Script that exploits the vulnerability that allows remote code execution in Ruby 2.3.8 ​​with CVE-2016-2098

Python

CVE-2016-2098 POC

Python

None

Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data.

Automatic monitor github cve using Github Actions

Python

CVE-2016-2098 - POC of RCE Ruby on Rails: Improper Input Validation (CVE-2016-2098) in bash. Remote attackers can execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.

Shell

None

Python

This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data

Python

None

cve python

Python

CVE-2016-2098 simple POC written in bash

Shell

Ruby On Rails unrestricted render() exploit

exploit ruby rail rails render

Go

Proof of concept CVE-2016-2098

Ruby JavaScript CoffeeScript CSS HTML

A PoC of CVE-2016-2098 (rails4.2.5.1 / view render)

poc vulnerability rails

Ruby JavaScript CoffeeScript CSS HTML

Proof of concept showing how CVE-2016-2098 leads to remote code execution

Ruby JavaScript CoffeeScript CSS HTML