46 matches found
CVE-2019-5418-Scanner
CVE-2019-5418-Scanner A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418 Usage root@kitploit: Usage of ./CVE-2019-5418-Scanner: -auth string Perform a scan using a auth token i.e Basic YmFzZTY0VG9rZW5WYWx1ZQ== default "nope" -http Use HTTP over HTTPS -insecure...
Rails-doubletap-RCE
Rails-doubletap-exploit RCE on Rails 5.2.2 using a path traversal CVE-2019-5418 and a deserialization of Ruby objects CVE-2019-5420 Technical Analysis : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Security Adivsory : CVE-2019-5418 -...
CVE-2019-5418-Rails3
PoC en Rails 3 para CVE-2019-5418 Una aplicación PoC para verificar CVE-2019-5418 en Rails 3. Basado en https://github.com/mpgn/CVE-2019-5418...
CVE-2019-5418
CVE-2019-5418 Another scanner based off burl by tomnomnom root@kitploit: go build go get github.com/fatih/color cat websites.txt | ./CVE-2019-5418...
CVE-2019-5418
CVE-2019-5418 sandbox https://groups.google.com/forum/!msg/rubyonrails-security/zRNVOUhKHrg/GmmcVXcmAAAJ initialize root@kitploit: $ git clone https://github.com/takeokunn/CVE-2019-5418 $ cd https://github.com/takeokunn/CVE-2019-5418 $ docker-compose up Usage root@kitploit: $ curl localhost/sandb...
Ubuntu: Security Advisory (USN-7646-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7646-1: Rails vulnerability
It was discovered that Rails did not correctly handle headers. An attacker could potentially use this issue to view arbitrary files on a target server. CVE-2019-5418...
Ubuntu 16.04 LTS / 18.04 LTS : Rails vulnerability (USN-7646-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7646-1 advisory. It was discovered that Rails did not correctly handle headers. An attacker could potentially use this issue to view arbitrary files on a target server...
Ruby On Rails File Content Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Ruby On Rails File Content Disclosure 'doubletap'", 'Description' = %q This module uses a path traversal vulnerability in Ruby on Rails versions ...
RHEL 7 : CloudForms 4.6.9 (RHSA-2019:1289)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1289 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...
RHEL 6 / 7 : rh-ror50-rubygem-actionpack (RHSA-2019:1147)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1147 advisory. Ruby on Rails is a model-view-controller MVC framework for web application development. Action Pack implements the controller and the vi...
SUSE: Security Advisory (SUSE-SU-2020:3147-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
webhostinggeeks.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1041404 Security Researcher SkypLabs Helped patch 15 vulnerabilities Received 1 Coordinated Disclosure badges Received 2 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting webhostinggeeks.com website...
Exploit for Path Traversal in Rubyonrails Rails
Rails 3 PoC of CVE-2019...
RHEL 7 : CloudForms 4.7.3 (RHSA-2019:0796)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0796 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...
Discourse < 2.3.0.beta5 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities in Ruby on Rails. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Important: Red Hat Security Advisory: CloudForms 4.6.9 security, bug fix and enhancement update
An update is now available for CloudForms Management Engine 5.9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Important: Red Hat Security Advisory: rh-ror42-rubygem-actionpack security update
An update for rh-ror42-rubygem-actionpack is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Important: Red Hat Security Advisory: rh-ror50-rubygem-actionpack security update
An update for rh-ror50-rubygem-actionpack is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Fedora 30 : 1:rubygem-actionmailer / 1:rubygem-actionpack / etc (2019-1cfe24db5c)
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...