Ruby 4.0 Universal RCE Deserialization Gadget Chain

·Hacker News··

This post releases a new universal chain that turns a single Marshal.load into command execution on Ruby, built with new gadgets from untapped sources as well as old gadgets put to new use.

Read full article →

Related Articles

Nissan's third generation e-POWER powertrain
mroche · Hacker News · 9h ago
ASML says it sold 'absolutely nothing' in Europe in 2026
MC995 · Hacker News · 2d ago
Revealing the details of how OpenAI agents hacked Hugging Face
specked-citrus · Hacker News · 2d ago
Lunar Terminator Paradox
dima55 · Hacker News · 15h ago
"As a Language Model": Chat Template Switches LLM Self-Referential Voice
yu3zhou4 · Hacker News · 1d ago