MrBruh's Epic Blog

The RCE that AMD wouldn’t fix After being interrupted multiple times by an annoying console window that would pop up periodically on my new gaming PC, I managed to track the offending executable down to AMD’s AutoUpdate software.

All vulnerability reports to MSI are bouncing due to a full mailbox Today I tried to report a critical vulnerability I found in some MSI related software, which hopefully you all will be reading soon enough.

Remote Code Execution Vulnerability in Fooocus Fooocus is the third-most popular open-source AI image generation WebUI on GitHub with 48k stars.

Finding a RCE in my old TP-Link router I was eating lunch one day in late December (2025), and was reading an article by Simone Margaritelli about several TP-Link vulnerabilities he found in his IP Camera.

1.4 Billion user records exposed by insecure Firebase instances in top Android apps TLDR: Out of the top 1.5 Million Android apps on the Play Store, 11,126 were insecure and exposed users’ PII.

1.4 Billion user records exposed by insecure Firebase instances in top Android apps TLDR: Out of the top 1.5 Million Android apps on the Play Store, 11,126 were insecure and exposed users’ PII.

ASUSpicious Flaw - Millions of Users’ Information Exposed Since 2022 Please note that it’s not particularly suspicious, it just made for a good play-on-words title.

One-Click RCE in ASUS’s Preinstalled Driver Software Part Two of the ASUS series is out, read it here.

Note: The name of local company asked very politely to have their name redacted so it has been replaced with KiwiServices as suggested by ChatGPT Pwning a major New Zealand service provider On the evening of the 19th February 2025 I had an itch, an itch to

How I pwned half of America’s fast food chains, simultaneously.

Unplugged Some months ago, I was watching Mental Outlaw’s video talking about the UP Phone.

Dismantling a Shoddy Malware Operation The Discovery I had been made aware of a malware spreading site called obspremium.com.