Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/05/10 7:39 p.m.55 views

Ruby: SMTP command injection

Net::SMTP is vulnerable to RCPT TO/MAIL FROM injection due to lack of input validation and conformance to the SMTP protocol. Publicly disclosed already: http://www.mbsd.jp/Whitepaper/smtpi.pdf People are wrongly assigning this to the mail gem http://rubysec.com/advisories/OSVDB-131677/ and thinki...

0.1AI score
SaveExploits0
Rows per page
Query Builder