Lucene search
+L

44 matches found

Kitploit
Kitploit
added 2026/09/15 2:51 a.m.8 views

CVE-2016-2098

CVE-2016-2098 Ruby on Rails 3.2.22.2 より前、4.1.14.2 より前の 4.x、および 4.2.5.2 より前の 4.2.x の Action Pack は、アプリケーションによる render メソッドの無制限な使用を悪用することで、リモートの攻撃者に任意の Ruby コードを実行される可能性があります。 https://vulners.com/cve/CVE-2016-2098 使用方法 root@kitploit: git clone https://github.com/its-arun/CVE-2016-2098.git cd...

7.5CVSS7.9AI score0.81445EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/14 12:50 p.m.9 views

CVE-2016-2098

CVE-2016-2098 レンダリングにユーザー提供データを使用する際のRuby-on-Railsにおけるリモートコード実行脆弱性。 説明: この問題は、ユーザー提供データに対してrenderメソッドを使用することに起因します。 renderメソッドは通常、テンプレートからページをレンダリングするために使用されますが、renderメソッドはプレーンテキスト(plaintext)やインラインコード(inline)のレンダリングも開発者に許可します。 render関数: root@kitploit: File...

7.5CVSS7.4AI score0.81445EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/12 2:23 p.m.8 views

CVE-2016-2098

CVE-2016-2098 Ruby on Rails の Action Pack において、バージョン 3.2.22.2 未満、4.x 系の 4.1.14.2 未満、および 4.2.x 系の 4.2.5.2 未満では、アプリケーションが render メソッドを無制限に使用していることを利用して、リモートの攻撃者が任意の Ruby コードを実行できる脆弱性があります RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 使い方 git clone https://github.com/Debalinax64/CVE-2016-2098.g...

7.5CVSS7.3AI score0.81445EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/12 12:32 p.m.8 views

CVE-2016-2098

CVE-2016-2098 Ruby on Rails の Action Pack において、バージョン 3.2.22.2 未満、4.x 系の 4.1.14.2 未満、および 4.2.x 系の 4.2.5.2 未満では、リモートの攻撃者がアプリケーションの render メソッドの無制限な使用を悪用して任意の Ruby コードを実行できる可能性があります。 クラス 入力バリデーションエラー クレジット makandra の Tobias Kraze 氏と Phenoelit の joernchen 氏 使用方法 コードを必要に応じて適切に編集してください これは完璧ではありません。私はま...

7.5CVSS7.3AI score0.81445EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/12 2:25 a.m.7 views

CVE-2016-2098

CVE-2016-2098 Ruby on Rails 3.2.22.2 이전, 4.x 4.1.14.2 이전, 4.2.x 4.2.5.2 이전 버전의 Action Pack에서 원격 공격자가 애플리케이션이 render 메서드를 무제한으로 사용하는 것을 악용하여 임의의 Ruby 코드를 실행할 수 있습니다. 리소스 https://vulners.com/cve/CVE-2016-2098 사용법 이 익스플로잇 스크립트를 사용하려면 세 가지 매개변수가 필요합니다. 1. 취약한 웹 서버의 웹 페이지 URL. 2. 명령을 주입할 수 있는 취약한...

7.5CVSS7.4AI score0.81445EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/08 4:12 p.m.9 views

CVE-2020-8163

CVE-2020-8163 CVE-2020-8163 - Railsにおけるユーザー指定のローカル名によるリモートコード実行 Rails 5.0.1 におけるユーザー指定のローカル名によるリモートコード実行 5.0.1 より前のバージョンの Rails には、render 呼び出しの locals 引数を制御できる攻撃者によって悪用される脆弱性が 存在しました。 この脆弱性には CVE 識別子 CVE-2020-8163 が割り当てられています。 影響を受けるバージョン: rails 5.0.1 影響を受けない: ユーザーがローカル名を制御できないアプリケーション 修正されたバージョン...

8.8CVSS7.6AI score0.82047EPSS
SaveExploits10
NVD
NVD
added 2026/06/19 6:17 a.m.29 views

CVE-2026-12157

The BetterDocs - Knowledge Base Docs & FAQ Solution for Elementor & Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId attribute of the betterdocs/category-slate-layout Gutenberg block in versions up to, and including, 4.5.3. This is due to insufficient...

6.4CVSS0.00349EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-0314

Malware in sbrugna...

5.3CVSS6.2AI score0.04423EPSS
SaveExploits1References21
Veracode
Veracode
added 2019/01/15 9:10 a.m.64 views

Directory Traversal And Information Disclosure

actionview gem is vulnerable to directory traversal and information disclosure. This vulnerability affects applications which pass user input directly into the 'render' method in an action view controller without verification. Using this vulnerability, attackers can render files from outside the...

7.5CVSS6.7AI score0.95537EPSS
SaveExploits11References2Affected Software8
GithubExploit
GithubExploit
added 2018/02/09 4:16 p.m.15 views

Exploit for Improper Input Validation in Debian Debian_Linux

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4...

7.5CVSS8.2AI score0.81445EPSS
SaveExploits7
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.70 views

actionview contains Path Traversal vulnerability

There is a possible directory traversal and information leak vulnerability in Action View. This was meant to be fixed on CVE-2016-0752. However the 3.2 patch was not covering all possible scenarios. This vulnerability has been assigned the CVE identifier CVE-2016-2097. Versions Affected: 3.2.x,...

5.3CVSS7.3AI score0.04423EPSS
SaveExploits1References14Affected Software2
OSV
OSV
added 2017/10/24 6:33 p.m.44 views

GHSA-78RC-8C29-P45G actionpack allows remote code execution via application's unrestricted use of render method

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

7.3CVSS7.4AI score0.81445EPSS
SaveExploits7References16
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.51 views

Directory traversal vulnerability in Action View in Ruby on Rails

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing...

7.5CVSS6.4AI score0.95537EPSS
SaveExploits11References21Affected Software2
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.45 views

actionpack allows remote code execution via application's unrestricted use of render method

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

7.5CVSS8AI score0.81445EPSS
SaveExploits7References16Affected Software1
OSV
OSV
added 2017/10/24 6:33 p.m.54 views

GHSA-XRR4-P6FQ-HJG7 Directory traversal vulnerability in Action View in Ruby on Rails

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing...

7.5CVSS6.2AI score0.95537EPSS
SaveExploits11References21
GitLab Advisory Database
GitLab Advisory Database
added 2017/10/24 12:00 a.m.46 views

Directory traversal vulnerability in Action View in Ruby on Rails

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing...

7.5CVSS6.2AI score0.95537EPSS
SaveExploits11References11Affected Software1
Veracode
Veracode
added 2017/05/04 4:33 a.m.14 views

Cross-site Scripting (XSS)

github.com/koding/koding is vulnerable to cross-site scripting XSS attacks. The attacks exist since it does not escape MessageSummary string in the Render method...

5.7AI score
SaveExploits0
OSV
OSV
added 2016/04/07 11:59 p.m.21 views

CVE-2016-2098

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

7.3CVSS7.4AI score
SaveExploits0References12
OSV
OSV
added 2016/04/07 11:59 p.m.13 views

DEBIAN-CVE-2016-2097

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. dot dot in a pathname. NOTE: this vulnerability exists...

5.3CVSS6.5AI score0.04423EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2016/04/07 11:59 p.m.45 views

CVE-2016-2098

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method...

7.5CVSS7.4AI score0.81445EPSS
SaveExploits7References1
Rows per page
Query Builder