This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Ethiack
ethiack.com
did:plc:fdaeffzmvpa44fvmhmc6tjzn
🚨 We discovered a critical RCE in Ruby on Rails via Active Storage.
KindaRails2Shell - discovered by the Ethiack research team.
Any app using Active Storage with the default vips processor and accepting image uploads from untrusted users is affected.
CVE-2026-66066
https://ethiack.com/info-hub/research/kindarails2shell-rails-rce-cve-2026-66066
2026-07-30T01:03:11.171Z