PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-53844] LabsAI’s EDDI Project Path Traversal

xbow.com | vulnerability | CVE-2024-53844 | #vulnerability-research | #open-source | #path-traversal | #eddi | #cve-2024-53844 | #conversational-ai
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How XBOW autonomously found a path traversal in LabsAI's E.D.D.I. framework (CVE-2024-53844, fixed in 5.4): the /openapi spec led to a backup-import endpoint susceptible to file-system abuse.
CVE
CVE-2024-53844
Published
Collected

Related coverage

vulnerability · horizon3.ai
Apache CVE-2021-41773, CVE-2021-42013
We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis blog posts have…
vulnerability · aikido.dev
Yet another RCE in Gogs, but it's fixed this time!
This vulnerability coverage helps defenders validate exposure and prioritize remediation.
vulnerability · slcyber.io
High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)
The research team releases an open source tool php2shell-scanner which contains a high fidelity scanning mechanism to check for CVE-2026-109618 and CVE-2026-109619 across hosts.
vulnerability · horizon3.ai
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Horizon3 analyzes CVE-2026-106173, a critical FortiSIEM gRPC vulnerability enabling unauthenticated path traversal, arbitrary file writes, and code execution.
vulnerability · horizon3.ai
[CVE-2026-105133] AhsayCBS Deep-Dive: Auth Bypass to RCE
Technical analysis of CVE-2026-105133 and CVE-2026-105134 in AhsayCBS, revealing how authentication bypass and path traversal enable remote code execution.
High · vulnerability · github.com
WordPress Core Unauthenticated Path Traversal to LFI & RCE PoC (CVE-2026-87902)
While remote code execution depends on runtime prerequisites like PEAR, the unauthenticated LFI primitive resides directly in WordPress Core and affects all major branches from 4.7.0 through 7.1.1.
Back