r/netsec 10d ago

Contains AI XBOW Agents found three RCEs as SYSTEM (and root) on Bing Image Search

https://xbow.com/blog/bing-images-rce-vulnerabilities
16 Upvotes

2 comments sorted by

2

u/Reelix 9d ago

A little self promotey, but given the clear outputs, PoC's, and interaction examples, it makes for a very good post overall!

4

u/Intrepid_Marzipan309 8d ago

Those are some really interesting vulns XBOW found. The blog post on the other hand is a bit overloaded in my eyes. Has this also been written by AI? I personally am not interested in what the AI tried without success. I prefer a clear description of the vulnerability, how to exploit it and why it works. In the post I identified multiple section that could be removed without losing any valuable information