Threats tagged 'ghsa-559w-6g2v-jh67'

IO::Socket::SSL::SelfCertificate version 1.00 for Perl contains embedded malicious code that executes a Python script from an obfuscated URL. The generate_certificate function runs a Python script saved as a certificate file, which retrieves and executes code from a hardcoded, base64-obfuscated HTTP URL. This allows arbitrary code execution as the user without leaving a dropped script on the host. The malicious payload is located in the sample certificate file cert.pem. This vulnerability is similar to CVE-2026-95831 affecting a related module.