533 matches found
Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution
Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution Script that exploits the vulnerability that allows remote code execution in Ruby 2.3.8 with CVE-2016-2098 Usage ./RubyOnRailsActionPackInlineERB-RemoteCodeExecution.py -h --target-host TARGETHOST --port PORT --target-uri TARGETURI...
UBUNTU-CVE-2026-126076
Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent...
CVE-2026-126076
A flaw was found in actionpack. During concurrent web requests, the session cache store writes session data back to the cache without verifying whether the session has already been invalidated or deleted. A remote attacker possessing a stolen session identifier could exploit this race condition t...
CVE-2026-113877
A flaw was found in HTTP::Headers::ActionPack. A remote attacker can trigger a Denial of Service DoS by sending an HTTP request with a crafted Accept-Language header to an affected application. Because language range values are evaluated as regular expression patterns without proper sanitization,...
SUSE CVE-2026-113877
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern /^$range-/i without escaping it, so regular expression syntax in the header reaches the...
Linux Distros Unpatched Vulnerability : CVE-2026-113877
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolat...
DEBIAN-CVE-2026-113877
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern /^$range-/i without escaping it, so regular expression syntax in the header reaches the...
CVE-2026-113877
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern /^$range-/i without escaping it, so regular expression syntax in the header reaches the...
CVE-2026-113877 HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern /^$range-/i without escaping it, so regular expression syntax in the header reaches the...
CVE-2026-113877 HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern /^$range-/i without escaping it, so regular expression syntax in the header reaches the...
CVE-2026-113877
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern "/^$range-/i" without escaping it, so regular expression syntax in the header reaches the...
CVE-2026-113877
The HTTP::Headers::ActionPack Perl module (versions before 0.10 ) is vulnerable to a CPU exhaustion Denial of Service (DoS) attack. The root cause is that the _language_match function interpolates Accept-Language ranges directly into a regular expression pattern (/^$range ors-i) without proper es...
CVE-2026-113877
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern /^$range-/i without escaping it, so regular expression syntax in the header reaches the...
CVE-2026-113877 HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern /^$range-/i without escaping it, so regular expression syntax in the header reaches the...
EUVD-2026-109147
HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern /^$range-/i without escaping it, so regular expression syntax in the header reaches the...
PT-2026-122217
Name of the Vulnerable Software and Affected Versions HTTP::Headers::ActionPack versions prior to 0.10 Description An issue exists where the language match function interpolates each Accept-Language range into a regular expression pattern /^$range-/i without proper escaping. This allows regular...
CVE-2026-73426 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, ruby3.3-rails, ruby3.4-rails...
CVE-2026-73427 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, ruby3.3-rails, ruby3.4-rails...
