Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: Zero-Click Hijack: The PrestaShop Checkout Flaw That Turns Emails Into Full Account Access, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:01:54 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #Ananda Dhakal #CVE_2025_61922 #e_commerce security #paypal #PII Leak #PrestaShop #PS Checkout #Session Hijacking #Web Vulnerability #Zero_Click
Daily CyberSecurity
Zero-Click Hijack: The PrestaShop Checkout Flaw That Turns Emails Into Full Account Access, PoC Publishes
A critical vulnerability in the widely used PrestaShop e-commerce platform has been analyzed by vulnerability researcher Ananda Dhakal, revealing a terrifyingly simple method for attackers to hija…
22 views
Daily Writeups
⤷ Title: The Pixel 9 Zero-Click Exploit Chain That Breaks the Kernel
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 10:19:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #BigWave Driver #CVE_2025_36934 #CVE_2025_54957 #Dolby UDC #Google Pixel 9 #January 2026 Security Update #Kernel Hack #Project Zero #zero_click exploit
Daily CyberSecurity
The Pixel 9 Zero-Click Exploit Chain That Breaks the Kernel
Google Project Zero uncovers a zero-click exploit on Pixel 9 in Jan 2026. Hackers can hijack the kernel via silent audio messages. Patch now!
16 views
Daily Writeups
⤷ Title: Root Access for All: Critical Auth Bypass Hits Cisco Firewall Management Center
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 02:21:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Secure FMC #CVE_2026_20079 #CVSS 10.0 #cybersecurity #firewall security #infosec #Patch Alert #root access #Vulnerability #zero_click exploit
Daily CyberSecurity
Root Access for All: Critical Auth Bypass Hits Cisco Firewall Management Center
A critical 10.0 CVSS zero-click flaw (CVE-2026-20079) in Cisco Secure FMC gives unauthenticated attackers root access. Patch your systems immediately.
14 views
Daily Writeups
⤷ Title: The “Phantom” Character: How a Single Email Can Seize Full Control of Your FreeScout Helpdesk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 07:11:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #AllowOverride #apache #CVE_2026_28289 #FreeScout #helpdesk security #Laravel #OX Research #PHP #RCE #Tech News 2026 #zero_click exploit #zero_width space
Penetration Testing Tools
The "Phantom" Character: How a Single Email Can Seize Full Control of Your FreeScout Helpdesk
In a recent dossier, OX Research delineated how a mundane email dispatched to a corporate address can precipitate
9 views
Daily Writeups
⤷ Title: Publicly Disclosed: Bishop Fox Reveals Critical Pre-Auth SQL Injection in FortiClient EMS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 14:00:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bishop Fox #CVE_2026_21643 #cybersecurity #database security #FortiClient EMS #infosec #sql injection #threat intelligence #vulnerability disclosure #zero_click exploit
Daily CyberSecurity
Publicly Disclosed: Bishop Fox Reveals Critical Pre-Auth SQL Injection in FortiClient EMS
Bishop Fox publicly disclosed details of a critical 9.1 CVSS zero-click SQL injection in FortiClient EMS (CVE-2026-21643). Patch to 7.4.5 immediately.
15 views
Daily Writeups
⤷ Title: The Invisible Breach: ‘Operation GhostMail’ Uses Zero-Click XSS to Hijack Ukrainian Webmail
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 09:11:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT28 #CVE_2025_66376 #Cyberespionage #cybersecurity #infosec #Operation GhostMail #Seqrite Labs #threat intelligence #Zero_Click XSS #Zimbra Vulnerability
Daily CyberSecurity
The Invisible Breach: 'Operation GhostMail' Uses Zero-Click XSS to Hijack Ukrainian Webmail
Seqrite Labs uncovers Operation GhostMail, an APT28-linked campaign using a zero-click XSS flaw in Zimbra to silently hijack Ukrainian government webmail.
