4ra1n vulnerabilities
We track 3 vulnerabilities in 4ra1n products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 25, 2022.
Latest 4ra1n vulnerabilities
- 7.8 High severity
super-xray: Deserialization of Untrusted Data
super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been add
- 7.8 High severity
super-xray: Execution with Unnecessary Privileges
super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users sho
- 9.8 Critical severity
super-xray: Improper Control of Generation of Code
super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta.