2 matches found
RDoc OS command injection vulnerability
RDoc used to call Kernelopen to open a local file. If a Ruby project has a file whose name starts with | and ends with tags, the command following the pipe character is executed. A malicious Ruby project could exploit it to run an arbitrary command execution against a user who attempts to run rdo...
7CVSS2.3AI score0.0148EPSS
SaveExploits0References1Affected Software1
metasploit-framework
This is an offensive tool for Metasploit Framework. The Metasploit Framework is a penetration testing platform that allows users to create and execute exploits against various targets. The framework is written in Ruby and provides a modular architecture that makes it easy to add new exploits and...
7.2AI score
SaveExploits0
20