[remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D...

Ruby on Rails JSON Processor YAML Deserialization Code Execution

exploit-db.com 29 Jan '13, 3pm

[remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D...

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. # http://metasploit.com/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::CmdStagerTFTP include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, 'Name' => 'Ruby on Rails JSON Processor YAML Deserialization Code Execution', 'Description' => %q{ This module exploits a remote code execution vulnerability in the JSON request processor of the Ruby on Rails application framework. This vulnerability allows an attacker to instantiate a remote object, which in turn can be used to execute any ruby code remotely in the context of the application. This vulnerability is very similar to CVE...

Full article: http://www.exploit-db.com/exploits/24434/

Tweets

@dcept905 » 30 Jan '13, 12pm
RT @InterN0T: Ruby on Rails JSON Processor YAML Deserialization Code Execution [link]
@DaveMarcus » 29 Jan '13, 4pm
RT @exploitdb: [remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D... [link]
@exploitdb » 29 Jan '13, 4pm
[remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D... [link]
@Backtrack5 » 29 Jan '13, 3pm
[remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution [link]
@_coreDump » 29 Jan '13, 7pm
RT @exploitdb: [remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D... [link]
@BooYA728 » 29 Jan '13, 5pm
RT @exploitdb: [remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D... [link]
@sflorea » 29 Jan '13, 5pm
RT @exploitdb: [remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D... [link]
@cmenghi » 29 Jan '13, 5pm
RT @exploitdb: [remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D... [link]
@Zer0Security » 29 Jan '13, 4pm
RT @exploitdb: [remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D... [link]

Ruby on Rails JSON Processor YAML Deserialization Code Execution

[remote] - Ruby on Rails JSON Processor YAML Deserialization Code Execution: Ruby on Rails JSON Processor YAML D...

Tweets

Ruby on Rails JSON Processor YAML Deserializati...

Ruby on Rails JSON Processor YAML Deserializati...

Vulnerability in JSON Parser in Ruby on Rails 3...

Vulnerability in JSON Parser in Ruby on Rails 3...

#Vulnerabilities Ruby on Rails JSON Processor Y...

Ruby on Rails の JSON 解析処理に脆弱性

Ruby on Rails の JSON のパラメータ解析の脆弱性により任意のコードを実行され...

Ruby on Rails Programming by zscorp: We need to...

В Ruby on Rails устранена очередная критическая...

New vulnerabilities just being disclosed on Rub...

Some Versions of Ruby on Rails Vulnerable to Ne...

#Vulnerabilities Ruby on Rails XML Processor YA...

Ruby on Rails receives the third security patch...

Ruby on Rails by ChrisAlberg

Weitere kritische Lücke in Ruby on Rails geschl...