Lucene search
+L

2 matches found

Hacker One
Hacker One
•added 2018/03/19 8:33 p.m.•30 views

Ruby: Potential command injection in `Shell#[]` and `Shell#test`

As Shelltest and Shell use send when transferring to FileTest, private methods etc. can also be called. Therefore, command injection is possible when a crafted value is passed. ruby $ irb irbmain:001:0 ls xy ls: xy: No such file or directory = "" irbmain:002:0 require 'shell' = true irbmain:003:0...

1.4AI score
SaveExploits0
Rows per page
Query Builder