2019-12-08 14:19:20 +01:00
[
2023-09-27 14:50:10 +02:00
{
"id" : 52896981 ,
"name" : "dh-CVE_2016_2098" ,
"full_name" : "hderms\/dh-CVE_2016_2098" ,
"owner" : {
"login" : "hderms" ,
"id" : 833575 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/833575?v=4" ,
"html_url" : "https:\/\/github.com\/hderms"
} ,
"html_url" : "https:\/\/github.com\/hderms\/dh-CVE_2016_2098" ,
"description" : "Proof of concept showing how CVE-2016-2098 leads to remote code execution" ,
"fork" : false ,
"created_at" : "2016-03-01T17:45:29Z" ,
"updated_at" : "2020-06-06T02:45:09Z" ,
"pushed_at" : "2016-03-01T17:45:55Z" ,
"stargazers_count" : 3 ,
"watchers_count" : 3 ,
"has_discussions" : false ,
"forks_count" : 4 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 4 ,
"watchers" : 3 ,
"score" : 0 ,
"subscribers_count" : 1
} ,
2021-03-15 04:09:16 +01:00
{
"id" : 60613259 ,
"name" : "PoC_CVE-2016-2098_Rails42" ,
"full_name" : "CyberDefenseInstitute\/PoC_CVE-2016-2098_Rails42" ,
"owner" : {
"login" : "CyberDefenseInstitute" ,
"id" : 13356356 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/13356356?v=4" ,
"html_url" : "https:\/\/github.com\/CyberDefenseInstitute"
} ,
"html_url" : "https:\/\/github.com\/CyberDefenseInstitute\/PoC_CVE-2016-2098_Rails42" ,
"description" : "A PoC of CVE-2016-2098 (rails4.2.5.1 \/ view render)" ,
"fork" : false ,
"created_at" : "2016-06-07T12:59:31Z" ,
"updated_at" : "2019-08-26T16:39:44Z" ,
"pushed_at" : "2016-06-07T13:15:24Z" ,
"stargazers_count" : 1 ,
"watchers_count" : 1 ,
2022-11-08 07:19:29 +01:00
"has_discussions" : false ,
2021-03-15 04:09:16 +01:00
"forks_count" : 0 ,
2021-09-13 23:12:57 +02:00
"allow_forking" : true ,
2021-10-06 23:13:51 +02:00
"is_template" : false ,
2022-06-28 20:20:29 +02:00
"web_commit_signoff_required" : false ,
2021-10-06 23:13:51 +02:00
"topics" : [
"poc" ,
"rails" ,
"vulnerability"
] ,
2021-10-01 23:13:10 +02:00
"visibility" : "public" ,
2021-03-15 04:09:16 +01:00
"forks" : 0 ,
"watchers" : 1 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 6
2023-01-07 01:35:14 +01:00
} ,
2023-12-29 07:40:52 +01:00
{
"id" : 80069309 ,
"name" : "rails-PoC-CVE-2016-2098" ,
"full_name" : "Alejandro-MartinG\/rails-PoC-CVE-2016-2098" ,
"owner" : {
"login" : "Alejandro-MartinG" ,
"id" : 14140693 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/14140693?v=4" ,
"html_url" : "https:\/\/github.com\/Alejandro-MartinG"
} ,
"html_url" : "https:\/\/github.com\/Alejandro-MartinG\/rails-PoC-CVE-2016-2098" ,
"description" : "Proof of concept CVE-2016-2098" ,
"fork" : false ,
"created_at" : "2017-01-25T23:42:31Z" ,
"updated_at" : "2017-07-05T14:05:44Z" ,
"pushed_at" : "2017-01-25T23:46:47Z" ,
"stargazers_count" : 1 ,
"watchers_count" : 1 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 1 ,
"score" : 0 ,
"subscribers_count" : 2
} ,
2023-03-30 08:34:11 +02:00
{
"id" : 120927347 ,
"name" : "CVE-2016-2098" ,
"full_name" : "0x00-0x00\/CVE-2016-2098" ,
"owner" : {
"login" : "0x00-0x00" ,
