Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: Google Cloud Unveils Gemini CLI: Free AI Assistant Brings Gemini 2.5 Pro to Your Terminal
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 02:15:58 +0000
════════════════════════
⌗ Tags: #Technology #AI #artificial intelligence #cli #code generation #command_line #debugging #Developers #Gemini 2.5 Pro #Gemini CLI #Google Cloud #open_source #Tech News
Daily CyberSecurity
Google Cloud Unveils Gemini CLI: Free AI Assistant Brings Gemini 2.5 Pro to Your Terminal
Google Cloud launches Gemini CLI, a free, open-source terminal tool bringing Gemini 2.5 Pro to developers for code generation, debugging, and file manipulation.
13 views
Daily Writeups
⤷ Title: How to Install Gemini CLI on Android using Termux
════════════════════════
𐀪 Author: mh
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 07:08:45 +0000
════════════════════════
⌗ Tags: #LLM #Termux #AI Agent #Android #Gemini CLI
Mobile Hacker
How to Install Gemini CLI on Android using Termux - Mobile Hacker
On June 25, 2025, Google published Gemini CLI is a powerful AI command-line interface agent for interacting with Google’s Gemini models, offering developers and enthusiasts a way to access AI directly from the terminal. It supports up to 60 requests per minute…
53 views
Daily Writeups
⤷ Title: Critical Gemini CLI Flaw: Google’s AI Tool Allowed Silent Code Execution via Prompt Injection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 23:30:41 +0000
════════════════════════
⌗ Tags: #Google #Vulnerability #AI #Command Line Interface #cybersecurity #Gemini CLI #google #Prompt Injection #RCE #remote code execution #Tracebit #vulnerability
Penetration Testing Tools
Critical Gemini CLI Flaw: Google's AI Tool Allowed Silent Code Execution via Prompt Injection
Tracebit uncovered a critical flaw in Google's Gemini CLI (v0.1.14 patch available): it allowed silent code execution and data exfiltration via hidden prompt injections in files like README.md.
16 views
Daily Writeups
⤷ Title: JOTNAR— Autonomous AI-Powered Penetration Testing Framework
════════════════════════
𐀪 Author: Aks
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 03:19:44 GMT
════════════════════════
⌗ Tags: #penetration_testing #jotnar #gemini_cli #ai #agentic_ai_framework
Medium
JOTNAR— Autonomous AI-Powered Penetration Testing Framework
One script. Full control. JOTNAR turns Gemini CLI into an autonomous pentesting partner.
22 views
Daily Writeups
⤷ Title: why AI Security Auditing fails — and how I fixed It
I got tired of false positives.
════════════════════════
𐀪 Author: Mirmahmood
════════════════════════
ⴵ Time: Sat, 11 Apr 2026 10:36:30 GMT
════════════════════════
⌗ Tags: #ai_agent #bug_bounty #cybersecurity #gemini_cli #artificial_intelligence
Medium
why AI Security Auditing fails — and how I fixed It I got tired of false positives.
why AI Security Auditing fails — and how I fixed It I got tired of false positives. Every time I ran a scanner against a codebase, I’d get a wall of findings. Half of them were noise. The …
39 views
Daily Writeups
⤷ Title: Patching the CVSS 10 RCE Hole in Gemini CLI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 03:01:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@google/gemini_cli #AI security #Automation #CI/CD security #CVSS 10 #Gemini CLI #GitHub Actions #infosec #Patch Alert #Prompt injection #rce
28 views
Daily Writeups
⤷ Title: Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 06 May 2026 20:02:52 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Google #Cybersecurity #Gemini CLI #GitHub #Pillar Security #RCE #Technology #Vulnerability
Hackread
Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
Google patches a CVSS 10 Gemini CLI vulnerability that allowed hackers to use prompt injection and privilege escalation for a full supply chain compromise.
