| user: | pentestercrab |
| created: | August 11, 2015 |
| karma: | 2.2k |
| 1. | |
| 2. | Ruby Array Pack Bleed(nastystereo.com) |
| 3. | Ruby Array Pack Bleed – Impacts Ruby 1.6.7 to 4.0.0(nastystereo.com) |
| 4. | |
| 5. | Marshal madness: A brief history of Ruby deserialization exploits(blog.trailofbits.com) |
| 6. | |
| 7. | |
| 8. | Escaping Ruby's Gem:SafeMarshal Sandbox(nastystereo.com) |
| 9. | Escaping Ruby's Gem:SafeMarshal Sandbox(nastystereo.com) |
| 10. | |
| 11. | CORS Vulnerabilities in Go: Vulnerable Patterns and Lessons(pentesterlab.com) |
| 12. | Shiny Vulnerabilities in R's Most Popular Web Framework(nastystereo.com) |
| 13. | |
| 14. | Cross-Site Post Requests Without a Content-Type Header – CSRF Attack(nastystereo.com) |
| 15. | |
| 16. | JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review(pentesterlab.com) |
| 17. | Chosen-Prefix Collisions on AES-Like Hashing(eprint.iacr.org) |
| 18. | Ruby 3.4 Universal RCE Deserialization Gadget Chain(nastystereo.com) |
| 19. | Ruby's String Slice is Broken(nastystereo.com) |
| 20. | Evaluate Markdown code blocks within Vim(github.com) |
| 21. | SQL Injection Polyglot Payloads(nastystereo.com) |
| 22. | |
| 23. |