metasm

Metasm، مجموعة أدوات معالجة لغة التجميع Ruby نماذج سكربتات في samples/ -- اقرأ التعليقات في بداية الملفات جميع الملفات مرخّصة بموجب شروط LGPL المؤلف: Yoann Guillot نظرة عامة أساسية: تتيح لك Metasm التعامل مع تنسيقات الملفات التنفيذية ExeFormat: PE وELF وMach-O وShellcode وغيرها. هناك ثلاث طرق...

WiFi-Pineapple-MK7_REST-Client

WIFI PINEAPPLE MARK VII - عميل REST الأداة الرائدة لنقاط الوصول المارقة ومجموعة اختبار اختراق WiFi للعمليات القريبة. هجمات سلبية ونشطة لتحليل الأجهزة الضعيفة وغير المهيأة بشكل صحيح. https://hak5.org/collections/sale/products/wifi-pineapple المؤلف :: TW-D الإصدار :: 1.3.7 حقوق النشر :: حقوق الطبع...

wordlist.rb

Wordlist المصدر المشكلات التوثيق الوصف Wordlist هي مكتبة Ruby وواجهة سطر أوامر CLI لقراءة قوائم الكلمات ودمجها وتحويرها وبناؤها بكفاءة. الميزات تدعم قراءة قوائم الكلمات بصيغة .txt، وقوائم الكلمات المضغوطة بصيغ .gz و.bz2 و.xz و.zip و.7z. تدعم بناء قوائم الكلمات من أي نص. كما تدعم الضغط بصيغ .gz...

haiti

HAITI مُحَدِّد نَوع الهاش ما هو؟ أداة سطر أوامر ومكتبة لتحديد أنواع التجزئة مُحدد نوع الهاش. CLI مكتبة المميزات كشف 675+ نوع هاش خوارزميات حديثة مدعومة SHA3، Keccak، Blake2، إلخ مراجع لـ Hashcat وJohn the Ripper أداة CLI ومكتبة قابلة للتعديل التثبيت $ gem install haiti-hash اطلع على صفحة التثبيت ...

ctf-party

ctf-party Qu'est-ce que c'est Une bibliothèque pour améliorer et accélérer l'écriture de scripts/exploits pour les joueurs de CTF ou chercheurs en sécurité, chasseurs de bugs, pentesteurs mais surtout axé sur le CTF en patchant la classe String pour ajouter une syntaxe courte des motifs de code...

DEBIAN-CVE-2026-68006

An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file...

CVE-2026-63435

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode used a single Stringmatch and an overly greedy charset capture to decode only the first RFC 2047 encoded-word and mishandle...

CVE-2026-63435 Mail: Email address spoofing via malformed RFC 2047 encoded-words

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode used a single Stringmatch and an overly greedy charset capture to decode only the first RFC 2047 encoded-word and mishandle...

PT-2026-84460

Name of the Vulnerable Software and Affected Versions Mail versions prior to 2.9.1 Description Mail is an internet library for Ruby used for email generation, parsing, and sending. The functions q value decode and b value decode within Mail::Utilities use a single Stringmatch and an overly greedy...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: rubygem-redcarpet (UTSA-2026-032342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032342 advisory. Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting...

CVE-2026-47242

A flaw was found in Net::IMAP, a Ruby library that implements Internet Message Access Protocol IMAP client functionality. This vulnerability arises from improper input validation when handling ID field values and arguments to the enable command. A remote attacker could exploit this by injecting...

GHSA-RH9X-7XJC-VWX2 Duplicate Advisory: Nokogiri XSLT transform has a memory leak

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v2fc-qm4h-8hqv. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby...

UBUNTU-CVE-2026-79769

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

UBUNTU-CVE-2026-79771

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

UBUNTU-CVE-2023-54354

Nokogiri before 1.14.3 CRuby implementation only, when using the packaged libxml2 bundles libxml2 v2.10.3, which is vulnerable to NULL pointer dereferences in XML Schema processing xmlSchemaFixupComplexType, CVE-2023-28484, and xmlSchemaCheckCOSSTDerivedOK. An attacker who supplies a...

MAL-2026-15749 Malicious code in mini-sharp-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15732 Malicious code in micro-max-rb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15710 Malicious code in hyper-sharp-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15703 Malicious code in giga-sharp-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2026-73492

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: or vbscript: URIs whose scheme is split by semicolon-less numeric character references...