Anzeige der Artikel nach Schlagwörtern: ruby

Debian Security Advisory 5774-1

Ruby Files ≈ Packet Storm Sep 23, 2024 | 14:43 pm

Debian Linux Security Advisory 5774-1 - It was discovered that ruby-saml, a SAML library implementing the client side of a SAML authorization, does not properly verify the signature of the SAML Response, which could result in bypass of authentication in[…]

Red Hat Security Advisory 2024-6784-03

Ruby Files ≈ Packet Storm Sep 19, 2024 | 13:39 pm

Red Hat Security Advisory 2024-6784-03 - An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability.

Red Hat Security Advisory 2024-6785-03

Ruby Files ≈ Packet Storm Sep 19, 2024 | 13:39 pm

Red Hat Security Advisory 2024-6785-03 - An update for the ruby:3.3 module is now available for Red Hat Enterprise Linux 9. Issues addressed include a denial of service vulnerability.

Ruby On Rails JSON Processor YAML Deserialization Scanner

Ruby Files ≈ Packet Storm Sep 1, 2024 | 17:10 pm

This Metasploit module attempts to identify Ruby on Rails instances vulnerable to an arbitrary object instantiation flaw in the JSON request processor.

Ruby On Rails XML Processor YAML Deserialization Scanner

Ruby Files ≈ Packet Storm Sep 1, 2024 | 16:04 pm

This Metasploit module attempts to identify Ruby on Rails instances vulnerable to an arbitrary object instantiation flaw in the XML request processor.

Ruby On Rails Devise Authentication Password Reset

Ruby Files ≈ Packet Storm Aug 31, 2024 | 21:43 pm

The Devise authentication gem for Ruby on Rails is vulnerable to a password reset exploit leveraging type confusion. By submitting XML to rails, we can influence the type used for the reset_password_token parameter. This allows for resetting passwords of arbitrary[…]

Apple TV Video Remote Control

Ruby Files ≈ Packet Storm Aug 31, 2024 | 21:27 pm

This Metasploit module plays a video on an AppleTV device. Note that AppleTV can be somewhat picky about the server that hosts the video. Tested servers include default IIS, default Apache, and Rubys WEBrick. For WEBrick, the default MIME list[…]

Ruby On Rails File Content Disclosure

Ruby Files ≈ Packet Storm Aug 31, 2024 | 19:37 pm

This Metasploit module uses a path traversal vulnerability in Ruby on Rails versions 5.2.2 and below to read files on a target server.

Nuuo Central Management Server Authenticated Arbitrary File Download

Ruby Files ≈ Packet Storm Aug 31, 2024 | 18:49 pm

The Nuuo Central Management Server allows an authenticated user to download files from the installation folder. This functionality can be abused to obtain administrative credentials, the SQL Server database password and arbitrary files off the system with directory traversal. The[…]

Ruby on Rails JSON Processor Floating Point Heap Overflow Denial of Service

Ruby Files ≈ Packet Storm Aug 31, 2024 | 17:17 pm

When Ruby attempts to convert a string representation of a large floating point decimal number to its floating point equivalent, a heap-based buffer overflow can be triggered. This Metasploit module has been tested successfully on a Ruby on Rails application[…]

Share This

Follow Us