Injection and Smuggling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which…CVE-2011-3624Ruby · 1.5% likely

   CWE-74

2. Ruby WEBrick read_header HTTP Request Smuggling VulnerabilityCVE-2025-6442Ruby · CVSS 6.5 · 0.5% likely

   CWE-444

3. net-imap: Command Injection via "raw" arguments to multiple commandsCVE-2026-42257ruby · CVSS 5.8 · 0.4% likely

   CWE-93

4. Net::IMAP: Denial of Service via incomplete raw argument validationCVE-2026-47241ruby · CVSS 2.1 · 0.4% likely

   CWE-162

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.