remote-code-execution

2 articles · newest first

Server racks in an enterprise data center

ServiceNow patched this in April. attackers are exploiting it now with a different trick

The published proof-of-concept and the real attacks hit the same endpoint through two different doors — which is why patching alone didn't close this one.

Priya Nair · 3h ago · 7 min

Ruby on Rails application code displayed on a developer's monitor

Software

a Rails image upload bug lets a file lie about what it is — and steal your app's secret keys

KindaRails2Shell abuses a file that tells two different libraries two different lies to read anything your Rails app can read — including the keys that sign its cookies.

Priya Nair · 3h ago · 6 min