{"id":119440,"date":"2024-08-13T15:43:13","date_gmt":"2024-08-13T13:43:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-web-brauzerah-pozvolyayushhaya-atakovat-lokalnye-servisy-cherez-ip-0-0-0-0"},"modified":"2024-08-13T15:43:13","modified_gmt":"2024-08-13T13:43:15","slug":"uyazvimost-v-web-brauzerah-pozvolyayushhaya-atakovat-lokalnye-servisy-cherez-ip-0-0-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/uyazvimost-v-web-brauzerah-pozvolyayushhaya-atakovat-lokalnye-servisy-cherez-ip-0-0-0-0","title":{"rendered":"Web brauzerl\u0259rind\u0259ki z\u0259iflik, yerli xidm\u0259tl\u0259r\u0259 0.0.0.0 IP vasit\u0259sil\u0259 h\u00fccum etm\u0259y\u0259 imkan tan\u0131y\u0131r.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Oligo Security \u015firk\u0259ti Chrome, Firefox v\u0259 Safari brauzerl\u0259rind\u0259 yerli sistemd\u0259 yaln\u0131z m\u00f6vcud olan \u015f\u0259b\u0259k\u0259 xidm\u0259tl\u0259rin\u0259 giri\u015f m\u0259hdudiyy\u0259tini a\u015fma\u011fa imkan ver\u0259n bir z\u0259iflik haqq\u0131nda m\u0259lumat yay\u0131b. Z\u0259iflikl\u0259 ba\u011fl\u0131 ilk x\u0259b\u0259rdarl\u0131qlar 18 il \u0259vv\u0259l d\u0259rc edilib, lakin h\u0259l\u0259 d\u0259 problem h\u0259ll olunmay\u0131b. <\/p>\n

Z\u0259iflik yaln\u0131z Linux v\u0259 macOS-da \u00f6z\u00fcn\u00fc g\u00f6st\u0259rir, \u00e7\u00fcnki bu platformalarda 0.0.0.0 IP \u00fcnvan\u0131 lokal \u015f\u0259b\u0259k\u0259 interfeysin\u0259 (localhost) ba\u011fl\u0131d\u0131r, y\u0259ni 0.0.0.0-a g\u00f6nd\u0259ril\u0259n sor\u011fu 127.0.0.1 \u00fcnvan\u0131na sor\u011fu g\u00f6nd\u0259rm\u0259kd\u0259 b\u0259rab\u0259rdir. M\u00fcasir brauzerl\u0259rd\u0259 xarici saytlarla i\u015fl\u0259y\u0259rk\u0259n 127.0.0.1-\u0259 giri\u015f\u0259 qar\u015f\u0131 m\u00fcbariz\u0259 \u00fc\u00e7\u00fcn al\u0259tl\u0259r var, \u00e7\u00fcnki bu, yaln\u0131z lokal t\u0259tbiql\u0259r\u0259 a\u00e7\u0131q olan sistemd\u0259ki daxili xidm\u0259tl\u0259ri manipulyasiya etm\u0259k \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259r. <\/p>\n

Z\u0259iflik 127.0.0.1-\u0259 giri\u015f qada\u011fas\u0131n\u0131 a\u015fma\u011fa v\u0259 h\u00fccum ed\u0259nin n\u0259zar\u0259tind\u0259 olan xarici s\u0259hif\u0259ni \u0431\u0440\u0430\u0443\u0437\u0435\u0440d\u0259 a\u00e7d\u0131qda daxili xidm\u0259tl\u0259r\u0259 h\u00fccum t\u0259\u015fkil etm\u0259y\u0259 imkan verir. 0.0.0.0 vasit\u0259sil\u0259 m\u00fcraci\u0259t edildikd\u0259 CORS (Cross-Origin Resource Sharing) v\u0259 PNA (Private Network Access) mexanizml\u0259ri bel\u0259 bir h\u00fccumun qar\u015f\u0131s\u0131n\u0131 ala bilmir. Problemin g\u00f6r\u00fcnd\u00fcy\u00fc q\u0259d\u0259r ciddi olmad\u0131\u011f\u0131 qeyd edilir v\u0259 art\u0131q ger\u00e7\u0259k h\u00fccumlarda istifad\u0259y\u0259 verilir ki, bu da yaln\u0131z lokal sistem \u00fc\u00e7\u00fcn a\u00e7\u0131q olan server t\u0259tbiql\u0259rind\u0259ki kritik z\u0259iflikl\u0259ri istismar edir.

