CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 2.9.0 - Privilege Escalation Exploit Overview This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their privileges to administrator. Vulnerability Details CVE : CVE-2025-2304 - Ma...

CVE-2025-2304-POC

CVE-2025-2304 PoC - Camaleon CMS Privilege Escalation A Proof of Concept PoC exploit for CVE-2025-2304 , a critical mass assignment vulnerability in Camaleon CMS that allows privilege escalation from low-privileged users to administrators. ██████╗ ██████╗ ██╗ ██╗███╗ ██╗ ██████╗ ███╗ ███╗██╗...

Ruby on Rails: ActionController::Parameters .each returns an unsafe hash

Rails 5.1.4 The goal of ActionController::Parameters's permit method strong parameters is to prevent accidental trust in the parameters sent by the client. We can therefore not simply create a hash of all the parameters in the params without permitting them first. When we really want to do this...