Disclose
Submit a zero-day and be rewarded for your efforts.
Fix
Earn a reward by reviewing and fixing vulnerabilities.
Hacktivity
View maintainer approved disclosures and patches.
Submit your first disclosure
Help and resources for your first vulnerability disclosure.
Blog
Follow us on how we're protecting open source.
Responsible disclosure
Read our policy and understand what vulnerabilities are in scope.
FAQ
Find an answer to all the common questions you may have.
Contact us
Let us know your thoughts by getting in touch.
webbynode is a Webbynode Deployment Gem. This Gem contains a vulnerability in notify.rb that is triggered when handling a specially crafted growlnotify message. This can allow a context-dependent attacker to execute arbitrary commands.
webbynode
notify.rb
growlnotify