Ronin Ruby.Github.Com Site Info - OpenRuby.com

Follow @openruby

#NA

ronin-ruby.github.com

http://openruby.com/sites/ronin-ruby.github.com

Ronin - Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155

ronin-ruby.github.com 10 Jan '13, 7am

Next, [ActionDispatch::Http::Parameters] takes the parsed request parameters and merges them with the path parameters. Note that the path parameters are first merged into the request parameters, to ensure that the request parameters cannot override the path parameters. Also note that ...
Related:
1. ModSecurity Mitigations for Ruby on Rails XML Exploits - SpiderLabs Anterior blog.spiderlabs.com 10 Jan '13, 6pm
2. Exploits for Ruby on Rails holes now in circulation - The H Open: h-online.com 10 Jan '13, 4pm
3. Dutch govt pulls Ruby on Rails, exploits become semi-automated zdnet.com 11 Jan '13, 5am
4. ‘Huge’ Ruby On Rails Vulnerability Causes Panic | TechWeekEurope UK techweekeurope.co.uk 09 Jan '13, 4pm
5. Exploit Code for Ruby on Rails Flaw Likely on the Horizon threatpost.com 09 Jan '13, 4pm
6. Critical vulnerability in Ruby on Rails parameter parsing - The H Open: New... h-online.com 09 Jan '13, 11am
7. Critical vulnerability in Ruby on Rails parameter parsing - The H Security: h-online.com 09 Jan '13, 11am
Ronin - Rails PoC exploit for CVE-2013-0333

ronin-ruby.github.com 29 Jan '13, 6am

$ rails_omakase http://localhost:3000/secrets "puts 'lol'" lol Started POST "/secrets" for 127.0.0.1 at 2013-01-28 18:53:18 -0800 Processing by SecretsController#show as Parameters: {"_json"=>#<ActionDispatch::Routing::RouteSet::NamedRouteCollection:0x00000002221080 @routes={:"foo\nen...
Related:
1. who was the joker that did this? @postmodern_mod3 @homakov rubygems.org 30 Jan '13, 8am
2. Weitere kritische Lücke in Ruby on Rails geschlossen | heise online heise.de 29 Jan '13, 1pm
3. Weitere kritische Lücke in Ruby on Rails geschlossen | heise Security heise.de 29 Jan '13, 2pm
4. Ruby on Rails JSON Processor YAML Deserialization Code Execution exploit-db.com 29 Jan '13, 3pm
5. Some Versions of Ruby on Rails Vulnerable to New Parsing Attack threatpost.com 29 Jan '13, 6pm
6. JVNVU#90935667: Ruby on Rails の JSON 解析処理に脆弱性 jvn.jp 29 Jan '13, 3am

Related