Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CVE-2025-47411: Critical Apache StreamPipes Flaw Allows Standard Users to Seize Admin Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 03:06:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache StreamPipes #Authentication Bypass #CVE_2025_47411 #Cyber Security #Data Tampering #IIoT Security #Industrial IoT #JWT Manipulation #Open Source Security #privilege escalation
Daily CyberSecurity
CVE-2025-47411: Critical Apache StreamPipes Flaw Allows Standard Users to Seize Admin Control
The Apache Software Foundation has released a critical fix for StreamPipes, its self-service Industrial IoT toolbox designed to let non-technical users analyze complex data streams. A newly disclo…
19 views
Daily Writeups
⤷ Title: “RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:33:19 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CloudSEK #CVE_2025_55182 #IoT security #Next.js #Prototype Pollution #rce #React2Shell #RondoDox #Server Actions #Web Framework Security #XMRig
Daily CyberSecurity
“RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
The RondoDoX botnet has resurfaced with a potent new arsenal, shifting its sights from simple routers to enterprise-grade web frameworks. A new intelligence report from CloudSEK details a sprawlin…
20 views
Daily Writeups
⤷ Title: Cybersecurity Pros Admit to Moonlighting as BlackCat Ransomware Affiliates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:19:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ALPHV #Bitcoin Extortion #BlackCat #Cybercrime #Department of Justice #DigitalMint #Insider Threat #Kevin Martin #ransomware #Ryan Goldberg #Sygnia
Daily CyberSecurity
Cybersecurity Pros Admit to Moonlighting as BlackCat Ransomware Affiliates
Two cybersecurity professionals have admitted to moonlighting as ransomware affiliates, utilizing the very skills designed to protect networks to instead lock them down and extort millions. Ryan G…
17 views
Daily Writeups
⤷ Title: The $2 Billion Bet: Why Meta Just Bought the World’s Fastest-Growing AI Startup
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:10:18 +0000
════════════════════════
⌗ Tags: #Technology #Acquisitions 2025 #AI Agents #Alexandr Wang #Butterfly Effect Technology #Instagram #Manus #Mark Zuckerberg #Meta #Silicon Valley #WhatsApp
Daily CyberSecurity
The $2 Billion Bet: Why Meta Just Bought the World’s Fastest-Growing AI Startup
With 2025 drawing to a close, Meta CEO Mark Zuckerberg’s AI shopping cart is clearly not yet full. Once again, he has demonstrated his formidable “checkbook power” by acquiring Manus, a red-hot AI…
23 views
Daily Writeups
⤷ Title: Bixby’s Revenge: Samsung Pairs with Perplexity AI to Outsmart Google Gemini
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:04:17 +0000
════════════════════════
⌗ Tags: #Android #Technology #AI Assistant #Apple Intelligence #Bixby #CES 2026 #Galaxy S26 #Google Gemini #machine_learning #One UI 8.5 #Perplexity.ai #samsung #Smart Home
Daily CyberSecurity
Bixby’s Revenge: Samsung Pairs with Perplexity AI to Outsmart Google Gemini
At the beginning of this year, Samsung made a bold move in its One UI 7 update by introducing Google Gemini and replacing its own Bixby as the default assistant, briefly making Bixby appear relega…
12 views
Daily Writeups
⤷ Title: The Insider Crisis: How Bribed Outsourced Staff Sold Out Ubisoft’s Crown Jewels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 01:59:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #Data Breach #InfoSec 2025 #Insider Threat #MongoBleed #Outsourcing #R6 Credits #Rainbow Six Siege #Ubisoft #VX_Underground
Daily CyberSecurity
The Insider Crisis: How Bribed Outsourced Staff Sold Out Ubisoft’s Crown Jewels
The security research group vx-underground, active on social media platforms, recently released a series of disclosures concerning attacks against Ubisoft and its Rainbow Six franchise. Because th…
10 views
Daily Writeups
⤷ Title: The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 01:54:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Brian Armstrong #coinbase #crypto scam #Cybersecurity 2025 #Data Breach #Hyderabad Police #India #Insider Threat #social engineering #TaskUs
Daily CyberSecurity
The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal
The U.S.-listed cryptocurrency exchange Coinbase recently announced that Indian police have once again arrested a former employee suspected of accepting bribes in exchange for handing over custome…
11 views
Daily Writeups
⤷ Title: Como participar de um programa de hacker
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 19:51:00 GMT
════════════════════════
⌗ Tags: No_Tags
BugHunt
Como participar de um programa de hacker
Entenda como participar de um programa de hacker de forma legal, conheça os principais modelos e veja como atuar em programas de bug bounty na BugHunt.
9 views
Daily Writeups
⤷ Title: From “Nothing Interesting” to Critical Impact: The Power of Re-Reading Responses ⚠️
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 07:54:49 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #infosec #bug_bounty #cybersecurity #hacking
Medium
From “Nothing Interesting” to Critical Impact: The Power of Re-Reading Responses 🔍⚠️
Hey there!😁
14 views
Daily Writeups
⤷ Title: How I Found a Broken Access Control Flaw: Bypassing Authentication with Extensionless Paths.
