Skip to content
OpenAdvisories

Package · Go

github.com/tobychui/zoraxy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2024-52010 Public exploit

    Zoraxy has an authenticated command injection in the Web SSH feature

    Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Zoraxy has a Web SSH terminal feature that allows …

    tobychui zoraxy github.com/tobychui/zoraxy Go