19331 matches found
URI Credential Leakage Bypass over CVE-2025-27221
Impact In affected URI version, a bypass exists for the fix to CVE-2025-27221 that can expose user credentials. When using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential...
CVE-2025-61594: Exposure of Sensitive Information to an Unauthorized Actor
URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier bundled in Ruby 3.2 series 0.13.2 and earlier bundled in Ruby 3.3 series, 1.0.3 and earlier bundled in Ruby 3.4 series, when using the + operator to combine URIs, sensitive information like...
URI security vulnerabilities
URI is a Ruby open source module that provides classes to handle Uniform Resource Identifiers. A security vulnerability exists in URI versions prior to 0.12.5, 0.13.3, and 1.0.4, which stems from the possibility that sensitive information such as passwords in the original URI may be disclosed whe...
Mageia: Security Advisory (MGASA-2025-0334)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for CVE-2025-27407
PoCCVE-2025-27407 Proof of concept for a remote code executi...
ruby:fuzz_regex: Crash in rb_gc_impl_realloc
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4589626309541888 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzregex Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5cf02a39c008 Crash State:...
ruby:fuzz_iseq: Crash in RCLASS_EXT_READABLE
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5975718355075072 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzziseq Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000d310c Crash State:...
ruby:fuzz_iseq: Crash in ibf_load_object
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5801560920883200 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzziseq Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x585bf9448830 Crash State:...
ruby:fuzz_prism: Stack-use-after-return in parser_lex
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5275437376012288 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzprism Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x768837cd13c0 Crash...
RHSA-2025:23927 Red Hat Security Advisory: ruby security update
Bulletin has no description...
Malicious code in verificator (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192924 Malicious code in u2f_client (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in u2f_client (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in test_gem_978483406ebb19126a2e8c001649a4eb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192922 Malicious code in stripe-server (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192921 Malicious code in stripe-rubocop (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in stripe-rubocop (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in stripe-backup (RubyGems)
--- -= Per source details. Do not edit below this line.=-...