Veille CyberInfra — Veille cybersecurite : OpenSSH flaw lets attackers log into password-disabled Linux accounts Veille CyberInfra — Veille cybersecurite : Chainalysis says breach exposed credentials for all customers Veille CyberInfra — Veille cybersecurite : Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login Veille CyberInfra — Veille cybersecurite : Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs Veille CyberInfra — Veille cybersecurite : Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts Veille CyberInfra — Veille cybersecurite : Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers Veille CyberInfra — Veille cybersecurite : OpenSSH flaw lets attackers log into password-disabled Linux accounts Veille CyberInfra — Veille cybersecurite : Chainalysis says breach exposed credentials for all customers Veille CyberInfra — Veille cybersecurite : Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login Veille CyberInfra — Veille cybersecurite : Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs Veille CyberInfra — Veille cybersecurite : Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts Veille CyberInfra — Veille cybersecurite : Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers

Veille cybersecurite : Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads

04/11/2026

Source : The Hacker News

A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app’s server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project disclosed the flaw in an advisory and fixed it in versions 8.1.4.1 and 8.0.5.2.

The flaw is in Active Storage, the part of Rails that handles file uploads. Some apps store

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog