8 matches found
EUVD-2017-0293
Malware in sbrugna...
Code injection in dragonfly gem
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors...
GHSA-QRGF-JQQM-X7XV Code injection in dragonfly gem
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2013-5671
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors...
Command injection
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2013-5671
The CVE-2013-5671 issue affects the fog-dragonfly gem for Ruby (version 0.8.2) where lib/dragonfly/imagemagickutils.rb passes unescaped user input to shell commands, enabling remote command execution via unspecified vectors. The root cause is input not being sanitized before constructing the comm...
CVE-2013-5671
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors...
fog-dragonfly Gem for Ruby imagemagickutils.rb Remote Command Execution
fog-dragonfly Gem for Ruby contains a flaw that is due to the program failing to properly sanitize input passed via the imagemagickutils.rb script. This may allow a remote attacker to execute arbitrary commands...