haiti

HAITI 哈 希类 型识 别器 这是什么？ 一个 CLI 工具（以及库），用于识别哈希类型（哈希类型识别器）。 CLI 库 特性 可检测超过 675 种哈希类型 支持现代算法（SHA3、Keccak、Blake2 等） 提供 Hashcat 和 John the Ripper 参考 既可作为 CLI 工具，也可作为库使用 可扩展 安装 $ gem install haiti-hash 查看文档中的安装页面，了解更多安装方式（Docker、Debian、openSUSE 等）。 文档 主页 / 文档：https://noraj.github.io/hai...

wordlist.rb

Wordlist Código Problemas Documentación Descripción Wordlist es una librería y CLI de Ruby para leer, combinar, mutar y construir wordlists de forma eficiente. Características Soporta la lectura de wordlists .txt y de .gz, .bz2, .xz, .zip, y .7z comprimidas. Soporta la construcción de wordlists a...

metasm

Metasm, la suite de manipulación de ensamblador de Ruby scripts de ejemplo en samples/ -- lee los comentarios al principio de los archivos todos los archivos están licenciados bajo los términos de la LGPL Autor: Yoann Guillot Visión general básica: Metasm te permite interactuar con formatos de...

WiFi-Pineapple-MK7_REST-Client

WIFI PINEAPPLE MARK VII - REST CLIENT 领先的流氓接入点和WiFi渗透测试工具包，用于近距离操作。 被动和主动攻击可分析易受攻击和配置错误的设备。 https://hak5.org/collections/sale/products/wifi-pineapple 作者 :: TW-D 版本 :: 1.3.7 版权 :: Copyright c 2024 TW-D 许可证 :: 与 Ruby 相同的分发条款 文档 :: https://hak5.github.io/mk7-docs/docs/rest/rest/ 要求 :: Ruby = 2.7.0p0...

ctf-party

ctf-party 这是什么 这是一个库，旨在通过修补 String 类以添加常用代码模式的简短语法，来提升和加速 CTF 玩家（或安全研究人员、漏洞赏金猎人、渗透测试人员，但主要针对 CTF）的脚本/漏洞利用编写。其哲学是保持库为纯 Ruby（无依赖），并且不重新实现其他库已经做得很好的功能（例如 xorcist 用于 xor）。 例如，与其这样写： require 'base64' myvar = 'string' myvar = Base64.strictencode64myvar 不如这样写（更简短且易记）： require 'ctfparty' myvar = 'string'...

DEBIAN-CVE-2026-68006

An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file...

CVE-2026-63435

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode used a single Stringmatch and an overly greedy charset capture to decode only the first RFC 2047 encoded-word and mishandle...

CVE-2026-63435 Mail: Email address spoofing via malformed RFC 2047 encoded-words

Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.qvaluedecode and Mail::Utilities.bvaluedecode used a single Stringmatch and an overly greedy charset capture to decode only the first RFC 2047 encoded-word and mishandle...

PT-2026-84460

Name of the Vulnerable Software and Affected Versions Mail versions prior to 2.9.1 Description Mail is an internet library for Ruby used for email generation, parsing, and sending. The functions q value decode and b value decode within Mail::Utilities use a single Stringmatch and an overly greedy...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: rubygem-redcarpet (UTSA-2026-032342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032342 advisory. Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting...

CVE-2026-47242

A flaw was found in Net::IMAP, a Ruby library that implements Internet Message Access Protocol IMAP client functionality. This vulnerability arises from improper input validation when handling ID field values and arguments to the enable command. A remote attacker could exploit this by injecting...

GHSA-RH9X-7XJC-VWX2 Duplicate Advisory: Nokogiri XSLT transform has a memory leak

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v2fc-qm4h-8hqv. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby...

UBUNTU-CVE-2026-79771

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...

UBUNTU-CVE-2026-79769

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

UBUNTU-CVE-2023-54354

Nokogiri before 1.14.3 CRuby implementation only, when using the packaged libxml2 bundles libxml2 v2.10.3, which is vulnerable to NULL pointer dereferences in XML Schema processing xmlSchemaFixupComplexType, CVE-2023-28484, and xmlSchemaCheckCOSSTDerivedOK. An attacker who supplies a...

MAL-2026-15710 Malicious code in hyper-sharp-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15703 Malicious code in giga-sharp-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2026-73492

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: or vbscript: URIs whose scheme is split by semicolon-less numeric character references...

CVE-2026-73492

A flaw was found in Loofah, a library used for processing HTML and XML documents. The 'alloweduri?' function, intended to validate Uniform Resource Identifiers URIs, does not correctly identify and reject 'javascript:' or 'vbscript:' URIs when their scheme is obscured by specific HTML-encoded...

DEBIAN-CVE-2026-73492

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTML5::Scrub.alloweduri? does not reject javascript: or vbscript: URIs whose scheme is split by semicolon-less numeric character references...