CVE-2020-8165

CVE-2020-8165 Ruby on Rails لأغراض تعليمية فقط. انظر المرجع للحصول على التفاصيل. Environment Ruby: 2.6.3 Rails: 5.2.3 التشغيل $ git clone https://github.com/masahiro331/CVE-2020-8165.git $ bundle install --path vendor/bundle $ bundle exec rails db:migrate $ bundle exec rails s use redis $ docker...

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution سكربت يستغل الثغرة التي تسمح بتنفيذ أكواد برمجية عن بُعد في Ruby 2.3.8 مع CVE-2016-2098 الاستخدام ./RubyOnRailsActionPackInlineERB-RemoteCodeExecution.py -h --target-host TARGETHOST --port PORT --target-uri TARGETURI --target-param...

cve-2019-5420-POC

Rails ActiveSupport Exploit cve-2019-5420 POC इसे CVE-2019-5418 के साथ जोड़ने पर विचार करें! CVE-2019-5418 के साथ बहुत अच्छा जोड़ता है! POC स्क्रीनशॉट 🚨 चेतावनी इस रिपॉजिटरी में एक प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट है जो Ruby on Rails अनुप्रयोगों में ActiveSupport::MessageVerifier के दुरुपयोग के...

rails-PoC-CVE-2016-2098

भेद्यता का एक प्रूफ ऑफ कॉन्सेप्ट: CVE-2016-2098 @alejandro-marting द्वारा बनाई गई विश्वविद्यालय परियोजना जहां हम भेद्यता 2096 की जांच कर सकते हैं उपयोग करते हुए: rails 4.2.5.1 दृश्य में एक भेद्य कोड है app/views/poc/render1.html.erb !...

Rocky Linux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc (ALMALINUX9.6:CLSA-2026:1781100836)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781100836 advisory. - ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guar...

AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc (ALMALINUX9.2:CLSA-2026:1779745996)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779745996 advisory. - ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guard ...

Rocky Linux 10.2 [CIQ] Security Update: ruby4.0 / ruby4.0-debuginfo / ruby4.0-debugsource / ruby4.0-devel / etc Multiple Vulnerabilities (crlsa-2026_20606)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202620606 advisory. ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection CVE-2026-33210 erb: ERB: Arbitrary code execution via...

Rocky Linux 9 [CIQ] Security Update: ruby / ruby-bundled-gems / ruby-bundled-gems-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_20596)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202620596 advisory. ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection CVE-2026-33210 erb: ERB: Arbitrary code execution via...

Rocky Linux 9 [CIQ] Security Update: ruby / ruby-bundled-gems / ruby-bundled-gems-debuginfo / etc (crlsa-2026_18030)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618030 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: ruby / ruby-bundled-gems / ruby-bundled-gems-debuginfo / etc (crlsa-2026_20614)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202620614 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 10.1 [CIQ] Security Update: ruby / ruby-bundled-gems / ruby-bundled-gems-debuginfo / etc (crlsa-2026_18065)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618065 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 9 [CIQ] Security Update: ruby / ruby-debuginfo / ruby-debugsource / ruby-default-gems / etc (crlsa-2026_18039)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618039 advisory. erb: ERB: Arbitrary code execution via deserialization bypass CVE-2026-41316 Tenable has extracted the preceding description block directly from the CIQ security...

AlmaLinux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc (ALMALINUX9.6:CLSA-2026:1781100836)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781100836 advisory. - ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guard ...

Oracle Linux 8 : ruby:3.3 (ELSA-2026-72285)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72285 advisory. - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252036 - Fix DoS via crafted IMAP responses in net-imap...

ruby:3.3 security update

ruby 3.3.12-9 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252036 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-170929 Resolves: RHEL-193664 3.3.10-7 - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181682 - Fix...

ruby:3.3 security update

ruby 3.3.12-9 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252039 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 3.3.10-7 - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181693 - Fix...

Oracle Linux 9 : ruby:3.3 (ELSA-2026-72485)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72485 advisory. - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252039 - Fix DoS via crafted IMAP responses in net-imap...

Oracle Linux 9 : ruby:4.0 (ELSA-2026-72484)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72484 advisory. - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion CVE-2026-80212 Resolves: RHEL-252035 - Fix...

CVE-2026-77602

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.1.0 until 7.3.0, authenticated non-administrator users can write content under targetsmodified/ that is later executed by multiple configuration paths below the intended...

GHSA-JJQ7-M736-W977 OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

Summary COSMOS reads configuration from a user-writable overlay targetsmodified/ before the read-only plugin-installed targets/ tree, and the config subsystem executes code on those files: ConfigParser renders every file as ERB by default, a GENERICREADCONVERSION / GENERICWRITECONVERSION block is...