Back to directory

WRITEUP #2846

Ruby Deserialization - Gadget on Rails

DeserializationInsecure deserializationRCE

by@httpvoid0x2f(HTTPVoid)

Program

Ruby on Rails

Published

Mar 28, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://httpvoid.com/Ruby-Deserialization-Gadget-On-Rails.md

▸ RELATED WRITEUPS

Attacking PowerShell CLIXML Deserialization

DeserializationInsecure deserialization

Getting code execution on Veeam through CVE-2023-27532

RCEInsecure deserialization

3 ways to get Remote Code Execution in Kafka UI

RCEInsecure deserialization

Dynamics 365 Business Central - A Journey With Ups and Downs

DeserializationInsecure deserialization

Shelltorch Explained: Multiple Vulnerabilities in Pytorch Model Server (Torchserve) (CVSS 9.9, CVSS 9.8) Walkthrough

Built with ❤️ by Shubham Rawat