CVE-2026-34835-Black-box-Analysis

このリポジトリは、外部ペネトレーションテスターの視点からCVE-2026-34835のブラックボックスセキュリティ分析を提供します。 目的は脆弱性のリバースエンジニアリングではなく、許可された評価中にセキュリティ評価者がどのように識別、検証、影響評価を実施できるかを文書化することです。 CVE-2026-34835（Rack Host Header Bypass）のブラックボックス分析 CVE-2026-34835 （中程度の深刻度のバリデーションバイパス脆弱性）に関する動的アプリケーションセキュリティテスト（DAST）の観点からの分析です。...

rack-bug

Rack::Bug Code Climate 저장소: http://github.com/brynary/rack-bug 설명 Rack::Bug는 Rack 애플리케이션에 진단 도구 모음을 추가합니다. 활성화하면 로깅, 데이터베이스 쿼리, 템플릿 렌더링 시간 등을 탐색할 수 있는 플로팅 div를 삽입합니다. 기능 비밀번호 기반 보안 IP 기반 보안 Rack::Bug 계측/보고는 패널로 나뉩니다. 기본 설정의 패널: Rails 정보 타이머 요청 변수 SQL Active Record 캐시 템플릿 로그 메모리 기타 번들 패널: Redis...

CVE-2026-39324

CVE-2026-39324 漏洞利用 PoC Rack::Session::Cookie 解密失败时回退接受未加密 Cookie | ---|--- 安全公告| GHSA-33qg-7wpp-89cq 软件包| rack-session RubyGems 受影响版本| = 2.1.1 已修复版本| 2.1.2 概述 使用 secrets: 配置的 Rack::Session::Cookie 应仅接受加密 Cookie。但当解密失败时，它不会拒绝该 Cookie，而是回退到默认的 Base64::Marshal 编码器。 攻击者可以发送一个纯文本的 Base64Marshal.dump...

openSUSE 16: ansible-rmt-server / rmt-server / rmt-server-config / etc (openSUSE-SU-2026:21640-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21640-1 advisory. Update to version 3.1 bsc1274715. Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser...

OPENSUSE-SU-2026:21640-1 Security update for rmt-server

This update for rmt-server fixes the following issues: Update to version 3.1 bsc1274715. Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass bsc1261398. - CVE-2026-26962: rack: improper unfolding of folded multipart...

Astra Linux – Vulnerability in Ruby-Rack

There is a denial-of-service vulnerability in the header parsing component of Rack...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. Carefully crafted headers may cause header parsing in Rack to take longer than expected, potentially leading to a denial-of-service issue. The Accept and Forwarded headers are affected. Ruby 3.2 includes fixes for this problem, so Rack applications tha...

Astra Linux – Vulnerability in Ruby-Rack

A denial-of-service vulnerability in the multipart parsing component of Rack was fixed in versions 2.0.9.2, 2.1.4.2, 2.2.4.1, and 3.0.0.1. This vulnerability could allow attackers to craft input that causes the RFC2183 multipart boundary parsing in Rack to take an unexpectedly long time,...

Astra Linux – Vulnerability in Ruby-Rack

A denial-of-service vulnerability exists in the Range header parsing component of Rack, version 1.5.0 and later. A carefully crafted input can cause the Range header parsing component in Rack to take an unexpectedly long time, potentially leading to a denial-of-service attack. Any applications th...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser buffered the entire multipart preamble bytes before the first boundary in memory, without any size limit. This caused significant memory usage and potential process termination due...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforced its paramslimit only for parameters separated by &, while still splitting on both & and ;. As a result, attackers could use ; separators to bypass the parameter count limit and submit more parameters...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitized header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences such as newline characters into the header, resulting in log injection. This vulnerability has been...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the Rack::File middleware or the...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial-of-service vulnerability ReDos, degree 2 polynomial. This vulnerability has been fixed in 3.0.9.1 and 2.2.8.1...

Astra Linux – Vulnerability in Ruby-Rack

A security vulnerability exists in versions of Rack 2.2.3 and Rack 2.1.4, where reliance on cookies without validation/integrity checks allows an attacker to forge a secure or host-only cookie prefix...

Astra Linux – Vulnerability in Ruby-Rack

There is a directory traversal vulnerability in Rack versions prior to 2.2.0. This vulnerability allows attackers to exploit the directory traversal vulnerability in the Rack::Directory module, which is included with Rack. This could lead to the disclosure of sensitive information...

Astra Linux – Vulnerability in Ruby-Rack

There is a DoS vulnerability in Rack versions v3.0.4.2, v2.2.6.3, v2.1.4.3, and v2.0.9.3, particularly in the Multipart MIME parsing code. This vulnerability could allow an attacker to craft requests that can be abused to cause the multipart parsing to take longer than expected...

Astra Linux – Vulnerability in Puma

Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications. When using Puma behind a proxy that does not properly validate that the incoming HTTP requests comply with the RFC7230 standard, Puma and the frontend proxy may disagree about where the requests start and...

Astra Linux – Vulnerability in Ruby-Rack

There is a possible denial-of-service vulnerability in Rack versions 2.0.9.1, 2.1.4.1, and 2.2.3.1, specifically in the multipart parsing component of Rack...

Astra Linux – Vulnerability in Ruby-Rack

A sequence injection vulnerability exists in Rack versions 2.0.9.1, 2.1.4.1, and 2.2.3.1. This vulnerability could allow for shell escapes in the Lint and CommonLogger components of Rack...