3 ms·
The found vulnerabilities are mostly on mruby itself so it's pretty interesting. A lot of PoC are very simple: a = Decimal.new a.initialize a https:/
by dorianm 10y ago
The found vulnerabilities are mostly on mruby itself so it's pretty interesting.
A lot of PoC are very simple:
a = Decimal.new
a.initialize a
https://hackerone.com/reports/185775 https://hackerone.com/reports/185775
A ||= break while break
https://hackerone.com/reports/183356 https://hackerone.com/reports/183356
a = Symbol.new
a.inspect
https://hackerone.com/reports/185957 https://hackerone.com/reports/185957
etc.