Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: CRITICAL ALERT: Apache Tika XXE Flaw (CVSS 10.0) Allows File Read via PDF Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:15:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache Tika #CVE_2025_66516 #Patch Now #PDF Parser #Security Advisory #SSRF #Tika_core #XML External Entity #XXE
Penetration Testing Tools
CRITICAL ALERT: Apache Tika XXE Flaw (CVSS 10.0) Allows File Read via PDF Files
On 4 December 2025, the Apache Software Foundation disclosed a critical vulnerability — CVE-2025-66516, rated the maximum CVSS
17 views
Daily Writeups
⤷ Title: What Happens Inside PDFAid in Seconds: From Upload to Download
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 14:50:02 +0000
════════════════════════
⌗ Tags: #Software Reviews #Technology #Document #PDF #PDFAid
Hackread
What Happens Inside PDFAid in Seconds: From Upload to Download
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
36 views
Daily Writeups
⤷ Title: Reader Freedom: Amazon Returns DRM Control to Publishers for EPUB/PDF Downloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 04:25:09 +0000
════════════════════════
⌗ Tags: #Technology #Amazon #copyright #Digital Rights Management #DRM #ebook #EPUB #KDP #Kindle #Pdf #publishing
Daily CyberSecurity
Reader Freedom: Amazon Returns DRM Control to Publishers for EPUB/PDF Downloads
Amazon shifts DRM control to publishers/authors starting Jan 2026. Readers can download unencrypted EPUB/PDF files if the publisher consents, boosting reader choice.
25 views
Daily Writeups
⤷ Title: CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:18:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_68428 #data exfiltration #Information Disclosure #JavaScript Security #jsPDF #lfi #local file inclusion #Node.js #Patch Alert #Path Traversal #PDF Generation
Daily CyberSecurity
CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
A critical vulnerability has been discovered in jsPDF, one of the most popular JavaScript libraries for generating PDF documents. The flaw, assigned a scorching CVSS score of 9.2, allows attackers…
13 views
Daily Writeups
⤷ Title: Attackers Weaponize Legitimate RMM Tools via Fake PDFs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:12:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASEC #cyber attacks #living_off_the_land #Malware Analysis #NinjaOne #NSIS #PDF Malware #phishing #RMM Abuse #ScreenConnect #SuperOps #Syncro
Daily CyberSecurity
Attackers Weaponize Legitimate RMM Tools via Fake PDFs
ASEC warns: Hackers abuse Syncro, SuperOps & NinjaOne RMM tools via fake PDF lures. Learn how this phishing campaign installs persistent backdoors.
16 views
Daily Writeups
⤷ Title: Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 19:30:37 +0000
════════════════════════
⌗ Tags: #Phishing Scam #Security #Cyber Attack #Cybersecurity #Dropbox #Fraud #Password #PDF #Phishing #Privacy #Scam
Hackread
Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
40 views
Daily Writeups
⤷ Title: Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:11:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cloud Security #Credential Harvesting #Dropbox Impersonation #Email Security #PDF Phishing #phishing #social engineering #Telegram bot #Vercel Blob #X_Labs
Daily CyberSecurity
Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
Sophisticated phishing abuses Vercel Blob & PDFs to bypass filters. Stolen credentials are exfiltrated via Telegram bots. Learn how to spot this attack.
14 views
Daily Writeups
⤷ Title: “PDF” Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:07:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroForm #BMPDecoder #CVE_2026_24133 #CVE_2026_24737 #Denial of Service #Front_end Development #JavaScript Library #jsPDF #PDF Generation #Web Security #XSS
Daily CyberSecurity
"PDF" Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
Critical jsPDF flaws (CVE-2026-24133) allow XSS & DoS via malicious BMPs. Update to v4.1.0 immediately to prevent browser crashes and code injection.
26 views
Daily Writeups
⤷ Title: How to Securely Edit and Redact Sensitive PDFs: A Cybersecurity Guide
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 11:12:30 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Cybersecurity #Data Redaction #Data Security #PDF #pdfFiller
Hackread
How to Securely Edit and Redact Sensitive PDFs: A Cybersecurity Guide
PDF security guide covering redaction, metadata risks, compliance standards, and safe editing of password-protected files to prevent data leaks.
