4ra1n/super-xray

4ra1n/super-xray

Releases17

Frequency1 week 4 days

Last Release about 3 years ago

Stars1.32K

Web漏洞扫描工具XRAY的GUI启动器

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-41958 ↗	Nov 25, 2022Friday, 25 November 2022, 18:15	7.3 HIGH	—
super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit `4d0d5966` and will be included in future releases. Users are advised to upgrade. There are no known workarounds for this issue.
CVE-2022-41950 ↗	Nov 22, 2022Tuesday, 22 November 2022, 18:15	6.4 MEDIUM	—
super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta.
CVE-2022-41945 ↗	Nov 21, 2022Monday, 21 November 2022, 23:15	6.5 MEDIUM	—
super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta.