $ ruby 2.1.2p95 2014-05-08 revision 45877 x8664-linux-gnu true true means vulnerable set the fixed ruby $ rvm use...

CVE-2013-0156

Original Script Reference For more details on the original exploit script, refer to the gist link CVE-2013-0156 CVE-2013-0156 Exploit Script This script is specifically designed to solve the challenge on PentesterLab for the CVE-2013-0156 exploit. You can access the challenge here: PentesterLab -...

eval-stdin

Util PHP eval-stdin.php CVE-2017-9841 vulnerability is RCE vulnerability in outdated eval-stdin.php. This exploit is just automation for mentioned vulnerability and is still in development. Scripted in Ruby 3.0.4 within 2 hours, tested on Kali linux, Arch Linux, Ubuntu minimal and Termux. How to...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 Inspect all of your heroku apps to see if they are running a vulnerable version of Rails Background A serious security vulnerability has been found in the Ruby on Rails framework. This exploit affects nearly all applications running Rails versions 2.3 and 3.0, and a patch has...

cve-2026-86547-mrubyc-op-enter

CVE-2026-86547 — Desreferencia de puntero NULL en OPENTER de mrubyc Prueba de concepto independiente para CVE-2026-86547 , una desreferencia de puntero NULL en el manejador openter de mrubyc hasta la versión 4.0.0. Resumen mrubyc es una implementación ligera de Ruby para sistemas embebidos. Su...

joniles__mpxj_CVE-2020-35460_8-3-4

MPXJ Welcome to MPXJ! This library provides a set of facilities to allow project information to be manipulated in Java, .Net, Ruby and other languages. Full documentation including release notes can be found online at http://mpxj.org...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Class Input Validation Error Credits Tobias Kraze from makandra an...

cve-2014-0130

== CVE-2014-0130 Test Case Payload : http://site/api/%5C../%5C../%5C../%5C../%5C../CATDIR === Netsparker Detected : https://i.imgur.com/s1vahmj.png == HackerOne 1 - newrelic.com rails directory traversal vuln by droidsec - https://hackerone.com/reports/134032 == Reference 1...

bigdecimal-segfault-fix

h1. BigDecimal Segfault Fix There is a segfault bug in ruby's big decimal library which can be triggered by users providing known-bad values. If you wish to test whether your application is secure run +example.rb+. This script should exit normally, not segfault. The workaround has negative...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Resources https://vulners.com/cve/CVE-2016-2098 Usage To use this...

[SECURITY] Fedora 45 Update: rubygem-nokogiri-1.19.4-5.fc45

Nokogiri parses and searches XML/HTML very quickly, and also has correctly implemented CSS3 selector support as well as XPath support. Nokogiri also features an Hpricot compatibility layer to help ease the change to using correct CSS and XPath...

Linux Distros Unpatched Vulnerability : CVE-2026-96277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0...

Linux Distros Unpatched Vulnerability : CVE-2026-94656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are...