ROS-20251203-19

Vulnerability in the Ruby programming language library that implements the MQTT protocol Rubygem MQTT is related to the lack of hostname validation. Exploitation of the vulnerability could allow A remote attacker to perform a man-in-the-middle attack...

EUVD-2025-200264

Malicious code in pgresultinit RubyGems...

Malicious code in pg_result_init (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 007d07edb120233aab0539e4646e8b634d2a95e2df9e6179bb9b2b6eb90f5a97 The OpenSSF Package Analysis project identified 'pgresultinit' @ 2.0.9 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-191667 Malicious code in pg_result_init (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 007d07edb120233aab0539e4646e8b634d2a95e2df9e6179bb9b2b6eb90f5a97 The OpenSSF Package Analysis project identified 'pgresultinit' @ 2.0.9 rubygems as malicious. It is considered malicious because: - The package...

ruby:fuzz_iseq: Crash in RCLASS_EXT_READABLE

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5809393825546240 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzziseq Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000d210c Crash State:...

metasploit-framework

This is the Metasploit Framework repository, a widely used penetration testing tool. It is an offensive tool for penetration testing and vulnerability assessment. The repository contains various modules and tools for exploiting vulnerabilities and conducting penetration testing. The primary...

ruby:fuzz_prism: Heap-buffer-overflow in parse_pattern_primitives

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6490606307442688 Project: ruby Fuzzing Engine: afl Fuzz Target: fuzzprism Job Type: aflasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7442892e00b5 Crash State:...

net-imap rubygem vulnerable to possible DoS by memory exhaustion

...

Mageia: Security Advisory (MGASA-2025-0311)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

metasploit-framework

This is the Metasploit Framework repository, a comprehensive collection of tools and resources for penetration testing and vulnerability assessment. The repository contains a wide range of modules, including exploits, payloads, and auxiliary tools, which can be used to test and exploit...

ruby:fuzz_json: Crash in json_push_value

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5076715287412736 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7c81c124fa58 Crash State:...

ruby:fuzz_iseq: Crash in ibf_load_small_value

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6647327382372352 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzziseq Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ce9aadffcff Crash State:...

ruby-web-vulnerability-tester

ruby-web-vulnerability-tester 🔎 Ruby Web Application Vulnera...

ruby:fuzz_regex: Crash in rb_gc_impl_realloc

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6534044230942720 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzregex Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x55dafda59008 Crash State:...

RLSA-2025:20962 Important: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: rubygem-rack: Rack QueryParser has an unsafe default allowing paramslimit bypass via semicolon-separated parameters CVE-2025-59830 rack: Rack's unbounded multipart preamble...

ruby:fuzz_prism: Heap-use-after-free in parse_blocklike_parameters

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5052092273459200 Project: ruby Fuzzing Engine: afl Fuzz Target: fuzzprism Job Type: aflasanruby Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x7b242a2e0a20 Crash State:...

ruby:fuzz_prism: Heap-use-after-free in pm_parse

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5439205863129088 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzprism Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x7b977f4e0430 Crash...

ruby:fuzz_prism: Heap-buffer-overflow in parser_lex

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4825645457932288 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzprism Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x758605fe03c0 Crash...

ruby:fuzz_prism: Heap-buffer-overflow in parser_lex

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4643146224173056 Project: ruby Fuzzing Engine: afl Fuzz Target: fuzzprism Job Type: aflasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7a57fd6e06cf Crash State:...

ruby:fuzz_prism: Heap-buffer-overflow in parse_target

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4589954832596992 Project: ruby Fuzzing Engine: afl Fuzz Target: fuzzprism Job Type: aflasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75cd543e12aa Crash State:...