Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:35:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Infrastructure #CVE_2025_32444 #LLM Security #Mooncake Integration #Open Source Security #Python Pickle #Remote Code Execution #vLLM #ZeroMQ
Daily CyberSecurity
CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure
CVE-2025-32444 exposes vLLM’s Mooncake integration to RCE via insecure pickle deserialization over ZeroMQ. Patch to v0.8.5 now.
18 views
Daily Writeups
⤷ Title: The Poisoned Pickle: Critical Unpatched RCE Flaws Expose SGLang AI Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 14:02:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_3059 #CVE_2026_3060 #CVE_2026_3989 #cybersecurity #LLM Security #Pickle Deserialization #Remote Code Execution #SGLang #ZeroMQ
Daily CyberSecurity
The Poisoned Pickle: Critical Unpatched RCE Flaws Expose SGLang AI Infrastructure
Critical 9.8 CVSS unpatched RCE flaws in the SGLang AI framework (CVE-2026-3059 & CVE-2026-3060) expose servers via unsafe Python pickle deserialization.
22 views
Daily Writeups
⤷ Title: Unpatched SGLang Vulnerabilities (CVE-2026-7301) Expose AI Inference Pipelines to RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:25:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #artificial intelligence #CVE_2026_7301 #CVE_2026_7302 #CVE_2026_7304 #DeepSeek #infosec #Path Traversal #Pickle Deserialization #Remote Code Execution #SGLang #ZeroMQ
Daily CyberSecurity
Unpatched SGLang Vulnerabilities (CVE-2026-7301) Expose AI Inference Pipelines to RCE
CERT/CC warns of unpatched critical flaws in SGLang (CVE-2026-7301) exposing AI inference models to unauthenticated RCE. Restrict your ports now!
21 views
Daily Writeups
⤷ Title: Unpatched SGLang Flaw CVE-2026-14890 Allows Unauthenticated Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 12:58:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Infrastructure #CERT/CC #CVE_2026_14890 #CVE_2026_7301 #CVE_2026_7304 #LLM Security #Pickle Deserialization #Remote Code Execution #SGLang #unpatched #ZeroMQ
Daily CyberSecurity
Unpatched SGLang Flaw CVE-2026-14890 Allows Unauthenticated Remote Code Execution
TL;DR CERT/CC published vulnerability note VU#326070 on July 16, 2026. It details an SGLang vulnerability, CVE-2026-14890, rated CVSS 9.1. An unauthenticated attacker can run code on the host, and…
7 views