Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: CISA Sound the Alarm: Langflow AI Platform and Trend Micro Added to KEV Catalog Due to Active Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 23:29:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Binding Operational Directive #CISA KEV #Cross_Origin Resource Sharing #CVE_2025_34291 #CVE_2026_34926 #Cyber Security #Directory Traversal #infosec #Langflow #Remote Code Execution #SameSite Cookie #Trend Micro Apex One
Daily CyberSecurity
CISA Sound the Alarm: Langflow AI Platform and Trend Micro Added to KEV Catalog Due to Active Exploitation
CISA updates its KEV Catalog with critical flaws in Langflow (CVE-2025-34291) and Trend Micro Apex One. Federal agencies ordered to patch by June 4, 2026.
10 views
Daily Writeups
⤷ Title: Critical Defect Discovered in Langflow AI Architecture
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 13:18:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_7524 #IBM Security Bulletin #Langflow OSS #Path Traversal #RAG Chatbot Security #Remote Code Execution
Daily CyberSecurity
Critical Defect Discovered in Langflow AI Architecture
A critical Langflow OSS vulnerability (CVE-2026-7524) allows remote code execution. Apply the remote code execution patch to secure your system.
29 views
Daily Writeups
⤷ Title: Critical Langflow RCE Vulnerability Exposes AI Workflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 01:01:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48519 #Langflow #Patch Update #Public Flows #Remote Code Execution
Daily CyberSecurity
Critical Langflow RCE Vulnerability Exposes AI Workflows
A critical Langflow RCE vulnerability impacts the Shareable Playground feature. Learn about the new security patches available.
20 views
Daily Writeups
⤷ Title: Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:00:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI workflow security #API security #CVE_2026_55450 #CWE_306 #CWE_400 #Denial of Service #File Upload Vulnerability #Information Disclosure #Langflow #unauthenticated upload
Daily CyberSecurity
Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)
A critical Langflow file upload flaw (CVE-2026-55450) is public with a PoC, enabling unauthenticated denial-of-service and path disclosure. Patch 1.9.1.
18 views
Daily Writeups
⤷ Title: Critical Langflow Flaws Allow Unauthenticated Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 01:56:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_10561 #CVE_2026_7664 #Langflow #Langflow OSS #rce #unauthenticated RCE
Daily CyberSecurity
Critical Langflow Flaws Allow Unauthenticated Remote Code Execution
A critical Langflow RCE vulnerability (CVE-2026-10561) scores CVSS 10 and enables unauthenticated remote code execution. Upgrade to 1.9.4 now.
9 views
Daily Writeups
⤷ Title: Langflow Security Vulnerabilities Expose AI Systems
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 01:01:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_55255 #CVE_2026_55447 #CVE_2026_55450 #Langflow #rce #Vulnerability
Daily CyberSecurity
Langflow Security Vulnerabilities Expose AI Systems
Three critical Langflow security vulnerabilities (CVE-2026-55255, CVE-2026-55447, CVE-2026-55450) expose AI applications to RCE and DoS attacks. Patch now.
13 views
Daily Writeups
⤷ Title: Langflow Cryptominer Malware Exploits CVE-2026-33017
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 01:00:04 +0000
════════════════════════
⌗ Tags: #Malware #Cryptominer Malware #CVE_2026_33017 #Langflow
Daily CyberSecurity
Langflow Cryptominer Malware Exploits CVE-2026-33017
At least 39 rival malware families appear on a kill list used by a new Langflow cryptominer malware campaign. Threat actors now target exposed artificial intelligence application endpoints to brea…
7 views
Daily Writeups
⤷ Title: Fools guide to illict crypto miners via Langflow RCE exploit
════════════════════════
𐀪 Author: KN
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:25:48 GMT
════════════════════════
⌗ Tags: #langflow #rce_vulnerability #cybersecurity
Medium
Fools guide to illict crypto miners via Langflow RCE exploit
Threat:
32 views
Daily Writeups
⤷ Title: Critical Security Flaws Found in Langflow OSS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 02:13:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_10134 #Langflow #Vulnerabilities
Daily CyberSecurity
Critical Security Flaws Found in Langflow OSS
IBM security researchers discovered six severe Langflow OSS vulnerabilities. These flaws allow attackers to execute arbitrary code, bypass authorizations, and steal sensitive data. Administrators …
20 views
Daily Writeups
⤷ Title: CISA Adds Four Actively Exploited Flaws to Its KEV Catalog
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 01:53:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Actively Exploited #Adobe ColdFusion #CISA #CVE_2026_48282 #CVE_2026_48908 #CVE_2026_56290 #joomla #KEV Catalog #Langflow
Daily CyberSecurity
CISA Adds Four Actively Exploited Flaws to Its KEV Catalog
TL;DR The CISA KEV Catalog just gained four actively exploited flaws. Three of them carry a top CVSS score of 10. Federal agencies must patch all four by July 10, 2026. Why it matters CISA adds bu…
