Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 27 Apr 2023 06:51:16 GMT
———————————————
✏️Title: Bug Bounty Program to test Large Contracts and Await features.
———————————————
📎Link: https://medium.com/p/69eae60834d9
———————————————
Tags: #blockchain #cryptocurrency #vite_labs #bitcoin #bug_bounty

Medium

Bug Bounty Program to test Large Contracts and Await features.

We are excited to announce the Vite bug bounty program for Large Contracts and Await features. As we move towards a more secure and…

11 views08:01

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sat, 29 Apr 2023 15:46:32 GMT
———————————————
✏️Title: Programa Bug Bounty para probar grandes contratos y funciones de espera.
———————————————
📎Link: https://medium.com/p/2bccd7044b7
———————————————
Tags: #await #bug_bounty #vite_labs

Medium

Programa Bug Bounty para probar grandes contratos y funciones de espera.

Programa de recompensas por fallos de Vite

7 views16:00

Daily Writeups

⤷ Title: Millions at Risk: PoC Exploit Releases for Vite Arbitrary File Read Flaw (CVE-2025-30208)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 03:19:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arbitrary File Read #CVE_2025_30208 #Vite #Vite Arbitrary File Read

Daily CyberSecurity

Millions at Risk: PoC Exploit Releases for Vite Arbitrary File Read Flaw (CVE-2025-30208)

Learn about CVE-2025-30208, a vulnerability in Vite that bypasses file access controls and exposes sensitive information.

27 views04:04

Daily Writeups

⤷ Title: Destructive npm Packages Deleting Files, Hijacking Frameworks for 2+ Years
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 23 May 2025 00:25:53 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #data destruction #javascript #malware #npm #React #Supply Chain #Vite #Vue.js

Daily CyberSecurity

Destructive npm Packages Deleting Files, Hijacking Frameworks for 2+ Years

Malicious npm packages have been silently destroying files and corrupting data in React, Vue.js, and Vite projects for over two years.

13 views02:04

Daily Writeups

⤷ Title: Jxscout: Unleash JavaScript’s Hidden Vulnerabilities with This Powerful Analysis Tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 00:44:26 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AST #Burp Suite #Caido #code analysis #JavaScript #jxscout #Penetration Testing #security tool #Source Maps #Vite #Vulnerability Research #Webpack

Penetration Testing Tools

Jxscout: Unleash JavaScript's Hidden Vulnerabilities with This Powerful Analysis Tool

Jxscout is a new tool for security researchers, analyzing JavaScript code for vulnerabilities. It works with proxies like Burp/Caido, offering beautification, source map discovery, and AST analysis.

41 views01:03

Daily Writeups

⤷ Title: Frontend Secrets Exposed: Vite Patches Critical Security Bypass in Dev Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:15:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CVE_2026_39363 #CVE_2026_39364 #cybersecurity #Dev Tools #Frontend Development #HMR #infosec #javascript #Vite #Web Security

Daily CyberSecurity

Frontend Secrets Exposed: Vite Patches Critical Security Bypass in Dev Server

Vite patches critical flaws (CVE-2026-39364 & CVE-2026-39363) allowing arbitrary file reads and .env leaks via WebSockets and query params. Upgrade to 8.0.5!

10 views13:04

Daily Writeups

⤷ Title: 53M Downloads At Risk: Critical 9.8 CVSS Vitest Remote Code Execution Vulnerabilities Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 01:30:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Browser Mode #CVE_2026_47428 #Node.js Security #Open Source Vulnerability #Test Framework Security #Vite #Vitest

Daily CyberSecurity

53M Downloads At Risk: Critical 9.8 CVSS Vitest Remote Code Execution Vulnerabilities Disclosed

Critical 9.8 CVSS flaws trigger Vitest remote code execution risks. Discover how to protect your testing environments and patch these bugs immediately.

7 views03:04

Daily Writeups

⤷ Title: Vitest RCE Vulnerability (CVSS 9.8): Public PoC Disclosed for Testing Tool With 57M Weekly Downloads (CVE-2026-53633)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 02:12:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Browser Mode #CDP #CVE_2026_53633 #npm #rce #Supply Chain #Vite #Vitest

Daily CyberSecurity

Vitest RCE Vulnerability (CVSS 9.8): Public PoC Disclosed for Testing Tool With 57M Weekly Downloads (CVE-2026-53633)

A critical Vitest RCE vulnerability (CVE-2026-53633, CVSS 9.8) has public PoC code. Browser Mode flaw enables config overwrite and remote code execution.

12 views04:04

Daily Writeups

⤷ Title: Vitest Flaw Rated CVSS 9.4 Hits an npm Package With 65 Million Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 02:12:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #GHSA_p63j_vcc4_9vmv #javascript #npm #Path Traversal #Supply Chain Security #Vite #Vitest #Vitest Browser Mode

Daily CyberSecurity

Vitest Flaw Rated CVSS 9.4 Hits an npm Package With 65 Million Weekly Downloads

TL;DR Vitest patched a critical vulnerability rated CVSS 9.4. Browser Mode commands could read, write, or delete files outside the project folder. They did so even when the allowWrite gate was set…

10 views04:03

About

Blog

Apps

Platform