Lucas Amorim Rails 5.0.1 - Remote Code Execution
webapps ruby CVE-2020-8163

KouroshRZ GitLab 12.9.0 - Arbitrary File Read
webapps ruby

Ismail Tasdelen Fat Free CRM 0.19.0 - HTML Injection
webapps ruby 80 CVE-2019-10226

Ismail Tasdelen AlchemyCMS 4.1 - Cross-Site Scripting
webapps ruby 80

Ismail Tasdelen CAMALEON CMS 2.4 - Cross-Site Scripting
webapps ruby 80

Metasploit Metasploit Framework - 'msfd' Remote Code Execution (Metasploit)
remote ruby 55554

Metasploit Metasploit Framework - 'msfd' Remote Code Execution (via Browser) (Metasploit)
remote ruby 55554

Etienne Stalmans Ruby < 2.2.8 / < 2.3.5 / < 2.4.2 / < 2.5.0-preview1 - 'NET::Ftp' Command Injection
local ruby CVE-2017-17405

Dhiraj Mishra Metasploit Web UI < 4.14.1-20170828 - Cross-Site Request Forgery
webapps ruby CVE-2017-15084

iblue GitHub Enterprise 2.8.0 < 2.8.6 - Remote Code Execution
webapps ruby

Kaimi GitLab - 'impersonate' Feature Privilege Escalation
webapps ruby 80 CVE-2016-4340

Metasploit Ruby on Rails ActionPack Inline ERB - Code Execution (Metasploit)
remote ruby 80 CVE-2016-2098

David Silveiro Radiant CMS 1.1.3 - Multiple Persistent Cross-Site Scripting Vulnerabilities
webapps ruby 80

Metasploit Ruby on Rails - Development Web Console (v2) Code Execution (Metasploit)
remote ruby 3000

LiquidWorm NationBuilder - Multiple Persistent Cross-Site Scripting Vulnerabilities
webapps ruby 443