Collaborate Disseminate
Sentry announced new and enhanced platform capabilities designed to improve developer workflows and productivity by making it easier to find and resolve the issues that really matter, faster. Developers are under pressure to write more code than ever t… Continue reading Sentry enhances platform capabilities to improve developer workflows and productivity
I keep hearing about the XML round trip vulnerability in version 3.2.4 of the Ruby package REXML. I looked into it myself, of course, and it seems to have something to do with parsing an XML document, then putting it back into XML again, a… Continue reading What is an XML round trip vulnerability?
One day after they were uploaded, RubyGems discovered and removed two malicious packages that had been designed to steal cryptocurrency from unsuspecting users by installing a clipboard hijacker, reports Bleeping Computer, citing research by open-sourc… Continue reading RubyGems Catches Two Packages Trying to Steal Cryptocurrency with Clipboard Hijacking
Three separate proof-of-concepts on Bash, Python and Ruby posted to outsmart fix issued last year to remedy pre-auth RCE bug. Continue reading Researcher Publishes Bypass for Patch for vBulletin 0-Day Flaw
Setup info: I don’t believe this is the issue as I regularly update my system. I’ll add one piece of information as an example. If you would really like to the rest then I can add more in later
metasploit v5.0.89-dev
Payload: I used a cu… Continue reading Metasploit: Issue with upgrading a low privilege shell (sessions -u)
Ruby developers beware: a would-be cryptocurrency thief is out to get at your digital wallet, and they’re using typosquatting code to do it. Continue reading Trove of RubyGems malware highlights software supply chain issues
Security researchers from ReversingLabs say they’ve discovered 725 Ruby libraries uploaded on the official RubyGems repository that contained malware meant to hijack users’ clipboards. From a report: The malicious packages were uploaded on RubyGems bet… Continue reading Clipboard Hijacking Malware Found in 725 Ruby Libraries
By Sudais Asif
In the traditional sense, we usually come across typosquatting in the form of attackers creating misspelled domain names…
This is a post from HackRead.com Read the original post: Hackers use typosquatting to trojanize 700 libraries in … Continue reading Hackers use typosquatting to trojanize 700 libraries in Ruby Repository
I am using PentestBox for penetration testing, but couldn’t open Metasploit Framework because it could not find Ruby. See error below:
Continue reading How to install latest version of Ruby on PentestBox? [closed]
With what it takes to make synthetic diamonds – the crushing pressures, the searing temperatures – you’d think similar conditions would be needed for any synthetic gemstone. Apparently not, though, as [NightHawkInLight] reveals his trivially easy method for making synthetic rubies.
Like their gemstone cousin the sapphire, rubies are just …read more
Continue reading A Quick And Easy Recipe For Synthetic Rubies