Ruby 4.0 Universal RCE Deserialization Gadget Chain

·Hacker News··

This post releases a new universal chain that turns a single Marshal.load into command execution on Ruby, built with new gadgets from untapped sources as well as old gadgets put to new use.

Read full article →

Related Articles

DeepSeek V4 Pro 0813
explosion-s · Hacker News · 1d ago
Text AI watermarks will always be trivial to remove
pseudolus · Hacker News · 19h ago
How AI text watermarking works
padolsey · Hacker News · 11h ago
Heart aerospace completes first flight of largest electric aircraft
chha · Hacker News · 20h ago
Eclipse: The Xiaomi 17 Ultra Confuses the Moon and the Sun
n_plus_1_acc · Hacker News · 3h ago