Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CVE-2026-25544: Critical Payload CMS SQLi (CVSS 9.8) Exposes Admin Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 00:07:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #blind sqli #CVE_2026_25544 #database security #Drizzle ORM #Headless CMS #Next.js #Patch Alert #Payload CMS #sql injection #web development
Daily CyberSecurity
CVE-2026-25544: Critical Payload CMS SQLi (CVSS 9.8) Exposes Admin Tokens
Critical Payload CMS flaw CVE-2026-25544 (CVSS 9.8) allows SQL injection via JSON fields. Unauthenticated attackers can steal admin tokens. Update to v3.73.0.
13 views
Daily Writeups
⤷ Title: Marco Stealer: The New “Data Raider” Targeting Crypto & Cloud Storage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 00:01:54 +0000
════════════════════════
⌗ Tags: #Malware #AES_256 Encryption #anti_analysis #Cloud Security #Cryptocurrency Malware #Cybercrime #info_stealer #Malware Analysis #Marco Stealer #Zscaler ThreatLabz
Daily CyberSecurity
Marco Stealer: The New "Data Raider" Targeting Crypto & Cloud Storage
Zscaler reveals Marco Stealer, a new malware harvesting crypto & cloud files. It uses AES-256 encryption & kills analysis tools. Learn how to detect it.
14 views
Daily Writeups
⤷ Title: Client-Side Security in 2026: The Threat Model Apps Ignore
════════════════════════
𐀪 Author: Hash Block
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 01:32:00 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #client_side_rendering #javascript #web_security
Medium
Client-Side Security in 2026: The Threat Model Apps Ignore
Why “HTTPS + JWT + a WAF” still isn’t enough when the user’s device is part of the attack surface.
18 views
Daily Writeups
⤷ Title: Cyborg WriteUp | TryHackMe | CTF
════════════════════════
𐀪 Author: s1lja
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 00:35:00 GMT
════════════════════════
⌗ Tags: #brasil #ctf_writeup #tryhackme_writeup #hacking
Medium
Cyborg WriteUp | TryHackMe | CTF
essa é uma writeup de uma lab do tryhackme.com Link da lab https://tryhackme.com/room/cyborgt8
22 views
Daily Writeups
⤷ Title: Attacktive Directory — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Abdallah_samir
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 23:54:30 GMT
════════════════════════
⌗ Tags: #active_directory #ctf #ctf_writeup #tryhackme #hacking
Medium
Attacktive Directory — TryHackMe Walkthrough
Initial Reconnaissance: Scanning the Target with Nmap
21 views
Daily Writeups
⤷ Title: Yet Another Yahoo Scammer
════════════════════════
𐀪 Author: Elizabeth Emerald
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 23:50:19 GMT
════════════════════════
⌗ Tags: #email #scam #this_happened_to_me #hacking #phishing
Medium
Yet Another Yahoo Scammer
Yahoo is aptly named: Hoo do Ya think you’re fooling?
27 views
Daily Writeups
⤷ Title: HTTP Down: High-Severity Axios Flaw (CVSS 7.5) Crashes Node.js Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 03:54:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_25639 #Denial of Service #HTTP Client #JavaScript Security #JSON Parsing #Node.js #Patch Alert #Prototype Pollution #web development
Daily CyberSecurity
HTTP Down: High-Severity Axios Flaw (CVSS 7.5) Crashes Node.js Servers
A high-severity vulnerability has been discovered in Axios, the immensely popular HTTP client used by millions of developers for Node.js and browser-based applications. The flaw, tracked as CVE-20…
25 views
Daily Writeups
⤷ Title: 30-Year-Old Bug: High-Severity libpng Flaw (CVSS 8.3) Exposes Millions of Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 02:58:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25646 #Denial of Service #Heap Buffer Overflow #image processing #Legacy Vulnerability #libpng #Open Source Security #Patch Alert #PNG #Remote Code Execution
Daily CyberSecurity
30-Year-Old Bug: High-Severity libpng Flaw (CVSS 8.3) Exposes Millions of Apps
A 30-year-old heap overflow in libpng (CVE-2026-25646) exposes apps to DoS & RCE. The flaw affects all versions since inception. Update to v1.6.55 now.
33 views
Daily Writeups
⤷ Title: Tuesday Morning Threat Report: Feb 10, 2026 TMTR
════════════════════════
𐀪 Author: Mark Maguire
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 02:15:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #olympics #hacking
Medium
Tuesday Morning Threat Report: Feb 10, 2026 TMTR
A Russian hacking group launches a DDoS attack on the Olympics, and Firefox adds settings to let users opt-in to new AI browser features
32 views
Daily Writeups
⤷ Title: Security Controls That Quietly Stop Working After AI Integration
════════════════════════
𐀪 Author: Pritam Dutta
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 05:55:18 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #ai_security #ai_security_threat
Medium
Security Controls That Quietly Stop Working After AI Integration
In the previous post, I argued that AI didn’t break security — it exposed assumptions we didn’t realize we were making.
