Universal Ruby Gadget Chain Turns a Single Marshal.load Into RCE on 4.0
elttam released a universal gadget chain that turns one Marshal.load into command execution on Ruby 4.0.6, working unchanged back to 3.3. Prior public chains died at 3.4-rc after RubyGems patched their gadgets, so this one builds on new sources and repurposed old gadgets, standard library only.