gzip: arbitrary-file-write vulnerability

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file name, this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation...

The vulnerability of the sure_loadable_spec function in the RubyGems package management system, related to errors in processing multi-line names, allows a hacker to execute arbitrary code.

The vulnerability of the sureloadablespec function in the RubyGems package management system is related to errors in processing multi-line names. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted line of text written into the gemspec file...