28 views
Daily Writeups
⤷ Title: When .. Costs You Everything: A Path Traversal in Gemini CLI's Skill Installer
════════════════════════
𐀪 Author: Farhad Sajid Barbhuiya
════════════════════════
ⴵ Time: Fri, 15 May 2026 12:48:09 GMT
════════════════════════
⌗ Tags: #gemini_cli #cybersecurity #bug_bounty #agents #ai
Medium
When .. Costs You Everything: A Path Traversal in Gemini CLI's Skill Installer
TL;DR — A single missing character in a sanitizer regex allowed a malicious SKILL.md to recursively delete ~/.gemini and replace it with…
17 views
Daily Writeups
⤷ Title: The Quota Crunch: Google Triples Antigravity CLI Allocations After New Limits Spark Developer Outrage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 10:43:14 +0000
════════════════════════
⌗ Tags: #Technology #Anti_Abuse Filtering Engine Regression #Antigravity CLI Gemini Allocation Limits #Antigravity Migration June 2026 #Automated Compute Throttling Bug #Gemini 3.5 Flash Model Quota #Gemini CLI Deprecation #Google AI Studio Integration #Google IO 2026 #Terminal Based AI Coding Agents #Weekly Allocation Reset
Daily CyberSecurity
The Quota Crunch: Google Triples Antigravity CLI Allocations After New Limits Spark Developer Outrage
Google triples developer compute allocations for the new Antigravity CLI after an unannounced usage limit triggered instant throttling bugs and mass outcry.
18 views
Daily Writeups
⤷ Title: Global Malicious AI Installer Campaign Targets Developer Workstations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:37:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Claude Code #developer security #EclecticIQ #Fileless Malware #Gemini CLI #Infostealer Campaign #SEO Poisoning
16 views
Daily Writeups
⤷ Title: Gemini CLI Deprecation: Google Moves Developers to Antigravity CLI
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 04:36:44 +0000
════════════════════════
⌗ Tags: #Technology #Antigravity CLI #Developer Tools #Gemini CLI #Gemini Code Assist #google
Daily CyberSecurity
Gemini CLI Deprecation: Google Moves Developers to Antigravity CLI
Google's Gemini CLI deprecation took effect on June 18, 2026. Personal accounts must now migrate to Antigravity CLI. See who's affected and why.
23 views
Daily Writeups
⤷ Title: Gemini CLI Vulnerability Hits Maximum CVSS 10 Score
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 01:16:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_12537 #Gemini CLI #GitHub Actions #Vulnerability
Daily CyberSecurity
Gemini CLI Vulnerability Hits Maximum CVSS 10 Score
A critical Gemini CLI vulnerability (CVE-2026-12537) exposes developer workflows to maximum severity attacks. Google disclosed this CVSS 10 rating flaw recently. TL;DR A critical Gemini CLI vulner…
26 views
Daily Writeups
⤷ Title: Threat Actor Rebuilt a Live Botnet in Six Minutes Using an AI Coding Agent
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 07:25:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI security #bandcampro #botnet #Gemini CLI #Trend Micro
Daily CyberSecurity
Threat Actor Rebuilt a Live Botnet in Six Minutes Using an AI Coding Agent
At a Glance Actor Russian-speaking solo actor using the handle “bandcampro” Activity type AI-assisted C&C botnet, password attacks, fraud planning Targets Eight PCs at a dental cli…
20 views
Daily Writeups
⤷ Title: AI Sandbox Escape Vulnerabilities Threaten Coding Tools
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 06:47:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #Codex #Cursor #Gemini CLI #Sandbox Escape
Information Security News
AI Sandbox Escape Vulnerabilities Threaten Coding Tools
The Illusion of Isolated Environments As artificial intelligence programming assistants gain unprecedented access to proprietary source code, credential keys, and live execution environments, form…
29 views
Daily Writeups
⤷ Title: Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 01:00:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Coding Agent #AI supply chain #Claude Code #Gemini CLI #Plugin4Shell #SHA pinning #Zero_Click RCE
Daily CyberSecurity
Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents
TL;DR AIR Security disclosed Plugin4Shell, a zero-click remote code execution flaw in four AI coding agents. The bug defeats SHA pinning, the check meant to lock a plugin to reviewed code. Claude …
38 views