Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Poisoned Pickle: Critical Unpatched RCE Flaws Expose SGLang AI Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 14:02:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_3059 #CVE_2026_3060 #CVE_2026_3989 #cybersecurity #LLM Security #Pickle Deserialization #Remote Code Execution #SGLang #ZeroMQ
Daily CyberSecurity
The Poisoned Pickle: Critical Unpatched RCE Flaws Expose SGLang AI Infrastructure
Critical 9.8 CVSS unpatched RCE flaws in the SGLang AI framework (CVE-2026-3059 & CVE-2026-3060) expose servers via unsafe Python pickle deserialization.
22 views
Daily Writeups
⤷ Title: Critical 9.8 RCE Threat to SGLang AI Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 13:14:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_5760 #DeepSeek #GGUF #infosec #Jinja2 #LLM Serving #machine_learning #Mistral #rce #SGLang #ssti
Daily CyberSecurity
Critical 9.8 RCE Threat to SGLang AI Infrastructure
SGLang faces a critical 9.8 CVSS RCE flaw (CVE-2026-5760). Malicious GGUF models can hijack AI servers via unsandboxed Jinja2 templates. Learn how to fix it.
6 views
Daily Writeups
⤷ Title: Unpatched SGLang Vulnerabilities (CVE-2026-7301) Expose AI Inference Pipelines to RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:25:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #artificial intelligence #CVE_2026_7301 #CVE_2026_7302 #CVE_2026_7304 #DeepSeek #infosec #Path Traversal #Pickle Deserialization #Remote Code Execution #SGLang #ZeroMQ
Daily CyberSecurity
Unpatched SGLang Vulnerabilities (CVE-2026-7301) Expose AI Inference Pipelines to RCE
CERT/CC warns of unpatched critical flaws in SGLang (CVE-2026-7301) exposing AI inference models to unauthenticated RCE. Restrict your ports now!
21 views
Daily Writeups
⤷ Title: Unpatched SGLang Flaw CVE-2026-14890 Allows Unauthenticated Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 12:58:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Infrastructure #CERT/CC #CVE_2026_14890 #CVE_2026_7301 #CVE_2026_7304 #LLM Security #Pickle Deserialization #Remote Code Execution #SGLang #unpatched #ZeroMQ
Daily CyberSecurity
Unpatched SGLang Flaw CVE-2026-14890 Allows Unauthenticated Remote Code Execution
TL;DR CERT/CC published vulnerability note VU#326070 on July 16, 2026. It details an SGLang vulnerability, CVE-2026-14890, rated CVSS 9.1. An unauthenticated attacker can run code on the host, and…
7 views
Daily Writeups
⤷ Title: SGLang Hit by Six Vulnerabilities, Including Unauthenticated RCE (CVE-2026-15969)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 14:25:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CERT/CC #CVE_2026_15969 #CVE_2026_15976 #LLM Security #Model Weight Exfiltration #Remote Code Execution #SGLang #ssrf #unauthenticated RCE
Daily CyberSecurity
SGLang Hit by Six Vulnerabilities, Including Unauthenticated RCE (CVE-2026-15969)
TL;DR A researcher found six SGLang vulnerabilities, and the worst allow unauthenticated remote code execution. SGLang serves large language models such as DeepSeek and Qwen. CERT/CC published the…
11 views