════════════════════════
𐀪 Author: DOD cyber solutions
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 07:38:16 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #ethical_hacking #cybersecurity #technology
Medium
How I Found a Broken Access Control Flaw: Bypassing Authentication with Extensionless Paths.
Hi everyone, I’m back with another writeup! 🎉
18 views
Daily Writeups
⤷ Title: Top 20 Shadow IT Discovery Tools for Attack Surface Mapping: Learn How Pros Uncover Hidden Risks
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 07:00:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #penetration_testing #cybersecurity #ethical_hacking
Medium
Top 20 Shadow IT Discovery Tools for Attack Surface Mapping: Learn How Pros Uncover Hidden Risks
Ever tried mapping your company’s attack surface, only to discover a rogue AWS S3 bucket leaking sensitive data to the world? You’re not…
19 views
Daily Writeups
⤷ Title: How I Discovered an SSRF Vulnerability in Ferrari’s System — and Earned a Place in Their Hall of…
════════════════════════
𐀪 Author: Ninadgowda
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 06:54:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #bug_bounty_tips #business #cybersecurity
Medium
How I Discovered an SSRF Vulnerability in Ferrari’s System — and Earned a Place in Their Hall of Fame
by Ninad Gowda
17 views
Daily Writeups
⤷ Title: Hands-On SQL Injection Using Burp Suite: A Beginner’s Walkthrough
════════════════════════
𐀪 Author: CRAC Learning
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 04:16:37 GMT
════════════════════════
⌗ Tags: #vulnerability #security #code #bug_bounty #cybersecurity
Medium
Hands-On SQL Injection Using Burp Suite: A Beginner’s Walkthrough
Author: Indira Paul
9 views
Daily Writeups
⤷ Title: Bypassing a Monthly Secure Message Limit Using a Race Condition
════════════════════════
𐀪 Author: Bavly Zaher
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:05:18 GMT
════════════════════════
⌗ Tags: #web_security #vulnerability #race_condition #bug_bounty #bug_bounty_tips
Medium
Bypassing a Monthly Secure Message Limit Using a Race Condition
Introduction
13 views
Daily Writeups
⤷ Title: Top Bug Bounty Platforms
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 01:48:54 GMT
════════════════════════
⌗ Tags: #platform #bug_bounty #cybersecurity #post #ethical_hacking
Medium
Bug Top Bug Bounty Platforms
The Real Difference Between Getting Paid and Getting Ghosted
12 views
Daily Writeups
⤷ Title: $500 Bounty: How a Magic Login Link Led to Full Account Takeover
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 01:36:55 GMT
════════════════════════
⌗ Tags: #tech #cybersecurity #penetration_testing #bug_bounty #technology
Medium
$500 Bounty: How a Magic Login Link Led to Full Account Takeover
Intercepting Deep Links to Hijack Accounts in the Arrive App
14 views
Daily Writeups
⤷ Title: Sensitive Information Disclosure via Publicly Accessible .user.ini at indrive
════════════════════════
𐀪 Author: Kareem Husein Abdelhameed
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 19:56:18 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurtiy #bug_bounty #bug_triage
Medium
Sensitive Information Disclosure via Publicly Accessible .user.ini at indrive
How a Misconfigured PHP Directive Exposed Internal Server Paths
16 views
Daily Writeups
⤷ Title: Humble Image Security Tracking with Syft & Grype under the hood
════════════════════════
𐀪 Author: Sergei Ovchinnikov
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 20:55:09 GMT
════════════════════════
⌗ Tags: #application_security #automation #helm #security #image_scanning
Medium
Humble Image Security Tracking with Syft & Grype under the hood
Hello everybody! In this article, we want to show a small tool that Ilya(@typecookie) and I built to monitor vulnerabilities in Docker…
32 views
Daily Writeups
⤷ Title: Understanding Access Control Models: DAC, MAC, RBAC, ABAC
════════════════════════
𐀪 Author: Damir Kolobaric
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 19:47:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #authorization #access_control #cloud_security
Medium
Understanding Access Control Models: DAC, MAC, RBAC, ABAC
Managing who gets access to what is central to application security. Access control models provide structured ways to make these decisions…
17 views
Daily Writeups
⤷ Title: Anatomy of a Security Audit: Dissecting JWTs and Sessions for Critical Logic Flaws
════════════════════════
𐀪 Author: Ian Zammit
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 19:15:52 GMT
════════════════════════
⌗ Tags: #ethical_hacking #jwt #application_security #pentesting #web_application_security
Medium
Anatomy of a Security Audit: Dissecting JWTs and Sessions for Critical Logic Flaws
Hi, my name is Ian and I’m an aspiring penetration tester. Like many new to security, I started with labs such as WebGoat and DVWA. They…
16 views
Daily Writeups
⤷ Title: Cyber Threats 2025 → Preparing Pakistan for 2026 | PCSDP Initiative
════════════════════════
𐀪 Author: Pakistan Cyber Security & Digital Forensics
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 07:47:42 GMT
════════════════════════
⌗ Tags: #pakistan #2026 #hacking #cyber_security_awareness #ethical_hacking
Medium
Cyber Threats 2025 → Preparing Pakistan for 2026 | PCSDP Initiative
2025 proved to be one of the most challenging years in global cyber security history. Attackers became faster, smarter and more destructive…
15 views