Daily Writeups
@Daily_Writeups
3.79K subscribers
4 photos
133K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.79K subscribers
Daily Writeups
⤷ Title: CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:28:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BeyondTrust #CVE_2026_1731 #CVSS 9.9 #IT security #PAM #Patch Alert #Pre_Auth Vulnerability #Privileged Remote Access #Remote Code Execution #Remote Support
Daily CyberSecurity
CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE
Critical BeyondTrust flaw CVE-2026-1731 (CVSS 9.9) allows unauthenticated RCE on Remote Support & PRA appliances. Update to v25.3.2 immediately.
20 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS telnetd Buffer Overflow Grants Pre-Auth Root
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:23:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #buffer overflow #cybersecurity #GNU Inetutils #infosec #legacy systems #LINEMODE SLC #Patch Alert #Pre_Auth RCE #Telnetd
Daily CyberSecurity
Critical 9.8 CVSS telnetd Buffer Overflow Grants Pre-Auth Root
A critical 9.8 CVSS pre-auth buffer overflow in GNU Inetutils telnetd allows attackers to execute arbitrary code and gain root access. Patch immediately.
34 views
Daily Writeups
⤷ Title: Critical Pre-Auth RCE Found in OpenAM Identity Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:14:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Management #CVE_2026_33439 #Deserialization #infosec #JATO Framework #Java security #OpenAM #Patch Alert #Pre_Auth RCE #rce #Remote Code Execution
Daily CyberSecurity
Critical Pre-Auth RCE Found in OpenAM Identity Platform
OpenAM, the widely-deployed open-source access management solution, is facing a critical security challenge following the discovery of a pre-authentication Remote Code Execution (RCE) vulnerabilit…
13 views
Daily Writeups
⤷ Title: WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 01:55:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60137 #CVE_2026_63030 #Pre_Auth RCE #proof_of_concept #REST API #Searchlight Cyber #sql injection #wordpress #wp2shell
Daily CyberSecurity
WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public
TL;DR WordPress shipped 7.0.2 on July 17, 2026 to fix a critical flaw chain. The bug is a WordPress pre-auth RCE tracked as CVE-2026-63030, built on an SQL injection issue, CVE-2026-60137. Technic…
31 views
Daily Writeups
⤷ Title: wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 01:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60137 #CVE_2026_63030 #Pre_Auth RCE #REST API batch #webshell #WordPress Core RCE #wordpress security #wp2shell exploit
Daily CyberSecurity
wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
Attackers are already dropping webshells on WordPress sites through a flaw in WordPress Core itself. The bug chain, named wp2shell, delivers an unauthenticated WordPress Core RCE. No plugin, no th…
31 views
Daily Writeups
⤷ Title: Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 03:27:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Citrix #CVE_2026_8452 #heap overflow #NetScaler #NetScaler Gateway #Pre_Auth RCE #proof_of_concept #Remote Code Execution #SAML #watchTowr
Daily CyberSecurity
Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code
Researchers at watchTowr published a working exploit for a Citrix NetScaler RCE flaw this week. The bug, CVE-2026-8452, lets an unauthenticated attacker run code as root on the appliance. watchTow…
20 views
Daily Writeups
⤷ Title: FreeRDP 3.31.0 Fixes Pre-Auth RCE Chain in Server
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 02 Sep 2026 01:00:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #FreeRDP #GNOME Remote Desktop #KDE krdp #Pre_Auth RCE #Remote Desktop Protocol
Daily CyberSecurity
FreeRDP 3.31.0 Fixes Pre-Auth RCE Chain in Server
TL;DR FreeRDP 3.31.0 patches five server-role flaws reported by Bynario, plus 17 other issues. Researchers chained three of them into pre-authentication remote code execution. This FreeRDP vulnera…
15 views
Daily Writeups
⤷ Title: CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 07 Sep 2026 09:31:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_86218 #Huntress #N_able #N_central #Pre_Auth RCE #RMM security #zero_day
Daily CyberSecurity
CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild
N-able shipped an emergency hotfix for a maximum-severity flaw in its N-central platform on September 6, 2026. The N-able N-central vulnerability, CVE-2026-86218, is a pre-auth remote code executi…
25 views