CVE-2016-2098

CVE-2016-2098 Ruby on Rails 中 Action Pack 在 3.2.22.2 之前、4.x 在 4.1.14.2 之前、以及 4.2.x 在 4.2.5.2 之前的版本，允许远程攻击者通过利用应用程序对 render 方法的无限制使用来执行任意 Ruby 代码。 https://vulners.com/cve/CVE-2016-2098 用法 git clone https://github.com/its-arun/CVE-2016-2098.git cd CVE-2016-2098 /bin/bash CVE-2016-2098.sh...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 使用 git clone...

CVE-2016-2098

CVE-2016-2098 Ruby on Rails 中 Action Pack 在 3.2.22.2 之前版本、4.x 在 4.1.14.2 之前版本及 4.2.x 在 4.2.5.2 之前版本中，允许远程攻击者利用应用程序对 render 方法的无限制使用来执行任意 Ruby 代码。 分类 输入验证错误 致谢 来自 makandra 的 Tobias Kraze 和 Phenoelit 的 joernchen 使用方法 请对代码进行必要的修改以最好地满足您的需求 这并不完美，因为我正在持续学习 Python...

CVE-2016-2098

CVE-2016-2098 Ruby on Rails 中 Action Pack 在 3.2.22.2 之前、4.x 在 4.1.14.2 之前以及 4.2.x 在 4.2.5.2 之前的版本中，允许远程攻击者通过利用应用程序对 render 方法的无限制使用来执行任意 Ruby 代码。 资源 https://vulners.com/cve/CVE-2016-2098 使用方法 要使用此漏洞利用脚本，您需要三个参数。 1. 目标 Web 服务器的网页 URL。 2. 可能注入命令的易受攻击参数。 3. 要在远程服务器上执行的 shell 命令。...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

name_reverser

== 欢迎使用 Rails Rails 是一个 Web 应用框架，包含了一切根据模型-视图-控制（Model-View-Control）模式创建数据库驱动 Web 应用所需的内容。 该模式将视图（也称为表示层）拆分为“哑”模板，主要负责在 HTML 标签之间插入预构建的数据。模型包含“智能”领域对象（如 Account、Product、Person、Post），这些对象拥有所有业务逻辑，并知道如何将自身持久化到数据库。控制器通过操作模型并将数据导向视图来处理传入的请求（如 Save New Account、Update Product、Show Post）。 在 Rails 中，模型由名...

Rocky Linux 8 [CIQ] Security Update: libdb-cxx / libdb-cxx-debuginfo / libdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_2097)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20232097 advisory. CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 candlepin and puppetserver: various flaws CVE-2022-22577...

Astra Linux – Vulnerability in Rails

Action Pack is a framework for handling and responding to web requests. Under certain circumstances, response bodies may not be closed properly. If a response does not notify the system of a close operation, ActionDispatch::Executor will not know to reset the thread local state for the next...

Astra Linux – Vulnerability in Rails

An XSS vulnerability exists in Action Pack versions = 5.2.0 and 5.2.0, which could allow an attacker to bypass the Content Security Policy and generate non-HTML responses...

Astra Linux – Vulnerability in Rails

The Actionpack Ruby gem versions prior to 6.1.3.2, 6.0.3.7, 5.2.4.6, and 5.2.6 have a possible denial-of-service vulnerability in the Token Authentication logic of the Action Controller, due to overly permissive regular expressions. Affected code uses authenticateorrequestwithhttptoken or...

VulnCheck KEV: CVE-2026-66066

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

K000162741: Ruby on Rails Action Pack vulnerability CVE-2026-66066

Security Advisory Description Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation...

Arbitrary File Read

Action Pack Active Storage is vulnerable to Arbitrary File Read. The vulnerability is due to unsafe libvips operations being permitted on untrusted image uploads, allowing attackers to craft malicious images that read arbitrary files accessible to the Rails process and expose sensitive applicatio...

CVE-2026-66066

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

UBUNTU-CVE-2026-66066

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

CVE-2026-66066

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

EUVD-2026-51270

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

CVE-2026-66066 Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

CVE-2026-66066

CVE-2026-66066 (CVSS 9.5 CRITICAL) affects Ruby on Rails Active Storage in versions prior to 7.2.3.2, 8.0.5.1, and 8.1.3.1 . The root cause is that Active Storage fails to disable libvips operations marked unfuzzed (unsafe for untrusted content), so a crafted image upload can invoke such an opera...

CVE-2026-66066 Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...