CVE-2026-111771 vulnerabilities

Vulnerabilities for packages: kibana, opensearch-dashboards-fips, opensearch-dashboards, commercial-gitlab-rails-ee-fips...

GHSA-6PRH-2H8M-C8CW vulnerabilities

Vulnerabilities for packages: kibana, opensearch-dashboards-fips, opensearch-dashboards, commercial-gitlab-rails-ee-fips...

GHSA-RVQ5-WWQV-78PQ vulnerabilities

Vulnerabilities for packages: kibana, opensearch-dashboards-fips, opensearch-dashboards, commercial-gitlab-rails-ee-fips...

CVE-2026-112942 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, arangodb, commercial-gitlab-rails-ee-fips, nextcloud-server, gitlab-rails-ce-fips, gitlab-rails-ce, langfuse...

CVE-2026-112943 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, arangodb, commercial-gitlab-rails-ee-fips, nextcloud-server, gitlab-rails-ce-fips, gitlab-rails-ce, langfuse...

CVE-2026-112944 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, arangodb, commercial-gitlab-rails-ee-fips, nextcloud-server, gitlab-rails-ce-fips, gitlab-rails-ce, langfuse...

GHSA-R825-W8MM-5PXW vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, arangodb, commercial-gitlab-rails-ee-fips, nextcloud-server, gitlab-rails-ce-fips, gitlab-rails-ce, langfuse...

GHSA-587H-7WMJ-H5PM vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, arangodb, commercial-gitlab-rails-ee-fips, nextcloud-server, gitlab-rails-ce-fips, gitlab-rails-ce, langfuse...

GHSA-698V-4R3X-3VCV vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, arangodb, commercial-gitlab-rails-ee-fips, nextcloud-server, gitlab-rails-ce-fips, gitlab-rails-ce, langfuse...

CVE-2026-111759 vulnerabilities

Vulnerabilities for packages: vitess, commercial-gitlab-rails-ee-fips, kibana, renovate, gitlab-rails-ce...

GHSA-R7FV-28H4-CVQ7 vulnerabilities

Vulnerabilities for packages: vitess, commercial-gitlab-rails-ee-fips, kibana, renovate, gitlab-rails-ce...

rails-cve-2012-5664-test

Rails CVE-2012-5664 vulnerability demo This demonstration application shows how the Rails CVE-2013-5664 vulnerability works. More information: http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts...

CVE-2019-5420

CVE-2019-5420 PoC A remote code execution vulnerability in development mode Rails 5.2.2.1, 6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code...

name_reverser

== Welcome to Rails Rails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Control pattern. This pattern splits the view also called the presentation into "dumb" templates that are primarily responsible for...

PoC_CVE-2016-2098_Rails42

A PoC of CVE-2016-2098 rails 4.2.5.1 view has a vulnerable code app/views/poc/render1.html.erb following command will cause remote code execution $ curl ':3000/poc/render1?template\inline='...

CVE-2016-2098-my-first-exploit

CVE-2016-2098-my-first-exploit This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. It's written in python3, and remember to install the requests library. here is the command. pip3 install requests...

rails-PoC-CVE-2016-2098

A Proof of Concept of vulnerability: CVE-2016-2098 University project created by @alejandro-marting where we can check the vulnerability 2096 Using: rails 4.2.5.1 view has a vulnerable code app/views/poc/render1.html.erb !...

crack-0.1.8-fixed

= crack Really simple JSON and XML parsing, ripped from Merb and Rails. The XML parser is ripped from Merb and the JSON parser is ripped from Rails. I take no credit, just packaged them for all to enjoy and easily use. == note on releases Releases are tagged on github and also released as gems on...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 Use git clone...

Rails File Content Disclosure

Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...