Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: The Open Door: Critical 9.8 Severity Flaw in Harvester Lets Hackers Hijack New Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:43:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bare Metal #Bootstrapping Vulnerability #default credentials #Harvester HCI #information_security #Infrastructure as Code #Kubernetes #Rancher #SSH security #virtualization
Daily CyberSecurity
The Open Door: Critical 9.8 Severity Flaw in Harvester Lets Hackers Hijack New Servers
Harvester, the open-source hyperconverged infrastructure (HCI) solution built on Kubernetes, has hit a critical bug. A new vulnerability, tracked as CVE-2025-62877, exposes a dangerous timing wind…
14 views
Daily Writeups
⤷ Title: CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:18:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_68428 #data exfiltration #Information Disclosure #JavaScript Security #jsPDF #lfi #local file inclusion #Node.js #Patch Alert #Path Traversal #PDF Generation
Daily CyberSecurity
CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
A critical vulnerability has been discovered in jsPDF, one of the most popular JavaScript libraries for generating PDF documents. The flaw, assigned a scorching CVSS score of 9.2, allows attackers…
13 views
Daily Writeups
⤷ Title: Aiohttp Patches Seven Vulnerabilities Including High-Severity DoS Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 02:23:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #aiohttp #Asyncio #CVE_2025_69224 #CVE_2025_69227 #CVE_2025_69228 #Denial of Service #dos #Infinite Loop #infosec #memory exhaustion #Python #request smuggling #web development
Daily CyberSecurity
Aiohttp Patches Seven Vulnerabilities Including High-Severity DoS Risks
Maintainers of aiohttp, the popular asynchronous HTTP client/server framework for Python, have released a sweeping security update addressing seven distinct vulnerabilities. The update, version 3.…
13 views
Daily Writeups
⤷ Title: Apache SIS Patch Blocks XML Attack That Leaks Server Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 02:07:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache SIS #Apache Software Foundation #CVE_2025_68280 #Geospatial Security #GeoTIFF #GML #GPX #Information Disclosure #Java security #Metadata Security #XML Injection #xxe
Daily CyberSecurity
Apache SIS Patch Blocks XML Attack That Leaks Server Files
The Apache Software Foundation has issued a security advisory for the Apache Spatial Information System (SIS), a key Java library used for developing geospatial applications. A newly discovered vu…
14 views
Daily Writeups
⤷ Title: CVE-2025-66518: High-Severity Flaw in Apache Kyuubi Exposes Local Server Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Kyuubi #Apache Software Foundation #CVE_2025_66518 #Data Lake Security #Directory Allow_list #Information Disclosure #Path Traversal #Serverless SQL #Spark SQL #Vulnerability
Daily CyberSecurity
CVE-2025-66518: High-Severity Flaw in Apache Kyuubi Exposes Local Server Files
Apache Kyuubi, the distributed gateway designed to provide secure, serverless SQL access to massive data lakes, has patched a high-severity vulnerability that could allow unauthorized access to th…
12 views
Daily Writeups
⤷ Title: Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:28:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Brian Reilly #CAR Deployment #CFAdmin #ColdFusion Archive #CVE_2025_61808 #rce #Remote Code Execution #Server Security #SMB Share #UNC path #Web Shell
Daily CyberSecurity
Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
Adobe has issued critical updates for its ColdFusion platform after security researcher Brian Reilly uncovered a clever logic flaw that allows authenticated administrators to turn a standard maint…
14 views
Daily Writeups
⤷ Title: MediaTek Kicks Off 2026 with Major Security Overhaul for Mobile Chipsets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:22:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #CVE_2025_20794 #Dimensity #firmware update #IoT security #KeyInstall #MediaTek #memory corruption #modem vulnerabilities #Security Bulletin #Smartphone Security #stack overflow
Daily CyberSecurity
MediaTek Kicks Off 2026 with Major Security Overhaul for Mobile Chipsets
MediaTek has kicked off the new year with a critical security bulletin, releasing patches for a slew of high-severity vulnerabilities affecting dozens of its mobile and IoT chipsets. The January 2…
18 views
Daily Writeups
⤷ Title: macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:17:01 +0000
════════════════════════
⌗ Tags: #Malware #AES_256_CBC #AppleScript #Developer Tools #GlassWorm #Hardware Wallets #KOI Security #Ledger #macOS security #malware #supply chain attack #Trezor #VS Code Extensions
Daily CyberSecurity
macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
The resilient “GlassWorm” threat actor, known for embedding malicious code into Visual Studio Code extensions, has returned with a sophisticated fourth wave of attacks. A new report fr…
13 views
Daily Writeups
⤷ Title: Researcher Details Stack Buffer Overflow Flaw in Net-SNMP snmptrapd with PoC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:12:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_68615 #D4mianWayne #Logic Flaw #Net_SNMP #network_security #PoC #proof_of_concept #rce #Remote Code Execution #SNMP Trap #snmptrapd #Stack Buffer Overflow
