What is known about the 0.0.0.0_Day vulnerability? The original post was published on August 7 by Oligo Security. Last year, this Israeli company released research about ShellTorch vulnerability. This time, another research on local services accessible from the outside.
When a victim visits a malicious website, this site can interact with web services on the victim’s localhost at 0.0.0.0_ using JS. The trick works with Chromium, Firefox, and Safari on MacOS and Linux. This is not cool, browsers should block requests to localhost.
So, let’s say the site interacts with some services on localhost (if any), so what? Well, if the service is poorly written, then this can very potentially lead to RCE. 
For demonstration, the researchers took an exploited in the wild vulnerability in the Ray AI framework (ShadowRay) and attacked the local Ray server through 0.0.0.0_Day. 
So far, it doesn’t look like 0.0.0.0_Day will become a trending vulnerability.
They said that you can draw anything. 
I drew Elevation of Privilege (Local Privilege Escalation) – Linux Kernel (
Detection and monitoring of the AI infrastructure of organizations. To avoid “shadow LLM”.
Cool report by Eran Livne about Patch Management capabilities in Qualys. 
Most speakers focused on other information security topics rather than patch management. I think it would have been possible to select more thematic reports for this event.
Patches that fix this vulnerability 
).
The media 