Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: CVSS 9.8: Backend.AI Critical Flaw Allows Account Takeover via PoC, No Patch Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Jun 2025 00:18:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Backend.AI #container platform #CVE_2025_49653 #cybersecurity #HiddenLayer #HPC #machine_learning #no patch #privilege escalation #proof_of_concept #Vulnerability
Daily CyberSecurity
CVSS 9.8: Backend.AI Critical Flaw Allows Account Takeover via PoC, No Patch Available
A critical CVSS 9.8 flaw (CVE-2025-49653) in Backend.AI allows account takeover via PoC, impacting all versions. Vendor has not issued a patch.
16 views
Daily Writeups
⤷ Title: EchoGram Flaw Bypasses Guardrails in Major LLMs
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 13:20:46 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Security #AI #ChatGPT #Claude #EchoGram #Gemini #GPT_5.1 #Guardrails #HiddenLayer #LLM
Hackread
EchoGram Flaw Bypasses Guardrails in Major LLMs
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
21 views
Daily Writeups
⤷ Title: Top AI Tools for Red Teaming in 2026
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:36:44 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Security #AI #Cybersecurity #Garak #Giskard #HiddenLayer #Novee #Promptfoo #Red Team
Hackread
Top AI Tools for Red Teaming in 2026
AI red teaming pairs human insight with adaptive AI to test model behavior, expose hidden failure modes, and run continuous adversarial checks at scale.
38 views
Daily Writeups
⤷ Title: Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:45:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ChromaDB #CVE_2026_45829 #Cyber Security #FastAPI #HiddenLayer #Hugging Face #infosec #Machine Learning Security #Pre_Authentication RCE #trust_remote_code #Vector Database
Daily CyberSecurity
Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
Unpatched CVSS 10 flaw (CVE-2026-45829) in ChromaDB allows unauthenticated remote code execution via Hugging Face models. Isolate your servers now!
18 views
Daily Writeups
⤷ Title: ChromaToast Exploit: Unpatched CVSS 10.0 Flaw Grants Pre-Auth RCE in ChromaDB Python Server
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:59:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #ChromaDB CVE_2026_45829 #HiddenLayer ChromaToast Research #Hugging Face Model Hijacking #Pre_Authentication Code Injection #Python FastAPI Server Vulnerability #Rust Implementation Mitigation #Shodan Internet Exposure #trust_remote_code Parameter #Unpatched Remote Code Execution #Vector Database Exploit
Penetration Testing Tools
ChromaToast Exploit: Unpatched CVSS 10.0 Flaw Grants Pre-Auth RCE in ChromaDB Python Server
A critical authentication bypass vulnerability facilitating unauthenticated remote code execution (RCE) has been isolated within the ChromaDB architecture.
23 views