CVE-2025-2304-POC

CVE-2025-2304 PoC - Camaleon CMS 权限提升 针对 CVE-2025-2304 的概念验证（PoC）利用程序，这是 Camaleon CMS 中的一个严重批量赋值漏洞，允许低权限用户提升为管理员。 ██████╗ ██████╗ ██╗ ██╗███╗ ██╗ ██████╗ ███╗ ███╗██╗ ██╔══██╗╚════██╗██║ ██║████╗ ██║██╔═████╗████╗ ████║██║ ██║ ██║ █████╔╝██║ ██║██╔██╗ ██║██║██╔██║██╔████╔██║██║ ██║ ██║ ╚═══██╗╚██...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 2.9.0 - Exploit de Escalada de Privilegios Resumen Este script Python explota una vulnerabilidad crítica de asignación masiva mass assignment en Camaleon CMS versión 2.9.0, permitiendo a cualquier usuario registrado escalar sus privilegios a administrador. Detalles de...

Ruby on Rails: ActionController::Parameters .each returns an unsafe hash

Rails 5.1.4 The goal of ActionController::Parameters's permit method strong parameters is to prevent accidental trust in the parameters sent by the client. We can therefore not simply create a hash of all the parameters in the params without permitting them first. When we really want to do this...