PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Ray, Versions 2.6.3, 2.8.0

bishopfox.com | blog | #vulnerability-disclosure | #ai-infrastructure | #ssrf | #input-validation | #missing-authentication | #ray | #anyscale
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox disclosed three Ray vulnerabilities—missing authentication, SSRF and insecure input validation—that can give attackers OS access to cluster nodes; Ray 2.8.1 fixes two, isolation is advised.
Published
Collected

Related coverage

blog · bishopfox.com
Introducing AIMap: Security Testing For AI Agent Infrastructure
AIMap is Bishop Fox's open-source tool for discovering, fingerprinting, scoring, and safely testing exposed AI infrastructure — MCP servers, Ollama, vLLM, LangServe, Gradio, ComfyUI and more.
blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
blog · bishopfox.com
OpenClinic Version 0.8.2 Advisory
Four flaws in OpenClinic 0.8.2: unauthenticated access to patient test results (CVE-2020-28937), RCE via insecure file upload, XSS privilege escalation, and path traversal; no fixed release exists.
blog · portswigger.net
How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.
blog · portswigger.net
Behind the Scenes of Burp AI: How we built it, and what's next
Katie Warren recounts how Burp AI was built: internal AI weeks in 2024, a credit-based infrastructure, and a private trial with 30 testers to validate real value before launch.
blog · portswigger.net
Attacking parameter names
Attacking parameter names instead of values can find bugs that value fuzzing misses, since apps validate values but not names. The post demos SQL injection via arbitrary query string parameters.
Back