Lucene search
+L

2 matches found

RubySec
RubySec
added 2014/01/14 12:0 a.m.13 views

echor Gem for Ruby Process Listing Local Plaintext Credential Disclosure

echor Gem for Ruby contains a flaw that is due to the program exposing credential information in the system process listing. This may allow a local attacker to gain access to plaintext credential information...

7.8CVSS6.9AI score0.00344EPSS
SaveExploits0References1
RubySec
RubySec
added 2014/01/14 12:0 a.m.21 views

echor Gem for Ruby backplane.rb perform_request Function Arbitrary Command Execution

Echor Gem for Ruby contains a flaw in backplane.rb in the performrequest function that is triggered when a semi-colon ; is injected into a username or password. This may allow a context-dependent attacker to inject arbitrary commands if the gem is used in a rails application...

7.8CVSS4.1AI score0.00409EPSS
SaveExploits0References1
Rows per page
Query Builder