CVE-2013-1948

converter.rb in the md2pdf gem 0.0.1 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2013-1948

The CVE-2013-1948 issue affects the md2pdf Ruby gem (version 0.0.1) where converter.rb passes user input directly to shell commands, allowing a context-dependent attacker to inject shell metacharacters in a filename and execute arbitrary commands. This is a remote command-injection vulnerability ...

CVE-2013-1948

converter.rb in the md2pdf gem 0.0.1 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

PT-2013-3483

Name of the Vulnerable Software and Affected Versions md2pdf gem version 0.0.1 Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. This is possible due to a flaw in the converter.rb file within the md2pdf gem for Ruby...

PT-2013-3477

Name of the Vulnerable Software and Affected Versions Karteek Docsplit karteek-docsplit gem version 0.5.4 Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename. This is due to a problem in the extract from ocr function in...

CVE-2013-1933: Improper Neutralization of Special Elements used in an OS Command

The extractfromocr function in lib/docsplit/textextractor.rb in the Karteek Docsplit karteek-docsplit gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename...

CVE-2013-1947: Improper Neutralization of Special Elements used in an OS Command

kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to 1 document.rb, 2 video.rb, or 3 videoimage.rb...

CVE-2013-1948: Undefined Security Weakness

converter.rb in the md2pdf gem 0.0.1 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

PT-2013-3482

Name of the Vulnerable Software and Affected Versions kelredd-pruview gem version 0.3.8 Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to files such as document.rb, video.rb, or video image.rb. Recommendations...

Ruby Gem Karteek Docsplit 0.5.4 Command Injection

Remote Command Injection Ruby Gem Karteek Docsplit 0.5.4 4/1/2013 Larry W. Cashdollar @larry0 User supplied input isn't sanitized against shell metacharacters and is fed directly to the shell. If the user is tricked into extracting a file with shell characters in the name code can be executed...

CVE-2013-1898

lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

Code injection

lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2013-1898

lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

PT-2013-3456

Name of the Vulnerable Software and Affected Versions Thumbshooter gem version 0.1.5 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a URL, specifically in the lib/thumbshooter.rb file of the Thumbshooter gem for Ruby. Recommendations For...

CVE-2013-1898: Improper Control of Generation of Code

lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

PT-2013-3104

Name of the Vulnerable Software and Affected Versions Nagios Remote Plug-In Executor NRPE versions prior to 2.14 Description The issue is related to an incomplete blacklist vulnerability in the nrpc.c file. This vulnerability might allow remote attackers to execute arbitrary shell commands via $...

CVE-2013-1911

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...

Design/Logic Flaw

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...

PT-2013-3464

Name of the Vulnerable Software and Affected Versions ldoce gem version 0.0.2 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in an mp3 URL or file name. This is possible due to a flaw in the lib/ldoce/word.rb file of the ldoce gem for Ruby...

CVE-2013-1911: Improper Input Validation

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...