Solr-SSRF

Solr-SSRF CVE-2021-27905 Burp फ़ाइल के repeat पैकेज में प्रतिकृति के विशिष्ट चरण हैं POC Xray का पता लगाने वाला प्लगइन है...

xray

XRay को Rust में पुनः कार्यान्वित किया गया है और अधिक सुविधाओं के साथ विस्तारित किया गया है, यह रिपॉजिटरी LEGACY कोड है।https://github.com/evilsocket/legba का उपयोग करें XRAY XRay नेटवर्क OSINT संग्रह के लिए एक उपकरण है, इसका लक्ष्य सूचना संग्रह और नेटवर्क मैपिंग के कुछ प्रारंभिक कार्यों को...

super-xray

सुपर एक्सरे यदि यह परियोजना आपकी मदद करती है, तो कृपया लेखक का समर्थन करने के लिए Star दबाएं परिचय xray एक उत्कृष्ट भेद्यता स्कैनिंग उपकरण है, लेकिन वर्तमान में केवल कमांड-लाइन संस्करण उपलब्ध है, जो config.yaml कॉन्फ़िगरेशन फ़ाइल के माध्यम से शुरू होता है। कई मामलों में इसका उपयोग करना कठिन होता...

xray

xray में आपका स्वागत है 👋 एक शक्तिशाली सुरक्षा मूल्यांकन उपकरण 🏠 उपयोग दस्तावेज़ • ⬇️ xray डाउनलोड • ⬇️ xpoc डाउनलोड • ⬇️ xapp डाउनलोड • 📖 प्लगइन भंडार अंग्रेज़ी संस्करण नोट: xray श्रृंखला ओपन-सोर्स नहीं है, बस बिल्ड किए गए बाइनरी फ़ाइल को सीधे डाउनलोड करें। रिपॉजिटरी में मुख्य रूप से समुदाय द्वारा...

cve-2022-22947

CVE-2022-22947 Poc لـ CVE-2022-22947 DnsLog عند كتابتي لـ xray الخاصة بـ PoC، لم يستطع الـ reverse استقبال طلبات DNS، وبعد تصحيح الأخطاء لفترة طويلة، قررت كتابة نسخة Python من الـ PoC…… root@kitploit: python3 poc-cve-2022-22947.py...

xray

XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...

GHSA-JM48-M3RR-9HGG 3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

Summary An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code execution and persistent access as the user running Xray including roo...

EUVD-2026-39432

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation...

GO-2026-5601 AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers

AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance in github.com/aws/aws-advanced-go-wrapper/auth-helpers. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

CVE-2026-55477

3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code...

CVE-2026-55477 Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code...

CVE-2026-55477

3X-UI before version 3.3.1 is affected. An authenticated administrator can abuse the database import functionality to write arbitrary files on the host by altering Xray configuration values stored in the database, enabling code execution and persistent access as the Xray process user (including r...

CVE-2026-55477

3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code...

CVE-2026-55477 Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation

3X-UI is a web control panel for managing Xray-core servers. Prior to 3.3.1, an authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code...

PT-2026-52471

Name of the Vulnerable Software and Affected Versions 3X-UI versions prior to 3.3.1 Description An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leverag...

poc_regex

pocregex pocregex: Extract th...

CVE-2026-41173 Unbounded HTTP response body read in OpenTelemetry.Sampler.AWS

The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memory. AWSXRaySamplerClient.DoRequestAsyn...

CVE-2026-41173

The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memory. AWSXRaySamplerClient.DoRequestAsyn...

CVE-2026-41173

OpenTelemetry.Sampler.AWS is affected by an unbounded HTTP response body read in the AWS X-Ray remote sampler prior to 0.1.0-alpha.8. The AWSXRaySamplerClient.DoRequestAsync call reads the entire HTTP response into memory (ReadAsStringAsync) without size limits, enabling an attacker controlling o...

PT-2026-34721

Name of the Vulnerable Software and Affected Versions OpenTelemetry.Sampler.AWS versions prior to 0.1.0-alpha.8 OpenTelemetry.Resources.AWS versions prior to 1.15.1 Description OpenTelemetry.Sampler.AWS and OpenTelemetry.Resources.AWS read unbounded HTTP response bodies from configured endpoints...