1440 matches found
ablator (>=0.0.1b1, <=0.0.1b3), ablator-ken-test (0.0.1b2) +151 more potentially affected by unknown CVE via ray (>=2.0.0, <=2.41.0)
ray PYPI version =2.0.0, =0.0.1b1, =0.0.1, =0.2.2, =1.1.1, =0.20.5.dev13, =0.20.5.dev13, =0.10.0, =0.3.6, =0.1.11, =0.1.17 - autobiasdetector 0.0.2 - autogenesis 0.0.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-RAY-9055245...
GHSA-XG2H-7CXJ-3GVH Withdrawn Advisory: Command injection in Ray
Withdrawn Advisory This advisory is a duplicate of GHSA-6wgj-66m2-xxp2 / CVE-2023-48022. Original Description An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script...
Withdrawn Advisory: Command injection in Ray
Withdrawn Advisory This advisory is a duplicate of GHSA-6wgj-66m2-xxp2 / CVE-2023-48022. Original Description An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-57000
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-48022. Reason: This candidate is a duplicate of CVE-2023-48022. Notes: All CVE users should reference CVE-2023-48022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
ablator (>=0.0.1b1, <=0.0.1b3), ablator-ken-test (0.0.1b2) +158 more potentially affected by CVE-2025-1979 via ray (>=2.0.0, <=2.42.1)
ray PYPI version =2.0.0, =0.0.1b1, =0.0.1, =0.2.2, =1.1.1, =0.20.5.dev13, =0.20.5.dev13, =0.10.0, =0.3.6, =0.1.11, =0.1.17 - autobiasdetector 0.0.2 - autogenesis 0.0.1 and more Source cves: CVE-2025-1979 Source advisory: SNYK:PYTHON-RAY-8745212...
Insertion of Sensitive Information into Log File
Overview ray is an A system for parallel and distributed Python that unifies the ML ecosystem. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as ...
Number withdrawal
Ray is a unified framework for scaling AI and Python applications open-sourced by ray-project. This CVE number has been withdrawn...
PT-2025-6411
Name of the Vulnerable Software and Affected Versions Anyscale Inc Ray versions 2.9.3 through 2.40.0 Description The issue allows a remote attacker to execute arbitrary code via a crafted script. Recommendations For versions 2.9.3 through 2.40.0, consider disabling the execution of external scrip...
CVE-2024-57000
CVE-2024-57000 is a duplicate of CVE-2023-48022. The connected records tie CVE-2023-48022 to a Ray remote code execution issue via the agent/job submission endpoint (affecting Ray v2.9.3–2.40.0; exploitation is demonstrated by a Metasploit module), with references from Nessus (Ray Dashboard Job R...
OS Command Injection
Ray is vulnerable to Os command Injection. The vulnerability is due to improper input sanitization in the cpuprofile URL parameter, allowing attackers to execute OS commands remotely on the system running the Ray dashboard without authentication...
Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I security vulnerability
The Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I is an entry-level X-ray equipment electronic component from Smiths Detection, UK. A security vulnerability exists in the Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I that originates from the transmission of user credentials in clear text vi...
PT-2024-41104 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: Libdwg affected versions not specified Description: The software contains an index-out-of-bounds issue discovered by OSS-Fuzz. The crash occurs within the dwg decode eed, dwg decode entity, and dwg decode RAY private functions. Recommendation...
libredwg:llvmfuzz: Index-out-of-bounds in dwg_decode_eed
Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4596835821355008 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
cosmic-ray (>=6.1.1, <=8.3.5), fauxpy (>=0.1.0, <=0.7.0) +1 more potentially affected by CVE-2024-53899 via virtualenv (16.7.10)
virtualenv PYPI version 16.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - cosmic-ray =6.1.1, =0.1.0, =0.7.0 - pickley 2.0.14 Source cves: CVE-2024-53899 Source advisory: OSV:PYSEC-2024-187...
Ray Sharp DVR Password Retriever
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ray Sharp DVR Password Retriever', 'Description' = %q This module takes advantage of a protocol design issue with the Ray Sharp based DVR systems...
Ray Static Arbitrary File Read
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ray static arbitrary file read', 'Description' = %q Ray before 2.8.1 is vulnerable to a local file inclusion. , 'Author' = 'byt3bl33d3r ', Python...
Metasploit Weekly Wrap-Up 08/30/2024
A New Way to Encode PHP Payloads A new PHP encoder has been released by a community contributor, jvoisin, allowing a PHP payload to be encoded as an ASCII-Hex string. This can then be decoded on the receiver to prevent issues with unescaped or bad characters. Ray Vulnerabilities This release of...
Ray Agent Job Remote Code Execution Exploit
This Metasploit modules demonstrates remote code execution in Ray via the agent job submission endpoint. This is intended functionality as Ray's main purpose is executing arbitrary workloads. By default Ray has no authentication. This module requires Metasploit: https://metasploit.com/download...