WordPress Level Four Storefront SQL Injection

Exploit Title: wordpress plugin v3 level four storefront SQL injection Vulnerability Exploit Author: Ashiyane Digital Security Team Home : www.Ashiyane.org Vendor Homepage: www.clubhousenairn.co.uk Software Link: www.levelfourstorefront.com version:3 Tested on: Windows 7 Dork:...

Ruby vulnerability caused by a problem with the alias funtion so that safe level 4 does not function as a sandbox

Overview Safe levels exist as a part of the Ruby language security model, in order to limit the operation of untrusted objects. Ruby contains a vulnerability which may allow an attacker to bypass the safe level restrictions and execute normally inaccessible methods, due to a problem in Ruby's ali...