28 views
Daily Writeups
⤷ Title: The Silent Imposter: A Deep Dive into CSRF Attacks
════════════════════════
𐀪 Author: Vaibhav Tiwari
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 04:44:59 GMT
════════════════════════
⌗ Tags: #csrf #cybersecurity #hacking #xs
Medium
The Silent Imposter: A Deep Dive into CSRF Attacks
From beginner concepts to professional defenses, how attackers hijack your trust.
34 views
Daily Writeups
⤷ Title: Web Application Security: Hands-On Practice (Chapter 10 from The Web Application Hacker’s Handbook)
════════════════════════
𐀪 Author: Aditya Kumar
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 04:16:50 GMT
════════════════════════
⌗ Tags: #chapter_10 #web_application_security #cyber_security_training #hacking #cybersecurity
Medium
Web Application Security: Hands-On Practice (Chapter 10 from The Web Application Hacker’s Handbook)
Note: This write-up reflects my learning and hands-on practice based on the book The Web Application Hacker’s Handbook: Discovering and…
21 views
Daily Writeups
⤷ Title: Shannon Is What Happens When Penetration Testing Becomes Autonomous
════════════════════════
𐀪 Author: Ishank choudhary
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 04:36:00 GMT
════════════════════════
⌗ Tags: #testing #penetration_testing #framework #artificial_intelligence #ai
Medium
Shannon Is What Happens When Penetration Testing Becomes Autonomous
I dug into Shannon properly this time — and it finally clicked why this isn’t “just another security tool”
26 views
Daily Writeups
⤷ Title: Windows Basics · TryHackMe Walkthrough
════════════════════════
𐀪 Author: Mujahid Hasan
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 04:12:16 GMT
════════════════════════
⌗ Tags: #tryhackme #windows_basics #tryhackme_walkthrough
Medium
Windows Basics · TryHackMe Walkthrough
1 · Introduction
39 views
Daily Writeups
⤷ Title: Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 10:08:00 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Critical SAP Alert: Code Injection (CVSS 9.9) Exposes S/4HANA Databases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 07:47:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_0488 #CVE_2026_0509 #database security #ERP Security #NetWeaver #Patch Tuesday #SAP CRM #SAP S/4HANA #SAP Security
Daily CyberSecurity
Critical SAP Alert: Code Injection (CVSS 9.9) Exposes S/4HANA Databases
SAP Feb 2026 update fixes critical CVE-2026-0488 (CVSS 9.9). Code injection in CRM & S/4HANA allows full database compromise. Patch immediately.
29 views
Daily Writeups
⤷ Title: SSRF Hunting 2025: 12 Tools Beyond Metadata for Next-Level Pentesting
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 07:39:32 GMT
════════════════════════
⌗ Tags: #ssrf #ethical_hacking #bug_bounty #penetration_testing #red_team
Medium
SSRF Hunting 2025: 12 Tools Beyond Metadata for Next-Level Pentesting
Ever think you’ve nailed every SSRF bug only to watch your bounty dreams vanish? It’s not just you. In 2024, over 60% of critical SSRF…
18 views
Daily Writeups
⤷ Title: Blind OS Command Injection with Out-of-Band Data Exfiltration
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 07:06:24 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #blind_os_injection #bug_bounty #command_injection #os_command_injection
Medium
Blind OS Command Injection with Out-of-Band Data Exfiltration
How asynchronous command execution still leads to real compromise.
24 views
Daily Writeups
⤷ Title: Training Slayer APK
════════════════════════
𐀪 Author: Bandisharecx
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 07:09:23 GMT
════════════════════════
⌗ Tags: #trainingslayerapk #gamemods #games #hacking #apk_mod
Medium
Training Slayer APK
Training Slayer APK mang đến phong cách chơi idle thư giãn, tập trung vào huấn luyện và nâng cấp nhân vật theo thời gian. Dù bạn chơi trong…
24 views
Daily Writeups
⤷ Title: TryHackMe Windows Basics | Full Walkthrough 2026
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 06:04:36 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme
Medium
TryHackMe Windows Basics | Full Walkthrough 2026
Room link: https://tryhackme.com/room/windowsbasics
36 views
Daily Writeups
⤷ Title: Inside a Ransomware Kill Chain: From Initial Access to Data Exfiltration
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 06:58:57 GMT
════════════════════════
⌗ Tags: #ransomware #ethical_hacking #information_security #cyber_security_awareness #cybersecurity
Medium
Inside a Ransomware Kill Chain: From Initial Access to Data Exfiltration
Introduction
43 views