git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

cve-2026-105221-gist-tls

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cve-2026-105221-gist-tls cve-2026-105221-gist-tls gist RubyGem 6.1.0 - defunkt Class: TLS verify bypass credential theft Reach: Remote on-path httpconnection sets OpenSSL::SSL::VERIFYNONE. HTTPS to GitHub still...

CVE-2026-105221

A flaw was found in gist. The utility completely disables Transport Layer Security TLS certificate verification when establishing HTTPS connections. An on-path attacker can exploit this flaw by presenting an arbitrary certificate to intercept, read, and manipulate network traffic. This can lead t...

Exploit for CVE-2026-105221

abraxaslabs.tech · github.com/abraxas ·&...

EUVD-2026-92134

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

Linux Distros Unpatched Vulnerability : CVE-2026-105221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on- path attackers to intercept HTTPS traffic because...

CVE-2026-105221

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

CVE-2026-105221 Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

CVE-2026-105221 Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

CVE-2026-105221

The gist RubyGem before version 6.1.0 is vulnerable to an improper certificate validation flaw. The root cause is located in lib/gist.rb, where the http_connection function sets VERIFY_NONE, effectively disabling TLS certificate verification. This allows on-path attackers to intercept HTTPS traff...

CVE-2026-105221 Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

CVE-2026-105221: Improper Certificate Validation

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

PT-2026-104655

Name of the Vulnerable Software and Affected Versions gist RubyGem versions prior to 6.1.0 Description Improper certificate validation occurs because the http connection function in lib/gist.rb sets VERIFY NONE, which disables TLS certificate verification. This allows on-path attackers to interce...

CVE-2026-88420

creationtimestamp| type| source ---|---|--- 2026-09-22 12:43:45+00:00| seen| https://gist.github.com/itsmohitnarayan/89de718efb225e840719478ed949bd51...

CVE-2014-6345

creationtimestamp| type| source ---|---|--- 2026-09-22 09:22:01+00:00| seen| https://gist.github.com/INFOKOM-KI/b3d6c108fa85f8f8db8dfa6751a589cc...

CVE-2026-94570

creationtimestamp| type| source ---|---|--- 2026-09-22 04:48:30+00:00| seen| https://gist.github.com/yyymk/b5892625cb5efa2bffd36e0b05334ae8...

GHSA-JHJP-4C2Q-XMX4

creationtimestamp| type| source ---|---|--- 2026-09-22 01:31:26+00:00| seen| https://gist.github.com/alon710/f0da16101e0126a7387302a2b36a1565...

CVE-2026-94493

creationtimestamp| type| source ---|---|--- 2026-09-22 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117312102443872796 2026-09-22 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mw33bvgb3k2x 2026-09-22 02:07:40+00:00| seen|...

GHSA-HF33-Q6CF-C66F

creationtimestamp| type| source ---|---|--- 2026-09-22 00:31:44+00:00| seen| https://gist.github.com/alon710/9d98bc19a160c740db04b0c738bd9724...

CVE-2026-61630

creationtimestamp| type| source ---|---|--- 2026-09-22 00:31:44+00:00| seen| https://gist.github.com/alon710/9d98bc19a160c740db04b0c738bd9724 2026-09-22 10:16:30+00:00| seen| https://bsky.app/profile/suriq.io/post/3mw3yoj2ajx2b 2026-09-24 08:02:49+00:00| seen|...