Lucene search
K

6 matches found

OSV
OSV
added 2017/10/24 6:33 p.m.20 views

GHSA-P65M-QR5X-RRQQ Webbynode Code Injection vulnerability

The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message...

7.5CVSS7.2AI score0.02072EPSS
Exploits2References10
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.22 views

Webbynode Code Injection vulnerability

The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message...

7.5CVSS7.2AI score0.02072EPSS
Exploits2References10Affected Software1
NVD
NVD
added 2013/12/19 4:24 a.m.14 views

CVE-2013-7086

The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message...

7.5CVSS7.4AI score0.02072EPSS
Exploits2References9
Prion
Prion
added 2013/12/19 4:24 a.m.13 views

Design/Logic Flaw

The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message...

7.5CVSS8AI score0.02072EPSS
Exploits2References9Affected Software1
seebug.org
seebug.org
added 2013/12/17 12:0 a.m.22 views

Webbynode Ruby Gems命令注入漏洞

Bugtraq ID:64289 CVE ID:CVE-2013-7086 Ruby Gem Webbynode是一款让用户部署应用至Webbynode平台的工具。 Ruby Gem Webbynode没有正确过滤通过growlnotify命令所提交的消息,如果消息中包含shell元字符,可以应用程序上下文执行任意命令。 0 Ruby Gem Webbynode 1.0.5.3 目前厂商暂无提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://rubygems.org/gems/webbynode...

7.5CVSS0.02072EPSS
Exploits2
RubySec
RubySec
added 2013/12/12 12:0 a.m.20 views

Webbynode Gem for Ruby notify.rb growlnotify Message Handling Arbitrary Command Execution

Webbynode Gem for Ruby contains a flaw in notify.rb that is triggered when handling a specially crafted growlnotify message. This may allow a context-dependent attacker to execute arbitrary commands...

7.5CVSS7.4AI score0.02072EPSS
Exploits2References1
Rows per page
Query Builder