\"Web\"Web<\/center> <\/p>\n

M\u0259s\u0259l\u0259n, 0.0.0.0-\u0131n lokal xidm\u0259tl\u0259r\u0259 giri\u015f \u00fc\u00e7\u00fcn istifad\u0259si mart v\u0259 iyul ay\u0131nda qeyd\u0259 al\u0131nm\u0131\u015f ShadowRay v\u0259 Selenium Grid h\u00fccumlar\u0131nda a\u015fkar edilib, bunlar kodun inki\u015faf etdiricil\u0259r sisteml\u0259rind\u0259 i\u015f\u0259 sal\u0131nmas\u0131n\u0131 t\u0259\u015fkil etm\u0259k \u00fc\u00e7\u00fcn istifad\u0259 olunub. ShadowRay h\u00fccumu AI \u00e7\u0259r\u00e7iv\u0259si Ray-\u0131 istifad\u0259 ed\u0259n inki\u015faf etdirici sisteml\u0259rini h\u0259d\u0259fl\u0259yirdi. \u0130kinci h\u00fccum is\u0259 yaln\u0131z lokal hostdan g\u0259tiril\u0259n sor\u011fular\u0131 q\u0259bul ed\u0259n Selenium Grid platformas\u0131nda kritik z\u0259ifliyin istismar\u0131na y\u00f6n\u0259lmi\u015fdi. <\/p>\n

\u018flav\u0259 olaraq, ShellTorch z\u0259ifliyinin istismar\u0131 \u00fc\u00e7\u00fcn metodun t\u0259tbiqi imkan\u0131 qeyd edilir sunucusu<\/a> PyTorch TorchServe-d\u0259, bu AI t\u0259tbiql\u0259rinin inki\u015faf etdiricil\u0259rinin komp\u00fcterl\u0259rind\u0259 istifad\u0259 olunur. Lokal hostun \u015f\u0259b\u0259k\u0259 xidm\u0259tl\u0259rin\u0259 giri\u015f, istifad\u0259\u00e7inin dolay\u0131 identifikasiyas\u0131 m\u0259qs\u0259dil\u0259 \u015f\u0259b\u0259k\u0259 portlar\u0131n\u0131 skan etm\u0259k \u00fc\u00e7\u00fcn d\u0259 istifad\u0259 oluna bil\u0259r. <\/p>\n

Firefox inki\u015faf etdiricil\u0259ri Fetch \u00e7a\u011f\u0131r\u0131\u015f\u0131n\u0131n spesifikasiyas\u0131nda 0.0.0.0-a giri\u015fi qada\u011fan ed\u0259n bir d\u0259yi\u015fiklik haz\u0131rlay\u0131blar, lakin browserd\u0259 bloklaman\u0131n n\u0259 zaman ba\u015flayaca\u011f\u0131 h\u0259l\u0259 m\u00fc\u0259yy\u0259n edilm\u0259yib. Chrome-dak\u0131 0.0.0.0-a giri\u015fin bloklanmas\u0131 planla\u015fd\u0131r\u0131l\u0131r, bu da g\u0259l\u0259n h\u0259ft\u0259y\u0259 g\u00f6zl\u0259nil\u0259n Chrome 128 versiyas\u0131nda ger\u00e7\u0259kl\u0259\u015fdiril\u0259c\u0259k. Safari-d\u0259 0.0.0.0-a bloklanma Safari 18 versiyas\u0131nda t\u0259tbiq edil\u0259c\u0259k.
\n
M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Oligo Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Chrome, Firefox \u0438 Safari, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0443 0.0.0.0. \u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0435\u0449\u0451 18 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043d\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":119441,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119440","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Web brauzerl\u0259rind\u0259ki z\u0259iflik, lokal xidm\u0259tl\u0259ri IP 0.0.0.0 vasit\u0259siyl\u0259 h\u00fccum etm\u0259y\u0259 imkan verir | ProHoster","description":"Oligo Security \u015firk\u0259ti Chrome, Firefox v\u0259 Safari brauzerl\u0259rind\u0259 yerli sistemd\u0259 yaln\u0131z m\u00f6vcud olan \u015f\u0259b\u0259k\u0259 xidm\u0259tl\u0259rin\u0259 giri\u015f m\u0259hdudiyy\u0259tini a\u015fma\u011fa imkan ver\u0259n bir z\u0259iflik haqq\u0131nda m\u0259lumat yay\u0131b.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/uyazvimost-v-web-brauzerah-pozvolyayushhaya-atakovat-lokalnye-servisy-cherez-ip-0-0-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0447\u0435\u0440\u0435\u0437 IP 0.0.0.0 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Oligo Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Chrome, Firefox \u0438 Safari, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0435\u0440\u0435\u0437.","og:url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/uyazvimost-v-web-brauzerah-pozvolyayushhaya-atakovat-lokalnye-servisy-cherez-ip-0-0-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-13T13:43:15+00:00","article:modified_time":"2024-08-13T13:43:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119440","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:01:06","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 05:52:19","updated":"2026-02-09 22:01:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/119440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=119440"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/119440\/revisions"}],"predecessor-version":[{"id":160058,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/119440\/revisions\/160058"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media\/119441"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=119440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=119440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=119440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}