shopify-scripts: SIGSEGV - mrb_vm_exec - vm.c in line:1272

PoC: ------------------- The following code triggers the bug attached as testmrbvmexec1272.rb: a,a,a,a=0,def e end a Sandbox: ------------------- x@x:/Desktop/research/mruby-engine/bin$ ./sandbox testmrbvmexec1272.rb ./sandbox:20: BUG Segmentation fault at 0x00000000000018 ruby 2.2.6p396 2016-11-...

The vulnerability of the Ruby interpreter allows a hacker to replace the SSL server.

The vulnerability of the Ruby interpreter in the OpenSSL extension lies in the improper checking of names of nodes and certificates that contain group symbols. As a result, exploiting this vulnerability using a specially crafted certificate can allow a compromise to replace the SSL server...

DSA-3245-1 ruby1.8 - security update

Bulletin has no description...

[SECURITY] [DSA 3157-1] ruby1.9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3157-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini February 09, 2015 http://www.debian.org/security/faq -...

DSA-3157-1 ruby1.9.1 - security update

Bulletin has no description...

URLCrazy - Test domain typos and variations to detect typo squatting, URL hijacking, phishing, and corporate espionage

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage. Usage Detect typo squatters profiting from typos on your domain name Protect your brand by registering popular typos Identify typo domain names that will receive...

Debian Security Advisory DSA 2809-1 (ruby1.8 - several vulnerabilities)

Several vulnerabilities have been discovered in the interpreter for the Ruby language. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1821 Ben Murphy discovered that unrestricted entity expansion in REXML can lead to a Denial of Service by consuming a...

SuSE 10 Security Update : ruby (ZYPP Patch Number 8524)

The ruby interpreter received a fix for two security issues : - Ruby's $SAFE mechanism enables untrusted user codes to run in $SAFE = 4 mode. This is a kind of sandboxing so some operations are restricted in that mode to protect other data outside the sandbox. CVE-2012-4466 The problem found was...

[SECURITY] Fedora 17 Update: ruby-1.9.3.392-29.fc17

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

DEBIAN-CVE-2011-4838

JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted input to an application that maintains a hash table...

Ruby Interpreter Heap Overflow Vulnerability (Dec 2009) - Linux

Ruby Interpreter is prone to a heap overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ruby-lang:ruby";...

Ruby Interpreter Heap Overflow Vulnerability (Windows) - Dec09

This host is installed with Ruby Interpreter and is prone to Heap Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrubyheapbofvulnwindec09.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby Interpreter Heap Overflow Vulnerability Windows - Dec09 Authors: Sujit Ghosal Copyright: Copyright...

Ruby Interpreter Heap Overflow Vulnerability (Dec 2009) - Windows

Ruby Interpreter is prone to a heap overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ruby-lang:ruby";...

Mandriva Linux Security Advisory : ruby (MDVSA-2008:141)

Multiple vulnerabilities have been found in the Ruby interpreter and in Webrick, the webserver bundled with Ruby. Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash path separators or...

Mandriva Update for ruby MDVSA-2008:140 (ruby)

Check for the Version of ruby OpenVAS Vulnerability Test Mandriva Update for ruby MDVSA-2008:140 ruby Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for ruby MDVSA-2008:140 (ruby)

Check for the Version of ruby OpenVAS Vulnerability Test Mandriva Update for ruby MDVSA-2008:140 ruby Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

GLSA-200812-17 : Ruby: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-17 Ruby: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the Ruby interpreter and its standard libraries. Drew Yao of Apple Product Security discovered the following flaws: Arbitrary code execution...

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for quick and easy object-oriented...

[SECURITY] Fedora 7 Update: ruby-1.8.6.111-1.fc7

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

[SECURITY] [DSA 1157-1] New ruby1.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1157-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 27th, 2006 http://www.debian.org/security/faq -...