Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: n8n Users Urged to Patch CVSS 10.0 Full System Takeover Vulnerability
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 20:02:35 +0000
════════════════════════
⌗ Tags: #Security #Application Security #Cybersecurity #database #n8n #Upwind #Vulnerability
Hackread
n8n Users Urged to Patch CVSS 10.0 Full System Takeover Vulnerability
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
42 views
Daily Writeups
⤷ Title: Password Policy Bypass: Missing Server-Side Validation
════════════════════════
𐀪 Author: Sushil Ram
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 20:51:08 GMT
════════════════════════
⌗ Tags: #web_security #owasp #password_security #bug_bounty #pentesting
37 views
Daily Writeups
⤷ Title: Anatomy of Failure: How One Click Destroys Years of Anonymity
════════════════════════
𐀪 Author: Jayson Morale
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 20:03:50 GMT
════════════════════════
⌗ Tags: #privacy #anonymous #osint #infosec #cybersecurity
Medium
Anatomy of Failure: How One Click Destroys Years of Anonymity
They were careful. Used VPNs, Tor, encrypted messengers. Remained invisible for years. And it all collapsed because of one forgotten…
37 views
Daily Writeups
⤷ Title: MFA Is Not Enough: How MFA Phishing Works in Real Life
════════════════════════
𐀪 Author: Ozkan Sonmez
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 19:56:30 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #infosec #it_security #cybersecurity #phishing
Medium
MFA Is Not Enough: How MFA Phishing Works in Real Life
Multi-factor authentication (MFA) is widely used to protect systems that rely on usernames and passwords. It adds an extra layer of…
36 views
Daily Writeups
⤷ Title: n8n: CVE-2025–68613 | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 21:02:14 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cve_2025_68613 #tryhackme_writeup #tryhackme
Medium
n8n: CVE-2025–68613 | TryHackMe | Walkthrough
Regarding CVE-2025–68613, here is a technical breakdown of the vulnerability, its impact, and how the exploitation works in a real-world…
48 views
Daily Writeups
⤷ Title: When a USB Keyboard Becomes a Root Shell: A Walkthrough of the Exploit
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 23:03:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #badusb #hacking #hardware_hacking #exploit
Medium
When a USB Keyboard Becomes a Root Shell: A Walkthrough of the Exploit
You notice it because the LED flickers wrong.
44 views
Daily Writeups
⤷ Title: Evasive Remote Memory Write
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 22:07:18 GMT
════════════════════════
⌗ Tags: #malware #pentesting #red_team #cybersecurity #hacking
Medium
Evasive Remote Memory Write
Welcome to this new Medium post, in this article, I’ve developed a custom technique for remotely writing arbitrary data (such as a payload…
33 views
Daily Writeups
⤷ Title: Dig Dug TryHackMe Walkthrough
════════════════════════
𐀪 Author: Death Esther
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 22:06:47 GMT
════════════════════════
⌗ Tags: #dns_enumeration #tryhackme_writeup #dig_dug_thm_writeup #tryhackme #tryhackme_walkthrough
Medium
Dig Dug TryHackMe Walkthrough
Introduction
25 views
Daily Writeups
⤷ Title: Critical Centreon Alert: 9.8 Severity Flaw Exposes IT Monitoring
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 01:52:57 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #Centreon #CVE_2025_15026 #CVE_2025_15029 #Infrastructure Security #IT monitoring #sql injection #SysAdmin
Daily CyberSecurity
Critical Centreon Alert: 9.8 Severity Flaw Exposes IT Monitoring
Centreon, a key player in IT infrastructure monitoring, is urging administrators to update their systems immediately following the discovery of two critical vulnerabilities in its AWIE (Applicatio…
24 views
Daily Writeups
⤷ Title: Guloader Malware Rides Wave of Fake Performance Reports
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:27:58 +0000
════════════════════════
⌗ Tags: #Malware #AhnLab ASEC #cybersecurity #GuLoader #Human Resources Scam #Malware Analysis #phishing #Remcos RAT #social engineering
Daily CyberSecurity
Guloader Malware Rides Wave of Fake Performance Reports
Cybercriminals are weaponizing workplace anxiety in a new sophisticated phishing campaign. The AhnLab Security Intelligence Center (ASEC) has issued a warning regarding a malicious operation that …
22 views
Daily Writeups
⤷ Title: The 9.6 Crack in Java’s Foundation: Critical Undertow Flaw CVE-2025-12543
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:22:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Critical Vulnerability #CVE_2025_12543 #host header injection #Java security #JBoss EAP #Undertow #WildFly
Daily CyberSecurity
The 9.6 Crack in Java’s Foundation: Critical Undertow Flaw CVE-2025-12543
A foundational crack has been discovered in the bedrock of the Java web ecosystem. Undertow, the high-performance web server that powers enterprise heavyweights like WildFly and JBoss EAP, has bee…
28 views
Daily Writeups
⤷ Title: NodeCordRAT: The Trojan Hiding in NPM to Steal Crypto via Discord
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:16:11 +0000
════════════════════════
⌗ Tags: #Malware #Cryptocurrency Theft #DevOps Security #Discord C2 #Malware Analysis #NodeCordRAT #npm #supply chain attack #Zscaler ThreatLabz
