430 matches found
xray
Добро пожаловать в xray 👋 Мощный инструмент для оценки безопасности 🏠Документация • ⬇️Скачать xray • ⬇️Скачать xpoc • ⬇️Скачать xapp • 📖Репозиторий плагинов English Version Примечание: серия xray не является открытым исходным кодом, просто скачайте готовый бинарный файл. Репозиторий содержит в...
cve-2022-22947
CVE-2022-22947 PoC для CVE-2022-22947 DnsLog Когда я писал PoC для xray, reverse не получал DNS-запрос. Долго отлаживал и решил написать PoC на Python…… root@kitploit: python3 poc-cve-2022-22947.py...
Solr-SSRF
Solr-SSRF CVE-2021-27905 В пакете repeat файла Burp содержатся конкретные шаги по воспроизведению POC — это плагин обнаружения Xray...
xray
XRay 已用 Rust 重新实现并扩展了更多功能，此仓库为遗留代码。请使用https://github.com/evilsocket/legba XRAY XRay 是一款用于网络 OSINT 收集的工具，其目标是自动化信息收集和网络映射的一些初始任务。 它如何工作？ XRay 是一个非常简单的工具，其工作方式如下： 1. 它将使用字典和DNS请求暴力破解子域名。 2. 对于每个找到的子域名/IP，它将使用 Shodan 收集开放端口和其他情报。 3. 如果提供了 ViewDNS API 密钥，将收集每个子域名的历史数据。 4. 对于每个唯一的 IP...
xray
XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...
super-xray
Super Xray Если этот проект оказался вам полезен, поставьте Star, чтобы поддержать автора. Введение xray — отличный инструмент для сканирования уязвимостей, но пока доступен только в виде командной строки, запускаемой через конфигурационный файл config.yaml. Во многих случаях он неудобен для...
EUVD-2026-39432
3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation...
GO-2026-5601 AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers
AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
CVE-2026-55477
3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code...
CVE-2026-55477
3X-UI before version 3.3.1 is affected. An authenticated administrator can abuse the database import functionality to write arbitrary files on the host by altering Xray configuration values stored in the database, enabling code execution and persistent access as the Xray process user (including r...
CVE-2026-55477
3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code...
CVE-2026-55477 Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation
3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code...
CVE-2026-55477 Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation
3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code...
PT-2026-52471
Name of the Vulnerable Software and Affected Versions 3X-UI versions prior to 3.3.1 Description An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leverag...
poc_regex
pocregex pocregex: Extract th...
CVE-2026-41173 Unbounded HTTP response body read in OpenTelemetry.Sampler.AWS
The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memory. AWSXRaySamplerClient.DoRequestAsyn...
CVE-2026-41173
The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memory. AWSXRaySamplerClient.DoRequestAsyn...
CVE-2026-41173
OpenTelemetry.Sampler.AWS is affected by an unbounded HTTP response body read in the AWS X-Ray remote sampler prior to 0.1.0-alpha.8. The AWSXRaySamplerClient.DoRequestAsync call reads the entire HTTP response into memory (ReadAsStringAsync) without size limits, enabling an attacker controlling o...
PT-2026-34721
Name of the Vulnerable Software and Affected Versions OpenTelemetry.Sampler.AWS versions prior to 0.1.0-alpha.8 OpenTelemetry.Resources.AWS versions prior to 1.15.1 Description OpenTelemetry.Sampler.AWS and OpenTelemetry.Resources.AWS read unbounded HTTP response bodies from configured endpoints...