"id" : 23364530 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/23364530?v=4" ,
"html_url" : "https:\/\/github.com\/0x00-0x00"
} ,
"html_url" : "https:\/\/github.com\/0x00-0x00\/CVE-2016-2098" ,
"description" : "Ruby On Rails unrestricted render() exploit" ,
"fork" : false ,
"created_at" : "2018-02-09T16:16:08Z" ,
2023-09-28 14:53:01 +02:00
"updated_at" : "2023-09-28T10:48:10Z" ,
2023-03-30 08:34:11 +02:00
"pushed_at" : "2018-02-09T16:17:35Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 17 ,
"watchers_count" : 17 ,
2023-03-30 08:34:11 +02:00
"has_discussions" : false ,
"forks_count" : 4 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"exploit" ,
"rail" ,
"rails" ,
"render" ,
"ruby"
] ,
"visibility" : "public" ,
"forks" : 4 ,
2023-09-28 14:53:01 +02:00
"watchers" : 17 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 3
2023-03-30 08:34:11 +02:00
} ,
2023-01-07 01:35:14 +01:00
{
"id" : 137853310 ,
"name" : "CVE-2016-2098" ,
"full_name" : "its-arun\/CVE-2016-2098" ,
"owner" : {
"login" : "its-arun" ,
"id" : 20841421 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/20841421?v=4" ,
"html_url" : "https:\/\/github.com\/its-arun"
} ,
"html_url" : "https:\/\/github.com\/its-arun\/CVE-2016-2098" ,
"description" : "CVE-2016-2098 simple POC written in bash" ,
"fork" : false ,
"created_at" : "2018-06-19T07:05:51Z" ,
2023-09-28 14:53:01 +02:00
"updated_at" : "2023-09-28T10:51:37Z" ,
2023-01-07 01:35:14 +01:00
"pushed_at" : "2020-03-11T14:30:46Z" ,
2023-09-28 14:53:01 +02:00
"stargazers_count" : 2 ,
"watchers_count" : 2 ,
2023-01-07 01:35:14 +01:00
"has_discussions" : false ,
"forks_count" : 2 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 2 ,
2023-09-28 14:53:01 +02:00
"watchers" : 2 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 0
2023-01-07 01:35:14 +01:00
} ,
{
"id" : 218523957 ,
"name" : "CVE-2016-2098" ,
"full_name" : "3rg1s\/CVE-2016-2098" ,
"owner" : {
"login" : "3rg1s" ,
"id" : 16364370 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/16364370?v=4" ,
"html_url" : "https:\/\/github.com\/3rg1s"
} ,
"html_url" : "https:\/\/github.com\/3rg1s\/CVE-2016-2098" ,
"description" : null ,
"fork" : false ,
"created_at" : "2019-10-30T12:36:38Z" ,
"updated_at" : "2019-10-30T12:39:03Z" ,
"pushed_at" : "2019-10-30T12:39:01Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [
"cve" ,
"python"
] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 0
2023-01-07 01:35:14 +01:00
} ,
{
"id" : 282880213 ,
"name" : "CVE-2016-2098-my-first-exploit" ,
2023-11-06 19:25:30 +01:00
"full_name" : "DanielHemmati\/CVE-2016-2098-my-first-exploit" ,
2023-01-07 01:35:14 +01:00
"owner" : {
2023-11-06 19:25:30 +01:00
"login" : "DanielHemmati" ,
2023-01-07 01:35:14 +01:00
"id" : 25554446 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/25554446?v=4" ,
2023-11-06 19:25:30 +01:00
"html_url" : "https:\/\/github.com\/DanielHemmati"
2023-01-07 01:35:14 +01:00
} ,
2023-11-06 19:25:30 +01:00
"html_url" : "https:\/\/github.com\/DanielHemmati\/CVE-2016-2098-my-first-exploit" ,
2023-01-07 01:35:14 +01:00
