Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: What is Service 0x29 in UDS?
════════════════════════
𐀪 Author: Swathi Cl
════════════════════════
ⴵ Time: Sat, 01 Mar 2025 05:08:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #diagnostic #automotive #vehicles #vector
Medium
What is Service 0x29 in UDS?
Service 0x29, or Authentication, is a diagnostic service in the Unified Diagnostic Services (UDS) protocol, defined in ISO 14229–1:2020…
22 views
Daily Writeups
⤷ Title: Critical CVSS 9.8 Flaw Hits Popular LlamaIndex Framework Used by Millions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:37:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #Couchbase #cybersecurity #Data Breach #LlamaIndex #LLM #sql injection #vector store #web application security
Daily CyberSecurity
Critical CVSS 9.8 Flaw Hits Popular LlamaIndex Framework Used by Millions
A critical (CVSS 9.8) SQL injection flaw found in popular LlamaIndex (v0.12.21) allows data manipulation, affecting LLM-powered applications.
20 views
Daily Writeups
⤷ Title: Finding the “Unknown Unknowns” in Cybersecurity
════════════════════════
𐀪 Author: Jeffrey Sam
════════════════════════
ⴵ Time: Mon, 22 Sep 2025 23:08:22 GMT
════════════════════════
⌗ Tags: #vector_embeddings #machine_learning #vector_search #cybersecurity
Medium
Finding the “Unknown Unknowns” in Cybersecurity
The front line of cybersecurity is often a reactive and overwhelming place. Most security operations are focused on real-time attack…
8 views
Daily Writeups
⤷ Title: Critical Authentication Bypass Vulnerability Found in Milvus Proxy (CVE-2025-64513, CVSS 9.3)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 12 Nov 2025 00:16:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Authentication Bypass #Critical Vulnerability #CVE_2025_64513 #Milvus #Vector Database
Daily CyberSecurity
Critical Authentication Bypass Vulnerability Found in Milvus Proxy (CVE-2025-64513, CVSS 9.3)
A Critical (CVSS 9.3) Auth Bypass flaw (CVE-2025-64513) in Milvus Proxy allows unauthenticated attackers to gain full administrative control over the vector database cluster. Update to v2.6.5.
7 views
Daily Writeups
⤷ Title: AWS S3 Unleashed: Native Vector Storage & 50 TB Max Object Size for AI/Big Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 00:06:41 +0000
════════════════════════
⌗ Tags: #Technology #50 TB Object #Amazon S3 Vectors #AWS re:Invent #AWS S3 #big data #Generative AI #Iceberg Tables #RAG #Vector Database
Daily CyberSecurity
AWS S3 Unleashed: Native Vector Storage & 50 TB Max Object Size for AI/Big Data
11 views
Daily Writeups
⤷ Title: AI Data at Risk: Critical Milvus Flaw (CVSS 9.8) Exposes Database via Port 9091
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:06:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Critical Vulnerability #Data Breach #DevOps #machine_learning #Milvus #Patch Alert #Port 9091 #rce #Vector Database
Daily CyberSecurity
AI Data at Risk: Critical Milvus Flaw (CVSS 9.8) Exposes Database via Port 9091
Critical Milvus flaw (CVSS 9.8) exposes port 9091. Unauthenticated attackers can steal secrets & delete data. Update to v2.5.27 or v2.6.10 immediately.
17 views
Daily Writeups
⤷ Title: One Vector to Rule Them All: How Gemini Embedding 2 Unifies Text, Audio, and Video
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 08:16:03 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure 2026 #Audio Embedding #Gemini Embedding 2 #Google DeepMind #Matryoshka Representation Learning #MRL #Multimodal RAG #Semantic Search #Vector Embeddings #Vertex AI
Daily CyberSecurity
One Vector to Rule Them All: How Gemini Embedding 2 Unifies Text, Audio, and Video
Google DeepMind’s Gemini Embedding 2 is here. Map text, images, 120s of video, and native audio into one vector space to revolutionize multimodal RAG and search.
13 views
Daily Writeups
⤷ Title: Bir CMS Kabusu: CVE-2023–27372 ile SPIP Üzerinde Uzaktan Kod Çalıştırma (RCE)
════════════════════════
𐀪 Author: Erdem Ceylan
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 22:40:37 GMT
════════════════════════
⌗ Tags: #hacking #security #vector_a #cve #vuln
Medium
Bir CMS Kabusu: CVE-2023–27372 ile SPIP Üzerinde Uzaktan Kod Çalıştırma (RCE)
Siber güvenlik dünyasında bazı zafiyetler vardır ki, sistemin en temelindeki “güven” ilişkisini suistimal eder. Bugün, popüler içerik…
24 views
Daily Writeups
⤷ Title: Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 02:39:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CosmosDB #CVE_2026_40967 #CVE_2026_40978 #infosec #Java security #Patch Alert #RAG #Spring AI #sql injection #Vector Database
Daily CyberSecurity
Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
Spring AI discloses two critical injection flaws (CVE-2026-40967 & 40978) in Vector Store implementations. Upgrade to v1.0.6 or v1.1.5 now to prevent data leaks.
27 views
Daily Writeups
⤷ Title: Prompt Injection Was Just the Beginning: Real AI Supply Chain Attacks Are Here in 2026
════════════════════════
𐀪 Author: Akansha Shukla
════════════════════════
ⴵ Time: Sun, 10 May 2026 22:07:43 GMT
════════════════════════
⌗ Tags: #vector_database #indirect_prompt_injection #supply_chain_security #api_security #ai_security
Medium
Prompt Injection Was Just the Beginning: Real AI Supply Chain Attacks Are Here in 2026
How indirect prompt injection, vector database poisoning, and agentic trust exploits are reshaping enterprise AI security.
20 views
Daily Writeups
⤷ Title: Beyond Text: How Google Gemini’s New Multimodal RAG Turns Images and PDFs into Actionable Intelligence
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:54:20 +0000
════════════════════════
⌗ Tags: #Technology #AI Development #AI Studio #enterprise AI #File Search #Gemini Embedding 2 #Google Cloud #Google Gemini API #Knowledge Base #Multimodal RAG #PDF Analysis #RAG Workflow #Vector Search
Daily CyberSecurity
Beyond Text: How Google Gemini’s New Multimodal RAG Turns Images and PDFs into Actionable Intelligence
Google Gemini API expands file search with Multimodal RAG. Featuring image-text retrieval, custom metadata, and page-level citations for enterprise AI.
17 views
Daily Writeups
⤷ Title: Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:45:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ChromaDB #CVE_2026_45829 #Cyber Security #FastAPI #HiddenLayer #Hugging Face #infosec #Machine Learning Security #Pre_Authentication RCE #trust_remote_code #Vector Database
Daily CyberSecurity
Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
Unpatched CVSS 10 flaw (CVE-2026-45829) in ChromaDB allows unauthenticated remote code execution via Hugging Face models. Isolate your servers now!
18 views