cve-2022-22947

CVE-2022-22947 Poc for CVE-2022-22947 DnsLog When I was writing the PoC for xray, the reverse couldn't receive DNS requests. After debugging for a long time, I decided to write a Python version of the PoC…… python3 poc-cve-2022-22947.py...

xray

Добро пожаловать в xray 👋 Мощный инструмент для оценки безопасности 🏠Документация • ⬇️Скачать xray • ⬇️Скачать xpoc • ⬇️Скачать xapp • 📖Репозиторий плагинов English Version Примечание: серия xray не является открытым исходным кодом, просто скачайте готовый бинарный файл. Репозиторий содержит в...

Solr-SSRF

Solr-SSRF CVE-2021-27905 The repeat package in the Burp file contains specific steps for reproduction. The POC is a detection plugin for Xray...

reapoc

reapoc 오픈소스 PoC 및 취약 대상 저장소. 우리는 다양한 정규화된 PoC와 이를 검증할 취약한 대상을 수집하는 것을 목표로 합니다. 현재 reapoc는 다음 PoC를 지원합니다: pocsploit: 제 새롭고 간단하며 스마트한 PoC 프레임워크입니다. 환영합니다! nuclei: 세계적으로 유명한 yaml 기반 프레임워크 xray: yaml 기반 pocsuite3: python PoC 프레임워크 goby: golang PoC 프레임워크 주제 Log4j CVE 없음, 그러나 중요 No-CVE 통계 전체 CVE|...

super-xray

Super Xray If this project has helped you, you can give it a Star to support the author Introduction xray is an excellent vulnerability scanning tool, but currently only has a command-line version, started via the config.yaml configuration file. In many cases it is not easy to get started with, a...

xray

XRay가 Rust로 재구현되고 더 많은 기능으로 확장되었습니다. 이 저장소는 레거시 코드입니다.https://github.com/evilsocket/legba 를 사용하세요. XRAY XRay는 네트워크 OSINT 수집을 위한 도구로, 정보 수집 및 네트워크 매핑의 초기 작업 중 일부를 자동화하는 것을 목표로 합니다. 어떻게 작동하나요? XRay는 매우 간단한 도구로, 다음과 같이 작동합니다: 1. 워드리스트와 DNS 요청을 사용하여 서브도메인을 무차별 대입합니다. 2. 발견된 각 서브도메인/IP에 대해 Shodan을 사용하...

xray

XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...

CVE-2026-79316

An improper access control vulnerability exists in x-ui 0.3.2. Any authenticated panel user can modify the xray configuration template through the settings interface and trigger a panel restart, causing the xray management gRPC service, which is bound to loopback by default, to be regenerated and...

PT-2026-96260

An improper access control vulnerability exists in x-ui 0.3.2. Any authenticated panel user can modify the xray configuration template through the settings interface and trigger a panel restart, causing the xray management gRPC service, which is bound to loopback by default, to be regenerated and...

CVE-2026-79316

An improper access control vulnerability exists in x-ui 0.3.2. Any authenticated panel user can modify the xray configuration template through the settings interface and trigger a panel restart, causing the xray management gRPC service, which is bound to loopback by default, to be regenerated and...

CVE-2026-79316

An improper access control vulnerability exists in x-ui 0.3.2. Any authenticated panel user can modify the xray configuration template through the settings interface and trigger a panel restart, causing the xray management gRPC service, which is bound to loopback by default, to be regenerated and...

CVE-2026-79316

An improper access control vulnerability exists in x-ui 0.3.2 . An authenticated panel user can modify the xray configuration template via the settings interface and trigger a panel restart. This action causes the xray management gRPC service —which defaults to a loopback binding—to be regenerate...

CVE-2026-79316: Improper Access Control

An improper access control vulnerability exists in x-ui 0.3.2. Any authenticated panel user can modify the xray configuration template through the settings interface and trigger a panel restart, causing the xray management gRPC service, which is bound to loopback by default, to be regenerated and...

GO-2026-6284 3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation in github.com/mhsanaei/3x-ui

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation in github.com/mhsanaei/3x-ui...

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

Summary An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code execution and persistent access as the user running Xray including roo...

GHSA-JM48-M3RR-9HGG 3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

Summary An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code execution and persistent access as the user running Xray including roo...

EUVD-2026-39432

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation...

GO-2026-5601 AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers

AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path in the database import process. An attacker can overwrite arbitrary files on the host by manipulating Xray configuration values stored in the database, potentially leading to code execution and...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path in the database import process. An attacker can overwrite arbitrary files on the host by manipulating Xray configuration values stored in the database, potentially leading to code execution and...