Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Unpatch Ollama Flaw: Malicious Model Uploads Can Leak Server Heap Memory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 13:05:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_5757 #GGUF #Go Security #Heap Leak #Information Disclosure #infosec #LLM Security #Ollama #Quantization Engine #zero_day
Daily CyberSecurity
Unpatch Ollama Flaw: Malicious Model Uploads Can Leak Server Heap Memory
A critical unauthenticated remote information disclosure vulnerability has been uncovered in Ollama, the popular open-source tool used to run LLMs on macOS, Windows, and Linux. The flaw, tracked a…
16 views
Daily Writeups
⤷ Title: Patch Now: GnuTLS Release 3.8.13 Fixes 12 Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 13:07:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cryptography #CVE_2026_33846 #DTLS #GnuTLS #Heap Overwrite #infosec #Linux Security #OCSP Revocation #patch management #RSA_PSK #SSL/TLS
Daily CyberSecurity
Patch Now: GnuTLS Release 3.8.13 Fixes 12 Vulnerabilities
GnuTLS v3.8.13 fixes critical heap overwrites, identity truncation, and OCSP bypasses. Secure your Linux comms and upgrade to the latest version now.
45 views
Daily Writeups
⤷ Title: 9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:43:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BDAT #CVE_2026_45185 #Exim #GnuTLS #heap corruption #infosec #Mail Server Security #Patch Now #rce #SMTP CHUNKING #Vulnerability Alert #XBOW
Daily CyberSecurity
9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover
Urgent: Exim fixes a 9.8 severity RCE (CVE-2026-45185) affecting GnuTLS builds. A single-byte heap corruption allows for server takeover. Update to 4.99.3 now!
12 views
Daily Writeups
⤷ Title: Critical 18-Year-Old NGINX RCE (CVE-2026-42945) and GitHub PoC Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 00:20:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42945 #Cyber Security #github #Heap Buffer Overflow #infosec #nginx #NGINX Plus #Patch Alert #PoC #proof_of_concept #rce #Rewrite Module
Daily CyberSecurity
Critical 18-Year-Old NGINX RCE (CVE-2026-42945) and GitHub PoC Disclosed
Security researcher Zhenpeng (Leo) Lin of depthfirst has unveiled a critical, 18-year-old vulnerability lurking within NGINX. The flaw, tracked as CVE-2026-42945 (CVSS 9.2), is a deterministic hea…
15 views
Daily Writeups
⤷ Title: Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 10:13:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42945 #Cyber Security #heap overflow #HTTP/3 #infosec #memory corruption #nginx #NGINX 1.30.1 #Patch Alert #QUIC #rce #Web Server Security
Daily CyberSecurity
Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
NGINX 1.30.1 fixes a 9.2 CVSS RCE flaw (CVE-2026-42945) and five other critical vulnerabilities. Protect your web infrastructure and update immediately!
39 views
Daily Writeups
⤷ Title: NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:51:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Mitigation #CVE_2026_42945 #Denial of Service #F5 Networks #Heap Buffer Overflow #Honeypot Telemetry #NGINX Rift #ngx_http_rewrite_module #Remote Code Execution #VulnCheck
Daily CyberSecurity
NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
Critical 18-year-old "NGINX Rift" flaw CVE-2026-42945 is under active exploitation. Learn how to patch your proxies and block the unauthenticated heap overflow.
13 views
Daily Writeups
⤷ Title: PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:51:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_2005 #database security #Heap Buffer Overflow #infosec #Patch Alert #pgcrypto #PoC Exploit #PostgreSQL #Public Disclosure #rce #Superuser Escalation
Daily CyberSecurity
PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
Technical details and GitHub PoC exploits disclosed for PostgreSQL pgcrypto CVE-2026-2005. Low-privilege users can seize root superuser RCE. Patch now!
11 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 03:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8711 #Denial of Service #F5 Security Advisory #Heap Buffer Overflow #NGINX JavaScript #njs module #Patch Alert #Remote Code Execution #reverse proxy #Web Infrastructure
Daily CyberSecurity
Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
F5 warns of a critical 9.2 CVSS flaw (CVE-2026-8711) in NGINX JavaScript (njs). Unauthenticated attackers can trigger heap overflows and potential RCE.
17 views
Daily Writeups
⤷ Title: Hundreds of Millions Affected: New “nginx-poolslip” Zero-Day Weaponizes ASLR Bypass for Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 02:31:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Bypass #Heap Feng Shui #infosec #memory corruption #Nebula Security #Nginx 1.31.0 #nginx_poolslip #rce #Remote Code Execution #Web Infrastructure #Zero_Day Vulnerability
Daily CyberSecurity
Hundreds of Millions Affected: New "nginx-poolslip" Zero-Day Weaponizes ASLR Bypass for Remote Code Execution
Urgent: Millions affected by "nginx-poolslip," a critical Nginx 1.31.0 zero-day that bypasses ASLR via heap feng shui to grant unauthenticated remote RCE.
14 views
Daily Writeups
⤷ Title: New 7-Zip Heap Buffer Overflow Disclosed with Public PoC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 01:00:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #7_Zip #CVE_2026_48095 #cybersecurity news #Exploit #GHSL #Heap Buffer Overflow #Vulnerability
Daily CyberSecurity
New 7-Zip Heap Buffer Overflow Disclosed with Public PoC
Discover the latest 7-Zip heap buffer overflow vulnerability (CVE-2026-48095). Learn how an NTFS exploit allows code execution and how to stay safe.
13 views