CVE-2025-27610: Local file inclusion
· 2 min read
After collecting a fair number of CVEs, I realized that having a CVE isnât really that big of a dealâunless itâs a major one (or comes with a juicy bug bounty đ). So I figured, why not challenge myself with a CVE thatâs not from a giant like Microsoft or Google, but still big enough to push my limits a bit? Thatâs when I started hunting for a target with a few friends, just for fun. Then I thoughtâwhy not go for something a little off the beaten path?
Thatâs how I ended up looking into languages I hadnât really touched much before, like Ruby, Rust, and Go. After some digging, I stumbled upon Rackâa Ruby interface that connects web servers with Ruby web applications.