Daily Writeups
3.79K subscribers
4 photos
133K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
⤷ Title: Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation #CVSS 10 #infosec #JavaScript Security #n8n #Node.js #Patch Alert #Prototype Pollution #rce #Webhook Security #XML parsing
⤷ Title: Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 12:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #C++ #CVE_2026_41603 #cybersecurity #go #infosec #java #memory corruption #mitm #Node.js #RPC Security #swift
⤷ Title: 5.7 Million Users at Risk: Multiple 9.8 CVSS Breakthroughs Enable Remote Code Execution in vm2 Sandbox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:33:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_26956 #CVSS 9.8 #infosec #JavaScript Security #Node.js #Patch Alert #rce #Sandbox Escape #V8 Engine #vm2 #WebAssembly
⤷ Title: Critical Flaws in Apache Thrift Threaten Multi-Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:00:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #CVE_2026_43868 #CVE_2026_43869 #CVE_2026_43870 #Denial of Service #infosec #Java security #Man in the Middle #Microservices Security #Node.js #Rust Security
⤷ Title: Iranian Seedworm Group Infiltrates South Korean Tech Titan in Global Espionage Surge
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:13:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ChromElevator #Credential Harvesting #DLL Sideloading #Industrial Espionage #Iranian MOIS #MuddyWater #Node.js Malware #Seedworm #South Korea Cyberattack #Symantec #threat intelligence
⤷ Title: Stealth & Automation: Seedworm’s 2026 Global Campaign Hijacks Security Software to Deploy ChromElevator
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 08:05:04 +0000
════════════════════════
⌗ Tags: #Cyber Security #ChromElevator #cyber_espionage #data exfiltration #DLL Sideloading #Espionage #infosec #Iranian APT #MuddyWater #Node.js Malware #Seedworm #SentinelOne #threat intelligence
⤷ Title: Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 02:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_47137 #CVE_2026_47140 #CVE_2026_47210 #Cyber Security #infosec #JSPI Promise #Node.js Sandbox Escape #patch bypass #Prototype Hijacking #Remote Code Execution #vm2 sandbox
⤷ Title: Popular npm Package shell-quote Patches Critical Command Injection Bug
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:32:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_9277 #Node.js Security #npm Package #Patch Update #shell_quote
⤷ Title: Liquidjs CVSS 10 RCE Threatens 7.3M Monthly Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 02:30:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVSS 10 #Liquidjs #Node.js #rce #security patch
⤷ Title: New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 01:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_44492 #CVE_2026_44494 #infosec #Node.js #Prototype Pollution #Proxy Bypass