metasploit-bailiwicked_domain-fix

🚀 metasploit-bailiwickeddomain-fix 修复 Metasploit 的bailiwickeddomain.rb 中 undefined method each 错误（CVE-2008-1447 DNS 缓存投毒模块） 🔎 问题 在使用 Metasploit 测试 CVE-2008-1447 时，原始模块出现崩溃，错误信息如下： undefined method each for an instance of IPAddr NoMethodError 问题在于代码在 IPAddr 对象上调用了 .each ，而非在数组上。 🛠️ 修复方法 修复方法是 在迭代之前...

CVE-2026-50129 Mastodon: Persistent anonymous DoS via unhandled NoMethodError in MATH_TRANSFORMER

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.11, 4.4.18, and 4.3.24, a DoS can be triggered by Uncaught Exception vulerability, due to missing exception handling in the math sanitizer. Malformed nodes can result in a DoS of a whole server or targeted...

shopify-scripts: SIGSEGV in mrb_class

PoC ------------------- Attached as testmrbclass.rb: Debug - mirb ------------------- Program received signal SIGSEGV, Segmentation fault. 0x0000000000402ef2 in mrbclass mrb=0x6b0010, v=... at /home/x/Desktop/test/mruby/include/mruby/class.h:50 50 return mrbobjptrv-c; gdb l 45 case MRBTTCPTR: 46...

shopify-scripts: SIGSEGV in str_buf_cat

PoC ------------------- Attached as teststrbufcat.rb Debug - mirb ------------------- Program received signal SIGSEGV, Segmentation fault. memcpysse2unaligned at ../sysdeps/x8664/multiarch/memcpy-sse2-unaligned.S:36 36 ../sysdeps/x8664/multiarch/memcpy-sse2-unaligned.S: No such file or directory...

shopify-scripts: Crash: Overwriting NoMethodError with a builtin class crashes/corrupts memory

Uhm, while testing this I seem to have broken https://mruby.science.. Ooops, sorry about that! Anyway, here's the bug: Overwriting at least, not sure about other triggers NoMethodError with a builtin class like Fixnum or Integer leads to a rather interesting behavior. https://mruby.science didn't...