CVE-2021-22880
halkichi0308/cve-2021-22880Proof-of-concept exploit for CVE-2021-22880 targeting a Rails server vulnerability. Demonstrates exploitation steps and provides a test environment…
exploitationpenetration-testingvulnerability-analysis+2
1
halkichi0308/cve-2021-22880Proof-of-concept exploit for CVE-2021-22880 targeting a Rails server vulnerability. Demonstrates exploitation steps and provides a test environment…
wudidwo/cve-2018-3760-pocProof-of-concept exploit for CVE-2018-3760, a path traversal vulnerability in Ruby on Rails. Demonstrates the flaw for testing and educational…
masahiro331/cve-2020-8165Proof-of-concept exploit for CVE-2020-8165 (Ruby on Rails) demonstrating remote code execution via ERB template injection and deserialization. For…
daehyeok0618/cve-2019-5418Docker-based lab environment for CVE-2019-5418 Ruby on Rails path traversal exploit, with PoC curl commands to read arbitrary server files via…
its-arun/cve-2016-2098Bash-based proof-of-concept exploit for CVE-2016-2098, targeting Ruby on Rails Action Pack remote code execution via unrestricted render method.
eremiel/cve-2019-5420Python exploit script for CVE-2019-5420, targeting Ruby on Rails signed-session AES GCM key brute-forcing to achieve remote code execution in…
progfay/cve-2020-8165Proof-of-concept exploit for CVE-2020-8165, a Ruby on Rails remote code execution vulnerability. Demonstrates exploitation of the unsafe…
3rg1s/cve-2016-2098Proof-of-concept exploit for CVE-2016-2098, demonstrating remote Ruby code execution through Rails render method abuse; intended for security testing…
squ4nch/cve-2015-3224Node.js exploit for CVE-2015-3224, achieving unauthenticated RCE on Rails web-console by spoofing X-Forwarded-For to bypass IP whitelist and…
nvidia-nemo/guardrailsProgrammable guardrails for LLM chat apps: enforce input/output rails, block jailbreaks and prompt injections, detect hallucination, and mask…
bad3r/railroadbanditDemonstrates exploitation of Ruby on Rails CVE-2019-5418, a file disclosure vulnerability, for educational purposes.
oxben10/cve-2013-0156Python exploit script for CVE-2013-0156, a remote code execution vulnerability in Ruby on Rails via insecure YAML deserialization. Designed for…
jjdt12/kuang_grade_mk11Pseudo shell for exploiting CVE-2013-0156, providing a command-line interface for automated exploitation of the Ruby on Rails XML/YAML parser…
cyberharsh/ruby-on-rails-path-traversal-vulnerability-cve-2018-3760-Docker-based lab demonstrating CVE-2018-3760 path traversal in Ruby on Rails Sprockets, with POC and environment setup for security testing and…
7s26simon/cve-2013-0156Executes remote code on vulnerable Rails applications via YAML deserialization (CVE-2013-0156); designed for CTFs and authorized penetration tests.
lucasamorimca/cve-2020-8163Proof-of-concept exploit for CVE-2020-8163, a remote code execution vulnerability in Rails < 5.0.1 via user-controlled locals, with a testable…
zer0sumgam3/cve-2026-66066-pocReproducible lab for CVE-2026-66066: file-read-to-RCE exploit chain via Ruby on Rails Active Storage and libvips HDF5 matload. Includes Python…
sic4rio/cve-2015-3224Python exploit for CVE-2015-3224, bypassing IP whitelist in Ruby on Rails web console to achieve remote code execution with interactive reverse shell.