Daily CyberSecurity
NodeCordRAT: The Trojan Hiding in NPM to Steal Crypto via Discord
The open-source ecosystem has once again been weaponized, this time targeting developers working with cryptocurrency libraries. In a new report released this week, Zscaler ThreatLabz revealed the …
25 views
Daily Writeups
⤷ Title: Wide Open Firewall: Critical Foomuuri Flaws Let Local Users Take Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:11:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_67603 #CVE_2025_67858 #firewall #Foomuuri #Linux Security #nftables #privilege escalation #SUSE
Daily CyberSecurity
Wide Open Firewall: Critical Foomuuri Flaws Let Local Users Take Control
The SUSE Security Team has released a detailed report exposing multiple vulnerabilities in Foomuuri, a popular nftables-based firewall manager for Linux, that left the firewall’s management …
21 views
Daily Writeups
⤷ Title: BlueDelta Espionage: Russian Hackers Abuse Free Apps to Target Energy Sector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:08:34 +0000
════════════════════════
⌗ Tags: #Cyber Security #BlueDelta #Credential Harvesting #cyber_espionage #Energy Sector Security #GRU #phishing #Recorded Future #threat intelligence #Webhook.site
Daily CyberSecurity
BlueDelta Espionage: Russian Hackers Abuse Free Apps to Target Energy Sector
A notorious Russian state-sponsored hacking group has evolved its digital espionage toolkit, launching a sophisticated wave of credential-harvesting attacks targeting energy researchers and govern…
20 views
Daily Writeups
⤷ Title: LockBit 5.0 Sustains Global Ransomware Dominance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:01:30 +0000
════════════════════════
⌗ Tags: #Malware #AhnLab #Cybercrime #Data Leak Site #information_security #LockBit #Malware Analysis #RaaS #ransomware
Daily CyberSecurity
LockBit 5.0 Sustains Global Ransomware Dominance
The hydra of the cybercrime world has grown another head. Since its emergence in late 2019, the LockBit gang has arguably become the most prolific ransomware operator in history. Now, a new analys…
19 views
Daily Writeups
⤷ Title: Guía de Commix: Automatización de OS Command Injection en Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:02:47 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #penetration_testing #cybersecurity #technology
Medium
Guía de Commix: Automatización de OS Command Injection en Bug Bounty
Domina Commix para detectar y explotar vulnerabilidades de OS Command Injection de forma ética en programas de Bug Bounty.
27 views
Daily Writeups
⤷ Title: The Phishing Pond TryHackMe WriteUP
════════════════════════
𐀪 Author: cat0x01
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:54:56 GMT
════════════════════════
⌗ Tags: #phishing #pentesting #ctf #tryhackme #cybersecurity
Medium
The Phishing Pond TryHackMe WriteUP
Phishing attacks are one of the most common and dangerous techniques used by attackers today. Instead of hacking systems directly…
26 views
Daily Writeups
⤷ Title: The $20B Handover: Apple Card Dumps Goldman Sachs for JPMorgan Chase
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 03:46:08 +0000
════════════════════════
⌗ Tags: #Technology #Apple Card #Apple Savings #Apple Wallet #Banking News 2026 #Credit Card #Daily Cash #FinTech #Goldman Sachs #JPMorgan Chase #Mastercard
Daily CyberSecurity
The $20B Handover: Apple Card Dumps Goldman Sachs for JPMorgan Chase
Apple has recently announced a definitive strategic alliance with JPMorgan Chase, the premier financial institution in the United States, which shall assume the mantle as the new issuing bank for …
26 views
Daily Writeups
⤷ Title: Public Exploit Released: Critical Trend Micro Flaw Grants SYSTEM Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 02:19:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_69258 #DLL hijacking #Enterprise Security #Public Exploit #Remote Code Execution (RCE) #SYSTEM privileges #Tenable #Trend Micro Apex Central
Daily CyberSecurity
Public Exploit Released: Critical Trend Micro Flaw Grants SYSTEM Access
Trend Micro has issued a critical security alert for users of Apex Central (on-premise), patching a dangerous remote code execution (RCE) vulnerability that could allow attackers to hijack systems…
28 views
Daily Writeups
⤷ Title: Bluetooth Broken? Apache NimBLE Flaws Enable Spoofing & Eavesdropping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 02:04:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache NimBLE #Bluetooth security #CVE_2025_52435 #CVE_2025_62235 #embedded systems #IoT security #Nordic Semiconductor #Spoofing Attack
Daily CyberSecurity
Bluetooth Broken? Apache NimBLE Flaws Enable Spoofing & Eavesdropping
The Apache Software Foundation has issued urgent patches for Apache NimBLE, the open-source Bluetooth 5.4 stack used to replace proprietary drivers on Nordic chipsets. A cluster of four security v…
24 views
Daily Writeups
⤷ Title: Unleashing the Power of DirBuster: Advanced Recon Techniques for Professional Pentesters
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 02:50:16 GMT
════════════════════════
⌗ Tags: #information_security #security #hacking #reconnaissance #cybersecurity
Medium
Unleashing the Power of DirBuster: Advanced Recon Techniques for Professional Pentesters
Go beyond basic scans — master DirBuster for real-world reconnaissance and red teaming.
34 views