18348 matches found
joomlavs
joomlavs Un escáner de vulnerabilidades de Joomla de caja negra, impulsado por Ruby ¿Qué es? JoomlaVS es una aplicación Ruby que puede ayudar a automatizar la evaluación de qué tan vulnerable es una instalación de Joomla a la explotación. Soporta huellas digitales básicas y puede escanear...
scanner-cli
Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...
novahot
novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...
ctf-party
ctf-party Qué es Una librería para mejorar y acelerar la escritura de scripts/exploits para jugadores de CTF o investigadores de seguridad, cazadores de bugs, pentesters pero principalmente enfocada en CTF parcheando la clase String para añadir una sintaxis corta de patrones de código habituales...
LAZYPARIAH
LAZYPARIAH Una herramienta de línea de comandos de baja dependencia para generar payloads de reverse shell sobre la marcha. Descripción LAZYPARIAH es una herramienta de línea de comandos simple y fácilmente instalable escrita en Ruby puro que puede ser utilizada durante pruebas de penetración y...
Ruby on Rails - Open Redirect via Host Header Injection
Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...
CVE-2024-46987
CVE-2024-46987 – Camaleon CMS Authenticated Path Traversal / Arbitrary File Read CVE-2024-46987 is an authenticated path traversal vulnerability CWE-22 in Camaleon CMS a Ruby on Rails-based content management system. It allows a logged-in user even with low privileges to read arbitrary files on t...
aws-recon
AWS Recon Una herramienta de recolección de inventario de AWS orientada a la seguridad y con múltiples hilos, escrita en Ruby. Esta herramienta se creó para facilitar la recolección eficiente de una gran cantidad de atributos y metadatos de recursos de AWS. Su objetivo es recopilar casi todo lo...
PT-2026-104313
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description Apache Thrift Ruby bindings contain an issue involving the improper handling of exceptional conditions, which can lead to an uncaught exception. Recommendations Upgrade to version 0.25.0...
ROS-20261002-73-0152
The vulnerability in Ruby is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261002-73-0151
The vulnerability in Ruby is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
RockyLinux 10 : ruby (RLSA-2026:72785)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:72785 advisory. resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses CVE-2026-80212 Tenable has extracted the preceding description...
PT-2026-104310
Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description An issue exists in the Apache Thrift ruby bindings where resources are allocated without limits or throttling. This can lead to excessive resource consumption. Recommendations Update to versio...
CVE-2026-67989
The crmne/ruby_llm library (specifically at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 ) contains a polynomial-time regular expression denial-of-service (ReDoS) condition. This vulnerability exists within the Mistral model capability matching functionality when running on Ruby 3.1.x . The is...
RHEL 10 : ruby (RHSA-2026:72785)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72785 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management...
rabl-old
RABL RABL Ruby API Builder Language is a Rails and Padrino ruby templating system for generating JSON, XML, MessagePack, PList and BSON. When using the ActiveRecord 'tojson' method, I find myself wanting a more expressive and powerful solution for generating APIs. This is especially true when the...
CVE-2020-8165
README Este README normalmente documentaría los pasos necesarios para poner la aplicación en funcionamiento. Cosas que quizás quieras cubrir: Versión de Ruby Dependencias del sistema Configuración Creación de la base de datos Inicialización de la base de datos Cómo ejecutar el conjunto de pruebas...
heartbleed
heartbleed A simple tool written in Ruby wich allow testing your servers for OpenSSL CVE-2014-0160 vulnerability. Disclaimer I will not be taken responsible for the damage that could be done using this tool. It was written to check private servers for a precise vulnerability and measure potential...
autochrome
autochrome This tool downloads, installs, and configures a shiny new copy of Chromium. It includes nifty things like: Turning off all those annoying auto-updaters! Sweet colored themes for high visibility! No XSS auditor! Automatic proxy configuration! uses 127.0.0.1:8080 An annoying infobar...