Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: CVE-2025-66518: High-Severity Flaw in Apache Kyuubi Exposes Local Server Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Kyuubi #Apache Software Foundation #CVE_2025_66518 #Data Lake Security #Directory Allow_list #Information Disclosure #Path Traversal #Serverless SQL #Spark SQL #Vulnerability
Daily CyberSecurity
CVE-2025-66518: High-Severity Flaw in Apache Kyuubi Exposes Local Server Files
Apache Kyuubi, the distributed gateway designed to provide secure, serverless SQL access to massive data lakes, has patched a high-severity vulnerability that could allow unauthorized access to th…
12 views
Daily Writeups
⤷ Title: Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:28:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Brian Reilly #CAR Deployment #CFAdmin #ColdFusion Archive #CVE_2025_61808 #rce #Remote Code Execution #Server Security #SMB Share #UNC path #Web Shell
Daily CyberSecurity
Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
Adobe has issued critical updates for its ColdFusion platform after security researcher Brian Reilly uncovered a clever logic flaw that allows authenticated administrators to turn a standard maint…
14 views
Daily Writeups
⤷ Title: MediaTek Kicks Off 2026 with Major Security Overhaul for Mobile Chipsets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:22:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #CVE_2025_20794 #Dimensity #firmware update #IoT security #KeyInstall #MediaTek #memory corruption #modem vulnerabilities #Security Bulletin #Smartphone Security #stack overflow
Daily CyberSecurity
MediaTek Kicks Off 2026 with Major Security Overhaul for Mobile Chipsets
MediaTek has kicked off the new year with a critical security bulletin, releasing patches for a slew of high-severity vulnerabilities affecting dozens of its mobile and IoT chipsets. The January 2…
18 views
Daily Writeups
⤷ Title: macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:17:01 +0000
════════════════════════
⌗ Tags: #Malware #AES_256_CBC #AppleScript #Developer Tools #GlassWorm #Hardware Wallets #KOI Security #Ledger #macOS security #malware #supply chain attack #Trezor #VS Code Extensions
Daily CyberSecurity
macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
The resilient “GlassWorm” threat actor, known for embedding malicious code into Visual Studio Code extensions, has returned with a sophisticated fourth wave of attacks. A new report fr…
13 views
Daily Writeups
⤷ Title: Researcher Details Stack Buffer Overflow Flaw in Net-SNMP snmptrapd with PoC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:12:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_68615 #D4mianWayne #Logic Flaw #Net_SNMP #network_security #PoC #proof_of_concept #rce #Remote Code Execution #SNMP Trap #snmptrapd #Stack Buffer Overflow
Daily CyberSecurity
Researcher Details Stack Buffer Overflow Flaw in Net-SNMP snmptrapd with PoC
A critical vulnerability in the widely used Net-SNMP suite has been uncovered, exposing a dangerous logic flaw that could allow attackers to crash servers or execute arbitrary code. Security resea…
23 views
Daily Writeups
⤷ Title: New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:06:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #accessibility #Apple #AppleScript #CVE_2025_43530 #macOS #macOS Sequoia #macOS Sonoma #macOS Tahoe #Mickey Jin #privacy #TCC Bypass #TOCTOU #Voiceover
Daily CyberSecurity
New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
Apple’s privacy fortress, the Transparency, Consent, and Control (TCC) framework, has been breached once again. Security researcher Mickey Jin (@patch1t) has disclosed a sophisticated new vulnerab…
24 views
Daily Writeups
⤷ Title: The Chromebook Killer Fails: Microsoft to Kill Windows 11 SE in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:01:36 +0000
════════════════════════
⌗ Tags: #Windows #Chromebook #EdTech News 2026 #Education Tech #end_of_life #K_12 IT #Microsoft #School Funding #Windows 10 S Mode #Windows 11 SE
Daily CyberSecurity
The Chromebook Killer Fails: Microsoft to Kill Windows 11 SE in 2026
Microsoft has now confirmed that support for Windows 11 SE will be discontinued at the end of 2026. This operating system, developed as a successor to Windows 10 S mode, was designed primarily for…
26 views
Daily Writeups
⤷ Title: The Recon Mistake 90% of Hackers Make ‍
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:32:03 GMT
════════════════════════
⌗ Tags: #tech #cybersecurity #hacking #programming #bug_bounty
Medium
The Recon Mistake 90% of Hackers Make 😵‍💫
Look, I’m just gonna say it: most hackers suck at recon. 🤷‍♂️
20 views
Daily Writeups
⤷ Title: Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:29:53 GMT
════════════════════════
⌗ Tags: #cors #owasp_top_10 #bug_bounty #misconfiguration #api
Medium
Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration
Free Article Link: Click for free!
