metasm

Metasm, die Ruby-Suite für Assembly-Manipulation Beispielskripte in samples/ -- die Kommentare am Anfang der Dateien lesen Alle Dateien sind unter den Bedingungen der LGPL lizenziert Autor: Yoann Guillot Grundlegender Überblick: Metasm ermöglicht es Ihnen, mit ausführbaren Formaten ExeFormat zu...

WiFi-Pineapple-MK7_REST-Client

WIFI PINEAPPLE MARK VII - CLIENTE REST O principal ponto de acesso rogue e kit de pentest WiFi para operações de proximidade. Ataques passivos e ativos analisam dispositivos vulneráveis e mal configurados. https://hak5.org/collections/sale/products/wifi-pineapple Autor :: TW-D Versão :: 1.3.7...

haiti

HAITI HA sh I denT ifI er Cos'è? Uno strumento CLI e libreria per identificare i tipi di hash identificatore di tipo di hash. CLI Libreria Caratteristiche 675+ tipi di hash rilevati Algoritmi moderni supportati SHA3, Keccak, Blake2, ecc. Riferimenti a Hashcat e John the Ripper Strumento CLI e...

wordlist.rb

Wordlist स्रोत मुद्दे प्रलेखन विवरण Wordlist एक Ruby लाइब्रेरी और CLI है जो wordlists को कुशलतापूर्वक पढ़ने, संयोजित करने, परिवर्तित करने और बनाने के लिए है। विशेषताएँ .txt wordlists, तथा .gz, .bz2, .xz, .zip, और .7z संपीड़ित wordlists पढ़ने का समर्थन करता है। मनमाने पाठ से wordlists बनाने का...

ctf-party

ctf-party Cos'è Una libreria per migliorare e accelerare la scrittura di script/exploit per i giocatori di CTF o ricercatori di sicurezza, cacciatori di bug, pentester, ma principalmente focalizzata sul CTF estendendo la classe String per aggiungere una sintassi breve degli schemi di codice usual...

CVE-2026-73492

A flaw was found in Loofah, a library used for processing HTML and XML documents. The 'alloweduri?' function, intended to validate Uniform Resource Identifiers URIs, does not correctly identify and reject 'javascript:' or 'vbscript:' URIs when their scheme is obscured by specific HTML-encoded...

DEBIAN-CVE-2026-73492

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: or vbscript: URIs whose scheme is split by semicolon-less numeric character references...

CVE-2026-73490

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.2, Loofah's HTML5 sanitizer applies its local-reference restriction only to the xlink:href attribute on SVG use and feImage elements, while browsers also accept...

EUVD-2026-57628

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: URIs whose scheme is split or prefixed with the HTML5 named whitespace character...

CVE-2026-73490

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.2, Loofah's HTML5 sanitizer applies its local-reference restriction only to the xlink:href attribute on SVG use and feImage elements, while browsers also accept...

CVE-2026-67431

MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not bind a session ID to a session owner, allowing an attacker with a stolen session ID to send tools/call requests that...

CVE-2026-63119

The CVE affects the MCP Ruby SDK (mcp gem), specifically MCP::Server::Transports::StdioTransport and MCP::Client::Stdio. The vulnerability arises from using IO#gets without a byte limit, allowing an attacker to send data without a newline and trigger unbounded line buffering, causing memory exhau...

CVE-2026-54603 OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host

OAuth2 is a Ruby wrapper for the OAuth 2.0 and 2.1 authorization frameworks, including OpenID Connect OIDC. From 0.4.0 to 2.0.21, a protocol-relative redirect Location returned to OAuth2::Clientrequest overrides the request authority, so the bearer Authorization header is sent to an...

CVE-2026-53727

cssparser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssParser::Parserreadremotefile in lib/cssparser/parser.rb, and therefore loaduri! and the @import-following branch of addblock!, issued HTTP and HTTPS requests against any host, port, and URI without a scheme allowlist, host or IP filtering...

EUVD-2026-45312

Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following redirects and did not provide a custom list of headers to strip. This could cause inadvertent leakage of sensitive data when the initial...

ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments

A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful...

MAL-2026-8279 Malicious code in oaikx8326270 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input

A flaw was found in Net::IMAP, a Ruby client library for the Internet Message Access Protocol IMAP. This vulnerability allows a remote attacker to cause a denial of service by sending specially crafted input to certain Net::IMAP commands. When a raw string argument, derived from user-controlled...

RHSA-2026:33462 Red Hat Security Advisory: ruby security update

Bulletin has no description...

ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments

A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful...