Showing 1 - 6 of 6

Files Date: 2013-08-11

Ruby on Rails Known Secret Session Cookie Remote Code Execution: Posted Aug 11, 2013; Authored by joernchen | Site metasploit.com; This Metasploit module implements remote command execution on Ruby on Rails applications. Prerequisite is knowledge of the "secret_token" (Rails 2/3) or "secret_key_base" (Rails 4). The values for those can be usually found in the file "RAILS_ROOT/config/initializers/secret_token.rb". The module achieves RCE by deserialization of a crafted Ruby Object.; tags | exploit, remote, ruby; SHA-256 | 11be9f012016644efb3d2156025a67454ab17fda375b0d1a9de05a368b0ca5e5; Download | Favorite | View

Sybase EAServer XXE Injection: Posted Aug 11, 2013; Authored by MustLive; This is a supplement to the SA-20130719-0 SEC Consult advisory that notes an additional attack vector for an XXE injection vulnerability in Sybase EAServer.; tags | exploit, xxe; SHA-256 | 3cbd8730ac23a8caf0246048e716bcb96d05f72f025815f74e98ae2ed65f3b29; Download | Favorite | View

Gnew 2013.1 Cross Site Scripting / SQL Injection: Posted Aug 11, 2013; Authored by LiquidWorm | Site zeroscience.mk; Gnew 2013.1 suffers from cross site scripting and remote SQL injection vulnerabilities.; tags | exploit, remote, vulnerability, xss, sql injection; SHA-256 | 80679433b4e600df7f78f562168c34eddf4022c22bb329027e86bbdd82d27939; Download | Favorite | View

vbBux / vbPlaza 4.0.3 SQL Injection: Posted Aug 11, 2013; Authored by n3tw0rk; vbBux / vbPlaza version 4.0.3 suffers from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; SHA-256 | 60d34baba3032357c8f4c140195265873cbe3acd91d1fd2d312b54877a0c9f04; Download | Favorite | View

Tienda-Online-Economica Cross Site Scripting: Posted Aug 11, 2013; Authored by Ivan Sanchez; Tienda-Online-Economica suffers from a cross site scripting vulnerability. Note that this advisory has site-specific information.; tags | exploit, xss; SHA-256 | 62ff9834c5c84f12eb4aff43ae6bea0e8a355fae7ff4fe8fd4b34bfed93abad1; Download | Favorite | View

HTCSyncManagerUpdate DLL Hijacking: Posted Aug 11, 2013; Authored by Iranian_Dark_Coders_Team; HTCSyncManagerUpdate suffers from a DLL hijacking vulnerability.; tags | exploit; systems | windows; SHA-256 | ad905bd9bcf7e2e3e3dede4db2a90756d50e43d1bf2fbb25720795e376245cda; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days