37 views
Daily Writeups
⤷ Title: Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:17:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroJS Bypass #AppSec #CVE_2026_25755 #Cyber Security #infosec #JavaScript Security #jsPDF #npm Vulnerability #Patch Alert #PDF Object Injection
Daily CyberSecurity
Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
A critical PDF Object Injection flaw (CVE-2026-25755) in jsPDF allows attackers to bypass AcroJS sandboxes. Update to version 4.2.0 immediately.
9 views
Daily Writeups
⤷ Title: PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 04:54:58 GMT
════════════════════════
⌗ Tags: #application_security #devsecops #secure_coding #cybersecurity #pdf
Medium
PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
How malicious content can hide in PDFs through template injection, JavaScript execution, and user input vulnerabilities — and how to…
16 views
Daily Writeups
⤷ Title: The MuPDF Vulnerability Turning “Safe” PDFs into System Hijackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 12:00:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Artifex #CVE_2026_3308 #heap overflow #infosec #integer overflow #Linux Security #Memory Management #MuPDF #PDF Security #rce #Vulnerability
Daily CyberSecurity
The MuPDF Vulnerability Turning "Safe" PDFs into System Hijackers
Artifex MuPDF faces a 7.8 CVSS integer overflow (CVE-2026-3308) allowing RCE via "crafted" PDFs. With no official patch, sandboxing is vital. Update now.
3 views
Daily Writeups
⤷ Title: Zero-Day Alert: Sophisticated PDF Exploit Targets Adobe Reader for Massive Data Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:21:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe Reader #Adobe Security #cybersecurity #EXPMON #file theft #infosec #Malware Analysis #PDF Exploit #rce #Sandbox Escape #zero_day
Daily CyberSecurity
Zero-Day Alert: Sophisticated PDF Exploit Targets Adobe Reader for Massive Data Theft
A critical Adobe Reader zero-day allows attackers to steal local files and achieve system control via malicious PDFs. Learn how the unpatched exploit works.
14 views
Daily Writeups
⤷ Title: Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 16:45:40 +0000
════════════════════════
⌗ Tags: #Security #0day #Adobe #Adobe Reader #Cyber Attack #Cybersecurity #EXPMON #Haifei Li #PDF #Vulnerability
Hackread
Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs
An Adobe Reader zero-day vulnerability is being actively exploited via malicious PDFs, allowing hackers to steal data without user interaction, with no patch available.
18 views
Daily Writeups
⤷ Title: Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:48:03 +0000
════════════════════════
⌗ Tags: #Data Leak #Cloudinary #cybersecurity #Data Exposure #data leak #Fiverr #freelance security #Google Indexing #infosec #PDF Security #Privacy Breach
Daily CyberSecurity
Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
Fiverr fails to fix a critical flaw exposing 30,000+ private PDFs, including taxpayer info, to Google Search. Learn how public Cloudinary URLs caused the leak.
13 views
Daily Writeups
⤷ Title: Critical 9.4 CVSS Flaw Leaves Dolibarr ERP Open to RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 13:13:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CRM #CVE_2026_23500 #cybersecurity #Dolibarr #ERP #infosec #Open Source Security #Patch Alert #PDF Conversion #rce
Daily CyberSecurity
Critical 9.4 CVSS Flaw Leaves Dolibarr ERP Open to RCE
Dolibarr ERP faces a critical 9.4 CVSS RCE flaw (CVE-2026-23500) in its PDF conversion logic. Unsanitized commands allow full system takeover. Upgrade to 23.0!
21 views
Daily Writeups
⤷ Title: Attackers Are Weaponizing Foxit PDF Reader’s Reputation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 06:02:15 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Danish Passport Decoy #Foxit Software #G DATA #infosec #malware #PDF Security #Remote Access Trojan #social engineering #UltraVNC
Daily CyberSecurity
Attackers Are Weaponizing Foxit PDF Reader’s Reputation
G DATA warns Foxit PDF users of a global malware campaign using fake installers and Danish passport decoys to deploy hidden UltraVNC remote access tools.
17 views
Daily Writeups
⤷ Title: Maximum Severity Flaw: How a Newline Character Shattered Gotenberg’s PDF Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 01:00:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40281 #CVSS 10 #Docker Security #ExifTool #Gotenberg #infosec #Patch Alert #PDF API #rce #SSRF Bypass #Web Security
Daily CyberSecurity
Maximum Severity Flaw: How a Newline Character Shattered Gotenberg's PDF Security
Gotenberg PDF API hit with a rare CVSS 10 flaw. Unauthenticated RCE, file overwrites, and SSRF bypasses discovered. Upgrade to version 8.32 immediately.
23 views