564 matches found
CVE-2023-6019
CVE-2023-6019 - Anyscale Ray Dashboard RCE no autenticada PoC exploit para CVE-2023-6019 — Ejecución remota de código a través de la API de trabajos del Ray Dashboard sin autenticación. Creado por oguiii Descripción Anyscale Ray es un framework de código abierto para cargas de trabajo distribuida...
Ray API - Local File Inclusion
LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. id: CVE-2023-6021 info: name: Ray API - Local File Inclusion author: byt3bl33d3r severity: high description: | LFI in Ray's log API endpoint allows attackers to read any file on the server withou...
Ray Static File - Local File Inclusion
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. id: CVE-2023-6020 info: name: Ray Static File - Local File Inclusion author: byt3bl33d3r severity: high description: | LFI in Ray's /static/ directory allows attackers to read any file on the...
ShadowRay-RCE-PoC-CVE-2023-48022
Ray框架远程命令执行漏洞PoC CVE-2023-48022 此漏洞利用脚本和PoC是为在vSociety上进行的深入CVE分析而编写。 Ray框架是一个用于Python AI和机器学习应用的重要工具，最近遇到了一个重大的安全挑战。本质上，Ray就像一个瑞士军刀，服务于从事AI和大数据项目的人员。该漏洞被标识为CVE-2023-48022，具体影响作业提交API。官方描述指出，该漏洞允许远程攻击者执行任意代码，对使用这些Ray版本的系统构成重大风险。该漏洞的发现凸显了软件框架中强大安全协议的重要性，特别是那些处理海量数据和计算能力的AI和ML项目。 使用方式 首先，安装Ray：...
mcp-xray
MCP X-Ray 概述 MCP X-Ray 是一个统一的、开源的模型上下文协议（MCP）服务器安全扫描与渗透测试解决方案。它生成可用于生产的 SARIF 报告，以便无缝集成到安全工具和 CI/CD 流水线中。扫描结果可以可选地上传到 Traceforce Atlas 进行集中安全管理和跟踪。Atlas 注册表中包含超过 600 个 MCP，为 MCP 生态系统提供了全面的安全评估数据库。 安装 前提条件 Go 1.25.4 或更高版本 从源码构建 root@kitploit: 克隆仓库 git clone https://github.com/traceforce/mcp-xray c...
Anyscale Ray - Remote Code Execution
Anyscale Ray 2.6.3 and 2.8.0 contain a remote code execution vulnerability due to insecure job submission API, allowing attackers to execute arbitrary code remotely if they have network access to the Ray Dashboard API. id: CVE-2023-48022 info: name: Anyscale Ray - Remote Code Execution author:...
CVE-2023-6019
Inyección de comandos en Ray OS RCE no autorizado Uso: 1. nc -lvnp 4444 2. python3 cve-2023-6019.py -t 192.168.1.13 -p 80 -L 192.168.1.14 -P 80...
CVE-2023-48022
CVE-2023-48022 Exploit de CVE-2023-48022 modificado a partir del trabajo de Bishop Fox Cómo usar establece la ip y el puerto en jobs.py establece el payload en malicious.py $ pip install ray $ python3 jobs.py...
CVE-2025-62593-PoC
CVE-2025-62593 — Ray Ejecución Remota de Código sin autenticación Prueba de concepto para CVE-2025-62593 , una vulnerabilidad de Ejecución Remota de Código sin autenticación en el motor de computación distribuida de IA Ray, explotada mediante ataques de rebinding de DNS basados en navegador. Fue...
CVE-2026-33017
CVE-2025-62593 — Ray Unauthenticated RCE Exploit Overview CVE-2025-62593 is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine. The root cause is the absence of authentication on critical HTTP endpoints /api/jobs, /api/jobagent/jobs. An attacker can...
Presentations
Presentaciones Presentación| Diapositivas| Vídeo ---|---|--- BlueHat IL 2020 - Trinity: Escape del emulador de PSP| 2020-BlueHatIL-Trinity.pdf| https://www.youtube.com/watch?v=J0OQsDTyAL8 Hardwear.io USA 2022 - bd-jb: Escape del sandbox de Java de Blu-ray Disc| 2022-hardwear-io-bd-jb.pdf|...
Exploit for Eval Injection in Langflow
CVE-2025-62593 — Ray Unauthenticated RCE Exploit Overview...
Ray < 2.52.0 Remote Code Execution (CVE-2025-62593)
The Ray Dashboard service running on the remote host is prior to version 2.52.0. It is, therefore, affected by a remote code execution vulnerability: - Ray's browser-based attack protection relies solely on checking that the User-Agent header starts with 'Mozilla'. The Fetch specification allows...
Ray-Project Ray Code Injection Vulnerability
Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari...
Metasploit Wrap Up: Lot of summer shells and fit http profiles
This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to...
CVE-2026-28707
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...
EUVD-2026-56524
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...
CVE-2026-28707
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...
CVE-2026-28707
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...