Design/Logic Flaw

commandwrap.rb in the commandwrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename...

CVE-2013-2617

lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2013-1875

The CVE-2013-1875 issue affects the Ruby gem command_wrap (command_wrap.rb). The connected documents confirm a remote arbitrary command execution vulnerability via shell metacharacters in a URL or filename, enabling an attacker to run commands in the context of the affected user. The root cause i...

CVE-2013-1875

commandwrap.rb in the commandwrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename...

CVE-2013-2616

lib/minimagick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2013-2617

lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2013-2615

lib/entrycontroller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2013-2615

The CVE-2013-2615 entry affects the fastreader Ruby Gem, specifically lib/entry_controller.rb in version 1.0.8. The vulnerability enables remote code execution by passing shell metacharacters in a URL, allowing an attacker to execute arbitrary commands on the host. The NVD entry lists a base scor...

CVE-2013-2617

The CVE-2013-2617 issue affects the Ruby Curl Gem (lib/curl.rb). The vulnerability allows remote attackers to execute arbitrary commands by supplying a URL containing shell metacharacters, due to insufficient URL escaping. This is documented in multiple sources (RubyGems advisory for CVE-2013-261...

CVE-2013-2616

lib/minimagick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2013-2615

lib/entrycontroller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

PT-2013-3444

Name of the Vulnerable Software and Affected Versions command wrap Gem for Ruby affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename. This is due to a problem in the command wrap.rb file within th...

PT-2013-3855

Name of the Vulnerable Software and Affected Versions fastreader Gem version 1.0.8 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a URL, potentially triggered by specially crafted input containing a ';' character. This may enable a...

PT-2013-3857

Name of the Vulnerable Software and Affected Versions Curl Gem for Ruby affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. This is possible due to a flaw in lib/curl.rb within the Curl Gem for Ruby...

CVE-2013-2616: Improper Control of Generation of Code

lib/minimagick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

PT-2013-3856

Name of the Vulnerable Software and Affected Versions MiniMagick Gem version 1.3.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. This is possible due to a flaw in the lib/mini magick.rb file of the MiniMagick Gem for Ruby...

CVE-2013-2617: Improper Control of Generation of Code

lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2013-1875: Improper Control of Generation of Code

commandwrap.rb in the commandwrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename...

DEBIAN-CVE-2013-0913

Integer overflow in drivers/gpu/drm/i915/i915gemexecbuffer.c in the i915 driver in the Direct Rendering Manager DRM subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service heap-based buffer...

Ruby Gem Fastreader 1.0.8 Code Execution

Ruby gem fastreader-1.0.8 remote code exec 3/6/2013 if the url contains any ; characters code will be executed as the user. for example if fastreader is fed http://www.g;id;.com id will be executed. ./fastreader-1.0.8/lib/entrycontroller.rb .strip only removes whitespace before and after the URL...