AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791199760)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791199760 advisory. - Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and...

CVE-2019-5420.rb

CVE-2019-5420.rb POC एक्सप्लॉइट Ruby में लिखा गया लक्ष्य ऐप से अपने कुकीज़ को स्क्रिप्ट में इनपुट करें और ruby ./exploit.rb के माध्यम से चलाएँ...

[SECURITY] [DSA 6542-1] ruby-rack-session security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6542-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 04, 2026 https://www.debian.org/security/faq -...

CVE-2025-27407

CVE-2025-27407 GitLab Podman लैब GitLab Direct Transfer HTTP पथ कमज़ोर graphql-ruby introspection स्कीमा लोडर तक पहुँचता है, इसे साबित करने के लिए यह एक न्यूनतम केवल-स्थानीय लैब है। यह लैब एक कमज़ोर GitLab CE कंटेनर चलाती है; PoC स्क्रिप्ट परीक्षण के दौरान केवल प्रक्रिया-में in-process अपना नकली...

PoC_CVE-2025-54887

PoCCVE-2025-54887 यह रिपॉजिटरी CVE-2025-54887 के लिए प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट शामिल करती है। यह ruby-jwe संस्करण = 1.1.0 में एक कमजोरी है जहां एन्क्रिप्टेड JWE के प्रमाणीकरण टैग को ब्रूट फोर्स किया जा सकता है, जिसके परिणामस्वरूप गोपनीयता की हानि हो सकती है और मनमाना JWE तैयार करने के तरी...

vuln_test_repo_public_ruby_gemfile_cve-2016-6317

इस रिपॉजिटरी में README नहीं है।...

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA निजी कुंजी प्रतिरूपण ============= Ruby openssl में एक कमजोरी है जब एक सार्वजनिक कुंजी निजी कुंजी लिखने से पहले जारी की जाती है और स्क्रिप्ट के दौरान पुनः खोली जाती है तो यह CA निजी कुंजी का प्रतिरूपण करती है। PoC स्क्रिप्ट https://gist.github.com/10446549 Mitre:...

crack-0.1.8-fixed

= crack बहुत सरल JSON और XML पार्सिंग, Merb और Rails से लिया गया। XML पार्सर Merb से लिया गया है और JSON पार्सर Rails से लिया गया है। मैं कोई श्रेय नहीं लेता, बस इन्हें सभी के आनंद और आसान उपयोग के लिए पैकेज किया। == रिलीज़ पर नोट रिलीज़ को github पर टैग किया जाता है और github और rubyforge पर gem...

sanitize

Sanitize Sanitize is an allowlist-based HTML and CSS sanitizer. It removes all HTML and/or CSS from a string except the elements, attributes, and properties you choose to allow. Using a simple configuration syntax, you can tell Sanitize to allow certain HTML elements, certain attributes within...

CVE-2026-63435

A flaw was found in Mail, an internet library for Ruby. The library's decoding of RFC 2047 encoded-words in email headers was vulnerable to an overly greedy charset capture. A remote attacker could exploit this by crafting a malformed encoded-word in an address display name or local part. This...

Debian dsa-6542 : ruby-rack-session - security update

The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6542 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6542-1 [email protected] https://www.debian.org/security/ Moritz...

MiracleLinux 9 : ruby:3.3 (AXSA:2026-1957:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1957:01 advisory. resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses CVE-2026-80212 Tenable has extracted the preceding descriptio...

[SECURITY] Fedora 45 Update: rubygem-nokogiri-1.19.4-5.fc45

Nokogiri parses and searches XML/HTML very quickly, and also has correctly implemented CSS3 selector support as well as XPath support. Nokogiri also features an Hpricot compatibility layer to help ease the change to using correct CSS and XPath...

Linux Distros Unpatched Vulnerability : CVE-2026-96277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0...

Linux Distros Unpatched Vulnerability : CVE-2026-94656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are...

sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is still...

GHSA-MWM8-39RW-8826 sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is still...

CVE-2026-96277

A flaw was found in the Apache Thrift Ruby bindings. This vulnerability allows a remote attacker to cause a Denial of Service DoS due to improper handling of exceptional conditions. By triggering an uncaught exception, an attacker can crash the service and disrupt availability...

DEBIAN-CVE-2026-96277

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-96277

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...