14 views
Daily Writeups
⤷ Title: I Stopped Looking for Vulnerabilities and Started Looking for Trust
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:28:15 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #money #hacking #infosec #bug_bounty
Medium
🪤🔑 I Stopped Looking for Vulnerabilities and Started Looking for Trust
Free Link 🎈
12 views
Daily Writeups
⤷ Title: My first bounty from Hackerone | $100 Code Injection on AI bot
════════════════════════
𐀪 Author: StvRoot
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:12:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #programming #technology #artificial_intelligence
Medium
My first bounty from Hackerone | $100 Code Injection on AI bot
Another story time. Eh!
14 views
Daily Writeups
⤷ Title: The Recon Mistake 90% of Hackers Make ‍
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:31:50 GMT
════════════════════════
⌗ Tags: #tech #cybersecurity #hacking #programming #bug_bounty
Medium
The Recon Mistake 90% of Hackers Make 😵‍💫
Look, I’m just gonna say it: most hackers suck at recon. 🤷‍♂️
23 views
Daily Writeups
⤷ Title: (CSP) Common Bypass Techniques fo
════════════════════════
𐀪 Author: Rishav anand
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:30:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #xss_attack #money #hacker #cybersecurity
Medium
(CSP) Common Bypass Techniques fo
What is Content Security Policy (CSP)?
14 views
Daily Writeups
⤷ Title: My first bounty from Hackerone | $100 Code Injection on AI bot
════════════════════════
𐀪 Author: StvRoot
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:11:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #programming #technology #artificial_intelligence
Medium
My first bounty from Hackerone | $100 Code Injection on AI bot
Another story time. Eh!
17 views
Daily Writeups
⤷ Title: Vulnerability Disclosure -Business logic: Application Restriction Bypass @ Zoho Application Control…
════════════════════════
𐀪 Author: Kartik Lalan
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:36:55 GMT
════════════════════════
⌗ Tags: #application_control #zoho #vulnerability #application_security #manageengine
Medium
Vulnerability Disclosure -Business logic: Application Restriction Bypass @ Zoho Application Control…
Status: Open (As on 1-Jun-2025)
19 views
Daily Writeups
⤷ Title: ☕ Master CISSP Domain 4: 40 Coffee Shot Questions (Part 1 of 2)
════════════════════════
𐀪 Author: Pushpak Sharma
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:29:09 GMT
════════════════════════
⌗ Tags: #infosec #cissp #cybersecurity #questions
Medium
☕ Master CISSP Domain 4: 40 Coffee Shot Questions (Part 1 of 2)
Network Security Practice Questions 1-20 with Explanations & Fun Visuals
22 views
Daily Writeups
⤷ Title: From Obfuscated JS to Valid Invite Code: A Real‑World Walkthrough
════════════════════════
𐀪 Author: virexil.null
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:47:34 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #offensive_security #cybersecurity #red_team
Medium
From Obfuscated JS to Valid Invite Code: A Real‑World Walkthrough
A real‑world breakdown of reversing obfuscated JavaScript to extract and generate a hidden invite code.
21 views
Daily Writeups
⤷ Title: Active Directory Basics || TryHackMe Room Walkthrough
════════════════════════
𐀪 Author: Raymond Ebonine
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:31:20 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #active_directory #windows #tryhackme #tryhackme_walkthrough
Medium
Active Directory Basics || TryHackMe Room Walkthrough
This room will introduce the basic concepts and functionality provided by Active Directory.
32 views
Daily Writeups
⤷ Title: Build Core Cyber Defense Skills — Ethical Hacking Foundation Certification
════════════════════════
𐀪 Author: Adhiraj Kasabe
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 05:30:12 GMT
════════════════════════
⌗ Tags: #ethical_hacking_training #ethical_hacking_course #artificial_intelligence #ethical_hacking #ethical_hacking_tools
Medium
Build Core Cyber Defense Skills — Ethical Hacking Foundation Certification
Build Core Cyber Defense Skills — Ethical Hacking Foundation Certification The Ethical Hacking Foundation Certification is targeted at providing the necessary skillset and attitude to the aspirants …
49 views
Daily Writeups
⤷ Title: Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 09:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
41 views
Daily Writeups
⤷ Title: Connex IT Partners with AccuKnox for Zero Trust CNAPP Security in Southeast Asia
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 07:44:17 +0000
════════════════════════
⌗ Tags: #Press Release
Hackread
Connex IT Partners with AccuKnox for Zero Trust CNAPP Security in Southeast Asia
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
35 views