fix: 补全 HTTP/TLS proxy stats 加锁，修复 RPC/SMB 解析越界和 POC 加载逻辑

- httpdialer.go/tlsdialer.go: LastError/LastConnectTime/AverageConnectTime 加 mutex
- findnet.go: RPC 响应结束标记位置 < 4 时跳过截断，防止负数切片 panic
- ms17010.go: SMB 会话响应最小长度改为 45，sessionSetupResponse 加长度校验
- web_scan.go: POC 加载失败时不标记 pocLoaded，允许后续重试
- Eval.go: DNSLog 配置去掉 sync.Once，允许多次扫描更新配置

plugins/services/findnet.go

@@ -169,7 +169,9 @@ func (p *FindNetPlugin) performNetworkDiscovery(conn net.Conn) (*NetworkInfo, er
 	// 查找响应结束标记
 	for i := 0; i < len(responseData)-5; i++ {
 		if bytes.Equal(responseData[i:i+6], rpcBuffer3) {
-			responseData = responseData[:i-4]
+			if i >= 4 {
+				responseData = responseData[:i-4]
+			}
 			break
 		}
 	}

plugins/services/ms17010.go

@@ -319,7 +319,7 @@ func (p *MS17010Plugin) checkMS17010Vulnerability(ip string, config *common.Conf
 	}
 
 	n, readErr = conn.Read(reply)
-	if readErr != nil || n < 36 {
+	if readErr != nil || n < 45 {
 		return false, "", fmt.Errorf("SMB会话建立失败")
 	}
 
@@ -330,7 +330,7 @@ func (p *MS17010Plugin) checkMS17010Vulnerability(ip string, config *common.Conf
 	// 提取系统信息
 	var osVersion string
 	sessionSetupResponse := reply[36:n]
-	if wordCount := sessionSetupResponse[0]; wordCount != 0 {
+	if wordCount := sessionSetupResponse[0]; wordCount != 0 && len(sessionSetupResponse) >= 10 {
 		byteCount := binary.LittleEndian.Uint16(sessionSetupResponse[7:9])
 		if n == int(byteCount)+45 {
 			for i := 10; i < len(sessionSetupResponse)-1; i++ {