29 views
Daily Writeups
⤷ Title: JADEPUFFER Marks the First AI-Driven Agentic Ransomware Attack
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 06:11:59 +0000
════════════════════════
⌗ Tags: #Malware #agentic ransomware #AI_driven ransomware #CVE_2025_3248 #JADEPUFFER #Langflow #Nacos #ransomware #Sysdig
Daily CyberSecurity
JADEPUFFER Marks the First AI-Driven Agentic Ransomware Attack
At a Glance Malware family JADEPUFFER (agentic ransomware) Threat actor Unnamed operator; Sysdig assesses an autonomous AI agent. Human identity not confirmed. Target / victims One organization&#8…
13 views
Daily Writeups
⤷ Title: CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 16:31:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #CVE_2021_27137 #CVE_2026_0770 #CVE_2026_60137 #CVE_2026_63030 #DD_WRT #Known Exploited Vulnerabilities #Langflow #rce #sql injection #wordpress
Daily CyberSecurity
CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog
TL;DR CISA added four flaws to its KEV catalog on July 21, 2026. The list covers critical WordPress and Langflow bugs plus an older DD-WRT router flaw. CISA lists only bugs with confirmed active e…
18 views
Daily Writeups
⤷ Title: Gafgyt Botnet Hijacks Langflow AI Servers for DDoS Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 07:10:59 +0000
════════════════════════
⌗ Tags: #Malware #Akamai #Bashlite #CVE_2025_3248 #DDoS botnet #Gafgyt #Langflow
Daily CyberSecurity
Gafgyt Botnet Hijacks Langflow AI Servers for DDoS Attacks
At a Glance Malware family Gafgyt / BASHLITE variant (DDoS bot) Threat actor Unattributed; banner references handle “rimasuta” Targets Internet-exposed Langflow AI servers (x86_64 Linu…
11 views
Daily Writeups
⤷ Title: JADEPUFFER AI Ransomware Devastates Corporate Infrastructure
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:00:03 +0000
════════════════════════
⌗ Tags: #Malware #AI Ransomware #cybersecurity #ENCFORGE #JadePuffer #Langflow
Information Security News
JADEPUFFER AI Ransomware Devastates Corporate Infrastructure
Targeting the Crown Jewels of the Digital Age Malicious extortionists increasingly target not merely conventional documents and databases, but rather the most invaluable digital assets within corp…
17 views
Daily Writeups
⤷ Title: Fireflow — HackTheBox Detailed Walkthrough
════════════════════════
𐀪 Author: Beri Contraster
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 17:01:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #langflow #cybersecurity #hackthebox #kubernetes_security
Medium
Fireflow — HackTheBox Detailed Walkthrough
Today we will pwn FireFlow from HackTheBox. It’s a medium-difficulty Linux machine by amra13579.
32 views
Daily Writeups
⤷ Title: Hack The Box — Langflow RCE Write-up
════════════════════════
𐀪 Author: ShivKumar
════════════════════════
ⴵ Time: Sun, 23 Aug 2026 17:24:14 GMT
════════════════════════
⌗ Tags: #web_security #langflow #penetration_testing #rce #hackthebox_writeup
Medium
Hack The Box — Langflow RCE Write-up
1. Introduction
8 views
Daily Writeups
⤷ Title: Langflow Flaw Exploited to Steal OpenAI and AWS Keys
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 11:31:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Credential Theft #CVE_2026_0768 #Langflow #Unauthenticated RCE #VulnCheck
Information Security News
Langflow Flaw Exploited to Steal OpenAI and AWS Keys
Servers for developing AI applications have become vaults of valuable secrets, accessible through a single unprotected request. Attackers have begun exploiting the critical vulnerability CVE-2026-…
28 views
Daily Writeups
⤷ Title: CVE-2026-12944 (CVSS 9.6): Langflow SSRF Flaw Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 01:01:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_12944 #CVE_2026_17628 #Langflow #ssrf #Vulnerability
Daily CyberSecurity
CVE-2026-12944 (CVSS 9.6): Langflow SSRF Flaw Disclosed
IBM X-Force has disclosed two security vulnerabilities in Langflow OSS, including a severe Langflow SSRF flaw. The flaws permit attackers to execute arbitrary code, steal cloud credentials, and by…
23 views
Daily Writeups
⤷ Title: Where Convenience Forgot to Lock the Door
════════════════════════
𐀪 Author: Aditya Patil
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 17:40:15 GMT
════════════════════════
⌗ Tags: #ai_security #langflow #cybersecurity #rce #exploit
Medium
Where Convenience Forgot to Lock the Door
What an unauthenticated RCE in Langflow taught me about hunting bugs in the age of agentic AI
43 views
Daily Writeups
⤷ Title: IBM Patches 25 Langflow Vulnerabilities, Including Two Critical Remote Code Execution Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 01:22:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #CVE_2026_104334 #CVE_2026_93674 #CVE_2026_93675 #IBM #Langflow #Remote Code Execution
Daily CyberSecurity
IBM Patches 25 Langflow Vulnerabilities, Including Two Critical Remote Code Execution Flaws
TL;DR IBM has published a security bulletin covering 25 Langflow vulnerabilities in Langflow OSS versions 1.0.0 through 1.12.2. Two flaws, CVE-2026-104334 and CVE-2026-93674, score 9.8 on CVSS 3.1…
13 views