559 matches found
Ray API - Local File Inclusion
LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. id: CVE-2023-6021 info: name: Ray API - Local File Inclusion author: byt3bl33d3r severity: high description: | LFI in Ray's log API endpoint allows attackers to read any file on the server withou...
Ray Static File - Local File Inclusion
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication. id: CVE-2023-6020 info: name: Ray Static File - Local File Inclusion author: byt3bl33d3r severity: high description: | LFI in Ray's /static/ directory allows attackers to read any file on the...
ShadowRay-RCE-PoC-CVE-2023-48022
PoC per una vulnerabilità di esecuzione remota di comandi nel framework Ray CVE-2023-48022 Questo script di exploit e PoC sono scritti per un'analisi approfondita della CVE su vsociety. Il framework Ray, uno strumento essenziale per applicazioni di intelligenza artificiale e machine learning basa...
Anyscale Ray - Remote Code Execution
Anyscale Ray 2.6.3 and 2.8.0 contain a remote code execution vulnerability due to insecure job submission API, allowing attackers to execute arbitrary code remotely if they have network access to the Ray Dashboard API. id: CVE-2023-48022 info: name: Anyscale Ray - Remote Code Execution author:...
CVE-2025-62593-PoC
CVE-2025-62593 — Ray Remote Code Execution unauthenticated Proof-of-Concept für CVE-2025-62593 , eine nicht authentifizierte Remote-Codeausführung Schwachstelle in der Ray Distributed-AI-Compute-Engine, die über browserbasierte DNS-Rebinding-Angriffe ausgenutzt wird. Sie wurde in den CISA Known...
CVE-2023-6019
حقن أوامر Ray OS RCE غير مصرح به الاستخدام: 1. nc -lvnp 4444 2. python3 cve-2023-6019.py -t 192.168.1.13 -p 80 -L 192.168.1.14 -P 80...
CVE-2023-48022
CVE-2023-48022 Exploit do CVE-2023-48022 modificado a partir do trabalho da Bishop Fox Como usar defina o ip e a porta em jobs.py defina o payload em malicious.py $ pip install ray $ python3 jobs.py...
mcp-xray
MCP X-Ray Übersicht MCP X-Ray ist eine einheitliche Open-Source-Sicherheitsscan- und Penetrationstestlösung für Model Context Protocol MCP-Server. Es erzeugt produktionsreife SARIF-Berichte für die nahtlose Integration in Sicherheitstools und CI/CD-Pipelines. Suchergebnisse können optional auf...
CVE-2023-6019
CVE-2023-6019 - Anyscale Ray Dashboard RCE non autenticata PoC per CVE-2023-6019 — Esecuzione di codice in remoto tramite l'API Jobs della Ray Dashboard non autenticata. Creato da oguiii Descrizione Anyscale Ray è un framework open-source per carichi di lavoro distribuiti di ML/AI. Le versioni...
Presentations
Präsentationen Präsentation| Folien| Video ---|---|--- BlueHat IL 2020 - Trinity: PSP Emulator Escape| 2020-BlueHatIL-Trinity.pdf| https://www.youtube.com/watch?v=J0OQsDTyAL8 Hardwear.io USA 2022 - bd-jb: Blu-ray Disc Java Sandbox Escape| 2022-hardwear-io-bd-jb.pdf|...
Ray-Project Ray Code Injection Vulnerability
Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari...
Metasploit Wrap Up: Lot of summer shells and fit http profiles
This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to...
CVE-2026-28707
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...
EUVD-2026-56524
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...
CVE-2026-28707
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...
CVE-2026-28707
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...
CVE-2026-28707
Summary: CVE-2026-28707 affects some LLM-on-Ray installations prior to version 1.0, where a protection mechanism failure could allow privilege escalation. The vulnerability enables an unprivileged software adversary, when combined with a privileged user and a low-complexity attack, to escalate pr...
WordPress Ray Enterprise Translation plugin <= 1.7.3 - Subscriber+ Language Addition and Deletion vulnerability
Subscriber+ Language Addition and Deletion vulnerability discovered by Akshat Parikh in WordPress Plugin Ray Enterprise Translation versions = 1.7.3...
CVE-2026-57516
A flaw was found in Ray. This unsafe deserialization vulnerability in the WebDataset reader allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted malicious tar archive to the readwebdataset function, an attacker can trigger the unconditional deserializatio...