Takahiro Yokoyama

19 exploits Active since Apr 2022
CVE-2026-27966 METASPLOIT CRITICAL ruby WORKING POC
Langflow < 1.8.0 - Remote Code Execution via CSV Agent Node
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.8.0, the CSV Agent node in Langflow hardcodes `allow_dangerous_code=True`, which automatically exposes LangChain’s Python REPL tool (`python_repl_ast`). As a result, an attacker can execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution (RCE). Version 1.8.0 fixes the issue.
CVSS 9.8
CVE-2024-3408 METASPLOIT CRITICAL ruby WORKING POC
D-Tale RCE
man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code execution (RCE) due to improper input validation. The vulnerability arises from a hardcoded `SECRET_KEY` in the flask configuration, allowing attackers to forge a session cookie if authentication is enabled. Additionally, the application fails to properly restrict custom filter queries, enabling attackers to execute arbitrary code on the server by bypassing the restriction on the `/update-settings` endpoint, even when `enable_custom_filters` is not enabled. This vulnerability allows attackers to bypass authentication mechanisms and execute remote code on the server.
CVSS 9.8
CVE-2024-28185 METASPLOIT CRITICAL ruby WORKING POC
judge0 1.13.0 - Arbitrary File Write and Remote Code Execution via Symlink Attack
Judge0 is an open-source online code execution system. The application does not account for symlinks placed inside the sandbox directory, which can be leveraged by an attacker to write to arbitrary files and gain code execution outside of the sandbox. When executing a submission, Judge0 writes a `run_script` to the sandbox directory. The security issue is that an attacker can create a symbolic link (symlink) at the path `run_script` before this code is executed, resulting in the `f.write` writing to an arbitrary file on the unsandboxed system. An attacker can leverage this vulnerability to overwrite scripts on the system and gain code execution outside of the sandbox.
CVSS 10.0
CVE-2023-6020 METASPLOIT HIGH ruby WORKING POC
Ray < 2.8.1 - Unauthenticated Local File Inclusion via Static Directory
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.
CVSS 7.5
CVE-2025-3248 METASPLOIT CRITICAL ruby WORKING POC
Langflow AI - Unauthenticated Remote Code Execution
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.
CVSS 9.8
CVE-2025-27520 METASPLOIT CRITICAL ruby WORKING POC
BentoML >=1.3.4 <1.4.3 - Unauthenticated Remote Code Execution via Insecure Deserialization
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.
CVSS 9.8
CVE-2024-55964 METASPLOIT CRITICAL ruby WORKING POC
Appsmith < 1.52 - Authenticated Remote Code Execution via PostgreSQL Datasource Query
An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query.
CVSS 9.8
CVE-2023-48022 METASPLOIT CRITICAL ruby WORKING POC
Anyscale Ray 2.6.3 and 2.8.0 - Remote Code Execution via Job Submission API
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment. (Also, within that environment, customers at version 2.52.0 and later can choose to use token authentication.)
CVSS 9.8
CVE-2022-28108 METASPLOIT HIGH ruby WORKING POC
Selenium Grid < 4.0.0 - Cross-Site Request Forgery via Non-JSON Content Types
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.
CVSS 8.8
CVE-2023-0386 METASPLOIT HIGH ruby WORKING POC
Local Privilege Escalation via CVE-2023-0386
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
CVSS 7.8
CVE-2025-32375 METASPLOIT CRITICAL ruby WORKING POC
BentoML < 1.4.8 - Remote Code Execution via Insecure Deserialization
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.8, there was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized arbitrary code on the server, which will grant the attackers to have the initial access and information disclosure on the server. This vulnerability is fixed in 1.4.8.
CVSS 9.8
CVE-2024-28189 METASPLOIT CRITICAL ruby WORKING POC
Judge0 <1.13.1 - Privilege Escalation
Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file within the sandbox. An attacker can abuse this by creating a symbolic link (symlink) to a file outside the sandbox, allowing the attacker to run chown on arbitrary files outside of the sandbox. This vulnerability is not impactful on it's own, but it can be used to bypass the patch for CVE-2024-28185 and obtain a complete sandbox escape. This vulnerability is fixed in 1.13.1.
CVSS 10.0
CVE-2024-51092 METASPLOIT CRITICAL ruby WORKING POC
LibreNMS Authenticated RCE (CVE-2024-51092)
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), and PollDevice.php's initRrdDirectory().
CVSS 9.1
CVE-2024-6127 METASPLOIT CRITICAL ruby WORKING POC
PowerShellEmpire Arbitrary File Upload (Skywalker)
BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, and then triggering an upload of payload data containing a malicious path.
CVSS 9.8
CVE-2024-12029 METASPLOIT CRITICAL ruby WORKING POC
InvokeAI 5.3.1-5.4.2 - Remote Code Execution via Unsafe Model File Deserialization
A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can exploit this by embedding malicious code in model files, which is executed upon loading. This issue is fixed in version 5.4.3.
CVSS 9.8
CVE-2024-46506 METASPLOIT CRITICAL ruby WORKING POC
Unauthenticated RCE in NetAlertX
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.
CVSS 10.0
CVE-2025-0655 METASPLOIT ruby WORKING POC
Rejected
Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-55890. Notes: All CVE users should reference CVE-2024-55890 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE-2022-28108 METASPLOIT HIGH ruby WORKING POC
Selenium Grid < 4.0.0 - Cross-Site Request Forgery via Non-JSON Content Types
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.
CVSS 8.8
CVE-2023-6019 METASPLOIT CRITICAL ruby WORKING POC
Ray < 2.8.1 - Unauthenticated Remote Code Execution via CPU Profile URL Parameter
A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023
CVSS 9.8