Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Async Escape: Critical 9.8 Flaw in vm2 Turns JavaScript Sandboxes Into Open Gateways
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:46:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #async/await exploit #CVE_2026_22709 #JavaScript security #Node.js #npm security #Promise sanitization #RCE vulnerability #Sandbox Escape #Tech News #vm2
Penetration Testing Tools
The Async Escape: Critical 9.8 Flaw in vm2 Turns JavaScript Sandboxes Into Open Gateways
A critical sandbox escape vulnerability has been unearthed within the vm2 library—a utility frequently employed as a JavaScript
10 views
Daily Writeups
⤷ Title: Zero-Day Flaw: Why Ivanti’s 9.8-Rated “Bash” Flaws Are a Disaster for Mobile Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:45:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bash injection #CISA KEV #CVE_2026_1281 #CVE_2026_1340 #cybersecurity #EPMM #Ivanti #Mobile Device Management #RCE #WatchTowr #zero_day
Penetration Testing Tools
Zero-Day Flaw: Why Ivanti’s 9.8-Rated "Bash" Flaws Are a Disaster for Mobile Security
Ivanti has disseminated remedial updates addressing two critical zero-day vulnerabilities within its Endpoint Manager Mobile (EPMM) platform. At
12 views
Daily Writeups
⤷ Title: S/MIME Stack Overflow: OpenAI Researchers Uncover “Highly Likely” RCE in GnuPG
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:44:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_24881 #cybersecurity news #GnuPG 2.5.17 #gpg_agent #Gpg4win 5.0.1 #OpenAI Security Research #RCE vulnerability #S/MIME security #stack buffer overflow #T8044
Penetration Testing Tools
S/MIME Stack Overflow: OpenAI Researchers Uncover "Highly Likely" RCE in GnuPG
The GnuPG Project has inaugurated a vital maintenance release, GnuPG 2.5.17, engineered to rectify a critical security deficit
9 views
Daily Writeups
⤷ Title: Automation or Infiltration? The JFrog Discoveries Breaking n8n’s Security Sandboxes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:42:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_0863 #CVE_2026_1470 #JavaScript eval injection #JFrog Security #n8n #Ni8mare #python_task_executor #RCE vulnerability #Sandbox Escape #workflow automation security
Penetration Testing Tools
Automation or Infiltration? The JFrog Discoveries Breaking n8n’s Security Sandboxes
A team of cybersecurity experts has unearthed two critically severe vulnerabilities within the n8n workflow automation platform. Both
12 views
Daily Writeups
⤷ Title: Part 3: From Recon to Critical Impact — Chaining Bugs the Right Way
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:19:36 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #bug_bounty #ethical_hacking #penetration_testing
Medium
Part 3: From Recon to Critical Impact — Chaining Bugs the Right Way
Part 3: From Recon to Critical Impact — Chaining Bugs the Right Way
14 views
Daily Writeups
⤷ Title: Recon for PHP, ASPX, JSP Juicy Endpoints via URLScan Dorking
════════════════════════
𐀪 Author: Abhirup Konwar
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:34:37 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #pentesting #ethical_hacking #reconnaissance
Medium
Recon for PHP, ASPX, JSP Juicy Endpoints via URLScan Dorking
From 10000+ subdomains which one to select in bug bounty hunting ?
16 views
Daily Writeups
⤷ Title: Open Deepseek Database:Wiz Bug Bounty Masterclass Lesson
════════════════════════
𐀪 Author: Jared Douville
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:10:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_masterclass #hacking #red_team #bug_bounty
Medium
Open Deepseek Database:Wiz Bug Bounty Masterclass Lesson
Hey everyone! Today, we’re diving deep into a recent cybersecurity challenge that mirrors a critical real-world vulnerability from January…
18 views
Daily Writeups
⤷ Title: Inside the Global Software Composition Analysis Market: Technology Evolution and Vendor Landscape
════════════════════════
𐀪 Author: Gargiben
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:13:15 GMT
════════════════════════
⌗ Tags: #composition_software #softwaresupplychain #open_source_security #application_security #devsecops
Medium
Inside the Global Software Composition Analysis Market: Technology Evolution and Vendor Landscape
QKS Group’s Software Composition Analysis (SCA) market delivers an in-depth assessment of the global landscape, covering emerging…
22 views
Daily Writeups
⤷ Title: Malware Analysis: Analyzing Smokebot and Pikabot Loaders
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:48:18 GMT
════════════════════════
⌗ Tags: #hacking #cybercrime #malware #malware_analysis #cybersecurity
Medium
Malware Analysis: Analyzing Smokebot and Pikabot Loaders
What is a Loader Malware?
