Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Critical Pre-Auth RCE: vBulletin Flaw Allows Full Server Compromise (PoC Available)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 26 May 2025 00:50:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #php #PoC #pre_authentication #rce #Remote Code Execution #security #vBulletin
Daily CyberSecurity
Critical Pre-Auth RCE: vBulletin Flaw Allows Full Server Compromise (PoC Available)
A critical pre-authentication RCE vulnerability in vBulletin 5.x and 6.x allows full server compromise. A PoC exploit is available.
22 views
Daily Writeups
⤷ Title: MongoDB Hit by Pre-Auth Denial of Service Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 03:25:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #database #Denial of Service #dos #JSON Parsing #mongodb #nosql #pre_authentication #stack overflow
Daily CyberSecurity
MongoDB Hit by Pre-Auth Denial of Service Vulnerability
MongoDB discloses CVE-2025-6710 (CVSS 7.5), a pre-authentication DoS flaw. Crafted JSON inputs can crash servers via stack overflow.
11 views
Daily Writeups
⤷ Title: Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:45:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ChromaDB #CVE_2026_45829 #Cyber Security #FastAPI #HiddenLayer #Hugging Face #infosec #Machine Learning Security #Pre_Authentication RCE #trust_remote_code #Vector Database
Daily CyberSecurity
Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
Unpatched CVSS 10 flaw (CVE-2026-45829) in ChromaDB allows unauthenticated remote code execution via Hugging Face models. Isolate your servers now!
18 views
Daily Writeups
⤷ Title: ChromaToast Exploit: Unpatched CVSS 10.0 Flaw Grants Pre-Auth RCE in ChromaDB Python Server
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:59:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #ChromaDB CVE_2026_45829 #HiddenLayer ChromaToast Research #Hugging Face Model Hijacking #Pre_Authentication Code Injection #Python FastAPI Server Vulnerability #Rust Implementation Mitigation #Shodan Internet Exposure #trust_remote_code Parameter #Unpatched Remote Code Execution #Vector Database Exploit
Penetration Testing Tools
ChromaToast Exploit: Unpatched CVSS 10.0 Flaw Grants Pre-Auth RCE in ChromaDB Python Server
A critical authentication bypass vulnerability facilitating unauthenticated remote code execution (RCE) has been isolated within the ChromaDB architecture.
23 views
Daily Writeups
⤷ Title: Pre-Auth Stack Buffer Overflow Hits Xlight FTP Server (CVE-2026-67192)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 15:00:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_67191 #CVE_2026_67192 #CVE_2026_67193 #pre_authentication #Xlight FTP Server
Daily CyberSecurity
Pre-Auth Stack Buffer Overflow Hits Xlight FTP Server (CVE-2026-67192)
TL;DR Researchers disclosed three pre-authentication flaws in Xlight FTP Server. The most severe is a Xlight FTP Server flaw, CVE-2026-67192, a stack buffer overflow that may allow remote code exe…
11 views