CVE-2012-5380

Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Ruby193\bin directory, which may be added to the PATH system environment variable by...

Encrypted Exploit Delivery For The Masses: Ironsquirrel

This project aims at delivering browser exploits to the victim browser in an encrypted fashion. Ellyptic-curve Diffie-Hellman secp256k1 is used for key agreement and AES is used for encryption. By delivering the exploit code and shellcode to the victim in an encrypted way, the attack can not be...

PT-2012-5962 · Ruby +1 · Ruby +1

Name of the Vulnerable Software and Affected Versions: Ruby version 1.9.3-p194 Description: The installation functionality in Ruby has an untrusted search path vulnerability when installed in the top-level C: directory. This might allow local users to gain privileges via a Trojan horse DLL in the...