13 views
Daily Writeups
⤷ Title: Understanding Vulnerabilities: A Guide to Modern Cyber Threats and Defense
════════════════════════
𐀪 Author: Khabbab Sarker
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:40:19 GMT
════════════════════════
⌗ Tags: #career_advice #soc_analyst #software_engineering #infosec #hacking
Medium
Understanding Vulnerabilities: A Guide to Modern Cyber Threats and Defense
In the world of cybersecurity, the battle between attackers and defenders is a constant race against time. Every piece of software, from…
13 views
Daily Writeups
⤷ Title: Data Poisoning Attacks: How Hackers Manipulate AI Models
════════════════════════
𐀪 Author: Majidbasharat
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:33:14 GMT
════════════════════════
⌗ Tags: #ai #data #hacking #cybersecurity #data_poisoning
Medium
Data Poisoning Attacks: How Hackers Manipulate AI Models
Artificial Intelligence (AI) systems are only as trustworthy as the data used to train them. As organizations increasingly rely on machine…
11 views
Daily Writeups
⤷ Title: Engineering Database Activity Monitoring (DAM) | From Bare-Metal Linux to AWS RDS — EPISODE 3
════════════════════════
𐀪 Author: Vijenex
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:19:53 GMT
════════════════════════
⌗ Tags: #vijenex #dam #database_security #information_security #hacking
Medium
Engineering Database Activity Monitoring (DAM) | From Bare-Metal Linux to AWS RDS — EPISODE 3
🚨 Detection, Attacks, Telemetry, and Forensics 🚨
9 views
Daily Writeups
⤷ Title: Engineering Database Activity Monitoring (DAM) | From Bare-Metal Linux to AWS RDS — EPISODE 3
════════════════════════
𐀪 Author: Vijenex
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:19:23 GMT
════════════════════════
⌗ Tags: #hacking #dam #database_security #information_security #red_team
Medium
Engineering Database Activity Monitoring (DAM) | From Bare-Metal Linux to AWS RDS — EPISODE 3
🚨 Detection, Attacks, Telemetry, and Forensics 🚨
18 views
Daily Writeups
⤷ Title: How Attackers Collect Information Before an Attack (Recon Explained)
════════════════════════
𐀪 Author: Abhinsubej
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:01:01 GMT
════════════════════════
⌗ Tags: #reconnaissance #cybersecurity #cybersecurity_training #hacking #ethical_hacking
Medium
How Attackers Collect Information Before an Attack (Recon Explained)
Before any cyber attack happens, there is always a silent phase that most people never notice. Attackers don’t start by hacking systems —…
21 views
Daily Writeups
⤷ Title: Bug Bounty Masterclass: How a Forgotten API Exposed Thousands of Passengers
════════════════════════
𐀪 Author: Jared Douville
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:55:25 GMT
════════════════════════
⌗ Tags: #api #hacking #bug_bounty_masterclass #hackerone #swagger
Medium
Bug Bounty Masterclass: How a Forgotten API Exposed Thousands of Passengers
A Bug Bounty Masterclass Walkthrough
13 views
Daily Writeups
⤷ Title: Clash Of Clans APK
════════════════════════
𐀪 Author: Bandisharecx
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:47:02 GMT
════════════════════════
⌗ Tags: #bandishare #hacking #games #apk_mod #clashofclansapkfull
Medium
Clash Of Clans APK
Clash Of Clans APK giúp người chơi tập trung hoàn toàn vào chiến thuật xây dựng và tấn công mà không bị gián đoạn bởi thời gian chờ nâng…
10 views
Daily Writeups
⤷ Title: Understanding Your Security Needs
════════════════════════
𐀪 Author: Digital Duffer
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:46:49 GMT
════════════════════════
⌗ Tags: #cyberattack #hacking #cybersecurity
Medium
Understanding Your Security Needs
Understanding Your Security Needs You should use Accedere.io as your reliable provider when you need to find penetration testing companies near me. Accedere.io provides expert security services which …
9 views
Daily Writeups
⤷ Title: The Art of Penetration Testing: Continuity (Part 1)
════════════════════════
𐀪 Author: EX_097
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:43:39 GMT
════════════════════════
⌗ Tags: #penetration_testing #pentesting #cybersecurity #infosec #bug_bounty_tips
Medium
The Art of Penetration Testing: Continuity (Part 1)
How Systematic Testing of Payment Systems Uncovered Multiple Critical Vulnerabilities
6 views
Daily Writeups
⤷ Title: Root Detection Is Dead: What Actually Works in Android (2026)
════════════════════════
𐀪 Author: Vaibhav Shakya | Mr Neo
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:41:57 GMT
════════════════════════
⌗ Tags: #infosec #mobile_security #android_security #app_security #cybersecurity
Medium
Root Detection Is Dead: What Actually Works in Android (2026)
It started with a “simple” support ticket.
8 views
Daily Writeups
⤷ Title: Digital Literacy is Contextual: Why Operating Systems Shape How We Use Technology
════════════════════════
𐀪 Author: Vaishnavi Bhandari
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:24:27 GMT
════════════════════════
⌗ Tags: #infosec #cyber_security_awareness #digital_literacy #cybersecurity #operating_systems
Medium
Digital Literacy is Contextual: Why Operating Systems Shape How We Use Technology
Digital literacy is often described as a universal skill set the ability to use applications, browse the internet, and interact safely with…
8 views
Daily Writeups
⤷ Title: SQL Injection Autopsy: Mapping the Logical Failures from Low to Impossible in DVWA
════════════════════════
𐀪 Author: Narathama Firmansyah Putra
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:40:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #sql_injection
Medium
SQL Injection Autopsy: Mapping the Logical Failures from Low to Impossible in DVWA
SQL Injection (SQLi) sering kali disalahpahami hanya sebagai “masalah tanda petik”. Kenyataanya, SQLi adalah manifestasi dari kegagalan…
17 views