AI Writer

Full Chain Pre-Auth RCE on JFrog Artifactory

by

Author: Edra (edrabb.fr — Bug Bounty, Pentest, CTF) Published: August 9, 2026 Source: https://edrabb.fr/posts/full-chain-preauth-rce-jfrog-artifactory/ Summary Edra documents a five-step, pre-authentication remote code execution chain against JFrog Artifactory that goes from zero credentials to command execution with no prerequisites (no anonymous-access setting, repository, user permission, or license required). The write-up is framed around AI-assisted vulnerability research: … Read more

Hacking Google Support: Leaking millions of customer records ($14k bounty)

by

Author: Michael Dalton Published: March 31, 2026 (reported to Google June 1, 2025) Source: https://michaeldalton.au/posts/hacking-google-support Summary Michael Dalton documents a missing-authorization flaw in Google’s Real-time Support platform (the backend behind Google’s support chat/phone widgets) that exposed large volumes of support-case data. Starting from an API key hardcoded in Google’s client-side support-widget JavaScript, the researcher reached … Read more

StubZero: $148,337 RCE in Google Cloud Production

by

Author: Arvin Shivram (brutecat) Published: May 22, 2026 Source: https://brutecat.com/articles/google-cloud-rce/ Summary Security researcher brutecat (Arvin Shivram) documents two separate vulnerability chains, three months apart, that each reached remote code execution inside Google Cloud’s production environment via the Application Integration platform. Both escalated from information disclosure and cross-tenant access to the ability to run RPCs as … Read more

Decoding Google: Converting a Black Box to a White Box

by

Author: Arvin Shivram (brutecat) Published: November 1, 2024 (with later updates in 2025) Source: https://brutecat.com/articles/decoding-google/ Summary This is a methodology writeup, not a single-vulnerability disclosure. brutecat (Arvin Shivram) documents how to turn Google’s opaque internal APIs into a “white box” for security research: locating machine-readable API discovery documents, understanding how authentication works on the web … Read more

Hacking Google with A.I. for $500,000

by

Author: Arvin Shivram (brutecat) Published: June 11, 2026 Source: https://brutecat.com/articles/hacking-google-with-ai/ Summary Security researcher brutecat (Arvin Shivram) documents a large-scale campaign that used an LLM-driven fuzzing pipeline to systematically probe roughly 1,500 of Google’s internal and external APIs with about 3,600 collected API keys, uncovering a series of access-control, authentication, and data-exposure flaws that earned a … Read more

Apache Struts 2: RestfulActionMapper OGNL Injection Unauthenticated Root RCE

by

Author: 0day Rubbish Research Team (advisory produced by an automated multi-LLM ensemble — the project credits Claude, OpenAI, DeepSeek, and GLM) Published: 2026-08-02 Source: https://0day-rubbish.com/blog/apache-struts2-restful-mapper-ognl-rce Summary An advisory from the 0day Rubbish project reports an unauthenticated remote code execution chain in Apache Struts 2 6.11.0 (and earlier 6.x releases that have not enabled the new … Read more

An HTTP Intercepting Proxy with Chrome DevTools Protocol (CDP)

by

Author: Denis Andzakovic Published: July 29, 2026 Source: https://pulsesecurity.co.nz/articles/glorp-cdp-support Summary Pulse Security’s Denis Andzakovic describes a new logging mode added to Glorp, an open-source HTTP intercepting proxy, that captures browser traffic using the Chrome DevTools Protocol (CDP) instead of a traditional man-in-the-middle setup. Rather than terminating TLS via an HTTP CONNECT tunnel and a trusted … Read more

Apple Screen Sharing Pre-Auth RCE

by

Author: warez.sl0p.foo (advisory autonomously generated and validated by AI coding agents) Published: 2026-08-01 (correction published 2026-08-02) Source: https://warez.sl0p.foo/apple-screensharing-rce/ Summary An advisory published on warez.sl0p.foo describes a pre-authentication flaw in the macOS Screen Sharing daemon (screensharingd) that, according to the authors, allows an unauthenticated network attacker to bypass Secure Remote Password (SRP) authentication and reach the … Read more

Finding six NGINX vulnerabilities with open models

by

Author: Mufeed VH (Co-founder & CEO, Winfunc) Published: July 23, 2026 Source: https://winfunc.com/research/endginx Summary Winfunc ran its autonomous vulnerability-research agent, driven by the open models GLM-5.1 and GLM-5.2 (from Z.AI), against the NGINX source tree. The scan produced six security findings carrying five CVE identifiers: two heap overflows in the HTTP/2 upstream request builders, one … Read more

Cloudflare Zero-day: Accessing Any Host Globally

by

Author: FearsOff (@k_firsov / @FearsOff; no individual byline stated in the article metadata) Published: October 28, 2025 Source: https://fearsoff.org/research/cloudflare-acme Summary FearsOff disclosed a global Cloudflare WAF bypass in which requests to the certificate-validation path /.well-known/acme-challenge/{token} were served by the customer’s origin even when customer and account-level WAF rules were configured to block all traffic. Because … Read more