https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 05:36:01 +0000 https://cve.radiocsirt.org/vuln/cve-2018-3779 <p><strong>Affected:</strong> HackerOne active-support ruby gem</p> <p>active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system.</p> <p><strong>Affected:</strong> HackerOne active-support ruby gem</p> <p>active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system.</p> https://cve.radiocsirt.org/vuln/cve-2018-3779 https://cve.radiocsirt.org/vuln/ghsa-2j55-pcw5-x4h2 <p><strong>Affected:</strong> RubyGems: active-support</p> <p>The `active-support` ruby gem gem is malware and duplicates the official `activesupport` (no hyphen) gem, but adds a compiled extension. The extension attempts to resolve a base64 encoded domain (29faea63.planfhntage.de), downloads a payload, and executes. This trojan horse gem could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system. No version of this gem should be considered safe.</p> <p><strong>Affected:</strong> RubyGems: active-support</p> <p>The `active-support` ruby gem gem is malware and duplicates the official `activesupport` (no hyphen) gem, but adds a compiled extension. The extension attempts to resolve a base64 encoded domain (29faea63.planfhntage.de), downloads a payload, and executes. This trojan horse gem could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system. No version of this gem should be considered safe.</p> https://cve.radiocsirt.org/vuln/ghsa-2j55-pcw5-x4h2