ruby-RCE-CVE-2019-5420-

ruby 反序列化 （CVE-2019-5420） https://github.com/PenTestical/CVE-2019-5420 参考： 1 Ruby on Rails 命令执行漏洞payload实现过程 https://hackerone.com/reports/473888 Since ActiveSupport::MessageVerifier and ActiveSupport::MessageEncryptor use Marshal as the default serializer, I confirmed that RCE is possible by...