Daily CyberSecurity
Researcher Details Stack Buffer Overflow Flaw in Net-SNMP snmptrapd with PoC
A critical vulnerability in the widely used Net-SNMP suite has been uncovered, exposing a dangerous logic flaw that could allow attackers to crash servers or execute arbitrary code. Security resea…
23 views
Daily Writeups
⤷ Title: New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:06:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #accessibility #Apple #AppleScript #CVE_2025_43530 #macOS #macOS Sequoia #macOS Sonoma #macOS Tahoe #Mickey Jin #privacy #TCC Bypass #TOCTOU #Voiceover
Daily CyberSecurity
New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
Apple’s privacy fortress, the Transparency, Consent, and Control (TCC) framework, has been breached once again. Security researcher Mickey Jin (@patch1t) has disclosed a sophisticated new vulnerab…
24 views
Daily Writeups
⤷ Title: The Chromebook Killer Fails: Microsoft to Kill Windows 11 SE in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:01:36 +0000
════════════════════════
⌗ Tags: #Windows #Chromebook #EdTech News 2026 #Education Tech #end_of_life #K_12 IT #Microsoft #School Funding #Windows 10 S Mode #Windows 11 SE
Daily CyberSecurity
The Chromebook Killer Fails: Microsoft to Kill Windows 11 SE in 2026
Microsoft has now confirmed that support for Windows 11 SE will be discontinued at the end of 2026. This operating system, developed as a successor to Windows 10 S mode, was designed primarily for…
26 views
Daily Writeups
⤷ Title: The Recon Mistake 90% of Hackers Make ‍
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:32:03 GMT
════════════════════════
⌗ Tags: #tech #cybersecurity #hacking #programming #bug_bounty
Medium
The Recon Mistake 90% of Hackers Make 😵‍💫
Look, I’m just gonna say it: most hackers suck at recon. 🤷‍♂️
20 views
Daily Writeups
⤷ Title: Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:29:53 GMT
════════════════════════
⌗ Tags: #cors #owasp_top_10 #bug_bounty #misconfiguration #api
Medium
Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration
Free Article Link: Click for free!
14 views
Daily Writeups
⤷ Title: I Stopped Looking for Vulnerabilities and Started Looking for Trust
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:28:15 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #money #hacking #infosec #bug_bounty
Medium
🪤🔑 I Stopped Looking for Vulnerabilities and Started Looking for Trust
Free Link 🎈
12 views
Daily Writeups
⤷ Title: My first bounty from Hackerone | $100 Code Injection on AI bot
════════════════════════
𐀪 Author: StvRoot
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:12:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #programming #technology #artificial_intelligence
Medium
My first bounty from Hackerone | $100 Code Injection on AI bot
Another story time. Eh!
14 views
Daily Writeups
⤷ Title: The Recon Mistake 90% of Hackers Make ‍
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:31:50 GMT
════════════════════════
⌗ Tags: #tech #cybersecurity #hacking #programming #bug_bounty
Medium
The Recon Mistake 90% of Hackers Make 😵‍💫
Look, I’m just gonna say it: most hackers suck at recon. 🤷‍♂️
23 views
Daily Writeups
⤷ Title: (CSP) Common Bypass Techniques fo
════════════════════════
𐀪 Author: Rishav anand
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:30:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #xss_attack #money #hacker #cybersecurity
Medium
(CSP) Common Bypass Techniques fo
What is Content Security Policy (CSP)?
14 views
Daily Writeups
⤷ Title: My first bounty from Hackerone | $100 Code Injection on AI bot
════════════════════════
𐀪 Author: StvRoot
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:11:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #programming #technology #artificial_intelligence
Medium
My first bounty from Hackerone | $100 Code Injection on AI bot
Another story time. Eh!
17 views
Daily Writeups
⤷ Title: Vulnerability Disclosure -Business logic: Application Restriction Bypass @ Zoho Application Control…
════════════════════════
𐀪 Author: Kartik Lalan
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:36:55 GMT
════════════════════════
⌗ Tags: #application_control #zoho #vulnerability #application_security #manageengine
Medium
Vulnerability Disclosure -Business logic: Application Restriction Bypass @ Zoho Application Control…
Status: Open (As on 1-Jun-2025)
19 views
Daily Writeups
⤷ Title: ☕ Master CISSP Domain 4: 40 Coffee Shot Questions (Part 1 of 2)
════════════════════════
𐀪 Author: Pushpak Sharma
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:29:09 GMT
════════════════════════
⌗ Tags: #infosec #cissp #cybersecurity #questions
Medium
☕ Master CISSP Domain 4: 40 Coffee Shot Questions (Part 1 of 2)
Network Security Practice Questions 1-20 with Explanations & Fun Visuals
22 views
Daily Writeups
⤷ Title: From Obfuscated JS to Valid Invite Code: A Real‑World Walkthrough
════════════════════════
𐀪 Author: virexil.null
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:47:34 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #offensive_security #cybersecurity #red_team
Medium
From Obfuscated JS to Valid Invite Code: A Real‑World Walkthrough
A real‑world breakdown of reversing obfuscated JavaScript to extract and generate a hidden invite code.
21 views