"description" : "This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data" ,
"fork" : false ,
"created_at" : "2020-07-27T11:38:48Z" ,
"updated_at" : "2020-07-28T04:39:07Z" ,
"pushed_at" : "2020-07-27T11:42:11Z" ,
"stargazers_count" : 1 ,
"watchers_count" : 1 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 1 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 1
2023-06-19 10:13:15 +02:00
} ,
{
"id" : 355436102 ,
"name" : "CVE-2016-2098" ,
"full_name" : "Debalinax64\/CVE-2016-2098" ,
"owner" : {
"login" : "Debalinax64" ,
"id" : 33616847 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/33616847?v=4" ,
"html_url" : "https:\/\/github.com\/Debalinax64"
} ,
"html_url" : "https:\/\/github.com\/Debalinax64\/CVE-2016-2098" ,
"description" : "CVE-2016-2098 - POC of RCE Ruby on Rails: Improper Input Validation (CVE-2016-2098) in bash. Remote attackers can execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method." ,
"fork" : false ,
"created_at" : "2021-04-07T06:27:25Z" ,
"updated_at" : "2021-04-07T08:51:21Z" ,
"pushed_at" : "2021-04-07T08:48:58Z" ,
"stargazers_count" : 0 ,
"watchers_count" : 0 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 0 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 1
2023-06-19 10:13:15 +02:00
} ,
{
"id" : 401752555 ,
"name" : "CVE-2016-2098" ,
"full_name" : "j4k0m\/CVE-2016-2098" ,
"owner" : {
"login" : "j4k0m" ,
"id" : 48088579 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/48088579?v=4" ,
"html_url" : "https:\/\/github.com\/j4k0m"
} ,
"html_url" : "https:\/\/github.com\/j4k0m\/CVE-2016-2098" ,
"description" : "Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data." ,
"fork" : false ,
"created_at" : "2021-08-31T15:25:41Z" ,
2023-11-06 13:26:31 +01:00
"updated_at" : "2023-11-06T10:08:29Z" ,
2023-06-19 10:13:15 +02:00
"pushed_at" : "2021-08-31T16:06:51Z" ,
2023-11-06 13:26:31 +01:00
"stargazers_count" : 2 ,
"watchers_count" : 2 ,
2023-06-19 10:13:15 +02:00
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
2023-11-06 13:26:31 +01:00
"watchers" : 2 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 2
2023-06-19 10:13:15 +02:00
} ,
{
"id" : 540989582 ,
"name" : "CVE-2016-2098" ,
"full_name" : "Shakun8\/CVE-2016-2098" ,
"owner" : {
"login" : "Shakun8" ,
"id" : 87657631 ,
"avatar_url" : "https:\/\/avatars.githubusercontent.com\/u\/87657631?v=4" ,
"html_url" : "https:\/\/github.com\/Shakun8"
} ,
"html_url" : "https:\/\/github.com\/Shakun8\/CVE-2016-2098" ,
"description" : "CVE-2016-2098 POC" ,
"fork" : false ,
"created_at" : "2022-09-24T22:58:04Z" ,
"updated_at" : "2023-03-22T17:11:57Z" ,
"pushed_at" : "2022-09-25T14:34:19Z" ,
"stargazers_count" : 3 ,
"watchers_count" : 3 ,
"has_discussions" : false ,
"forks_count" : 0 ,
"allow_forking" : true ,
"is_template" : false ,
"web_commit_signoff_required" : false ,
"topics" : [ ] ,
"visibility" : "public" ,
"forks" : 0 ,
"watchers" : 3 ,
2023-06-19 15:46:37 +02:00
"score" : 0 ,
"subscribers_count" : 1
2019-12-08 14:19:20 +01:00
}
]