24 views
Daily Writeups
⤷ Title: Apple Resurrects iOS 18 Security to Stop the “DarkSword” Outbreak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 07:52:46 +0000
════════════════════════
⌗ Tags: #Apple #Vulnerability #Cybersecurity 2026 #DarkSword #GhostBlade #GhostKnife #GhostSaber #iOS 18.7.7 #iOS 26 #iPadOS Update #iPhone security #Malware Defense #Zero_Click
Penetration Testing Tools
Apple Resurrects iOS 18 Security to Stop the "DarkSword" Outbreak
Apple has, for the first time in a considerable epoch, yielded to the entreaties of its patrons by
11 views
Daily Writeups
⤷ Title: The Zero-Click Vulnerability: Akamai Uncovers Incomplete Patch for APT28 Exploit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 14:54:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Akamai #APT28 #CVE_2026_32202 #Fancy Bear #infosec #LNK File #NTLM hash theft #NTLM Relay #smb #Windows Security #Zero_Click
Daily CyberSecurity
The Zero-Click Vulnerability: Akamai Uncovers Incomplete Patch for APT28 Exploit
Akamai uncovers CVE-2026-32202: A zero-click LNK flaw used by APT28 to steal Windows NTLM hashes silently. No user interaction required. Patch alert!
31 views
Daily Writeups
⤷ Title: The Zero-Click Ghost: How an Incomplete Patch Left Windows Open to Fancy Bear’s Credential Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 15:15:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Akamai #APT28 #Credential Theft #CVE_2026_21510 #CVE_2026_32202 #Fancy Bear #InfoSec 2026 #NTLM Coercion #Windows Shell #Zero_Click Vulnerability
Penetration Testing Tools
The Zero-Click Ghost: How an Incomplete Patch Left Windows Open to Fancy Bear’s Credential Theft
An oversight within a security remediation has inadvertently carved a novel path for exploitation. While the developers successfully
15 views
Daily Writeups
⤷ Title: Critical Zero-Click Android Flaw Grants Remote Shell Access Without Interaction
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 01:33:52 +0000
════════════════════════
⌗ Tags: #Android #Vulnerability Report #android #Android 16 #CVE_2026_0073 #cybersecurity #Google Security Bulletin #infosec #Project Mainline #rce #Remote Code Execution #Wireless ADB #Zero_Click
Daily CyberSecurity
Critical Zero-Click Android Flaw Grants Remote Shell Access Without Interaction
Google warns of CVE-2026-0073: a critical zero-click Android vulnerability allowing remote code execution via Wireless ADB. Patch to May 2026 level now!
22 views
Daily Writeups
⤷ Title: Reddit in the Spotlight: Google’s Search Pivot Puts “First-Hand Accounts” at the Core of AI Overviews
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:04:49 +0000
════════════════════════
⌗ Tags: #Technology #AI Overviews #content licensing #Digital Marketing 2026 #Expert Advice #First_Hand Accounts #Google AI Mode #google search #Reddit #Search Engine Updates #SEO Strategy #Zero_Click Search
Daily CyberSecurity
Reddit in the Spotlight: Google’s Search Pivot Puts "First-Hand Accounts" at the Core of AI Overviews
Google’s AI Overviews shift focus to first-hand accounts from Reddit and social media. Discover how "Expert Advice" and inline linking aim to reclaim user trust.
16 views
Daily Writeups
⤷ Title: Zero-Click Shell: Public Exploit and PoC Disclosed for Android’s Critical ADB Auth Bypass (CVE-2026-0073)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 01:00:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADB #Android security #Auth Bypass #BARGHEST #CVE_2026_0073 #Exploit #infosec #mobile security #PoC #Wireless Debugging #Zero_Click
Daily CyberSecurity
Zero-Click Shell: Public Exploit and PoC Disclosed for Android’s Critical ADB Auth Bypass (CVE-2026-0073)
A critical vulnerability existing within the core of Android’s developer tools has been exposed, revealing a zero-click avenue for attackers to silently hijack mobile devices over Wi-Fi. Det…
17 views