CVE-2013-5036

This Metasploit module exploits a YAML deserialization vulnerability in Squash, allowing remote code execution via crafted YAML payloads sent to the API endpoint. The exploit leverages Ruby's YAML parsing to execute arbitrary commands embedded in the payload.

This Metasploit module exploits a YAML deserialization vulnerability in Squash to achieve remote code execution. It crafts a malicious YAML payload containing base64-encoded Ruby code, which is then deflated and sent to the target endpoint.