Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Legacy Under Siege: Apple Pushes Emergency iOS 15.8.7 Update to Thwart ‘Coruna’ Exploit Kit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:45:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple Security #Coruna Exploit Kit #CVE_2023_41974 #cybersecurity #infosec #iOS 15.8.7 #iPadOS 15.8.7 #Kernel Exploit #Legacy Hardware #WebKit Vulnerability
Daily CyberSecurity
Legacy Under Siege: Apple Pushes Emergency iOS 15.8.7 Update to Thwart 'Coruna' Exploit Kit
Apple releases emergency iOS 15.8.7 and 16.7.15 updates for older iPhones to block the actively exploited "Coruna" WebKit and Kernel exploit kit. Patch now.
34 views
Daily Writeups
⤷ Title: Breaking the Shield: ‘CrackArmor’ Flaws Expose 12.6 Million Linux Servers to Full Root Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:28:21 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #AppArmor #Container Breakout #CrackArmor #cybersecurity #Linux Security #privilege escalation #Qualys TRU #Ubuntu #Vulnerability #zero_day
Daily CyberSecurity
Breaking the Shield: 'CrackArmor' Flaws Expose 12.6 Million Linux Servers to Full Root Takeover
CrackArmor exposes 12.6M Linux servers to root escalation. Qualys TRU discovers 9 AppArmor flaws letting users bypass security and escape containers.
29 views
Daily Writeups
⤷ Title: Unit 42 Unmasks CL-STA-1087’s Years-Long Cyber Espionage Against Asian Militaries
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:54:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AppleChris Backdoor #APT #CL_STA_1087 #cyber_espionage #cybersecurity #infosec #MemFun Backdoor #State_Sponsored Threat #threat intelligence #Unit 42
Daily CyberSecurity
Unit 42 Unmasks CL-STA-1087's Years-Long Cyber Espionage Against Asian Militaries
Unit 42 exposes CL-STA-1087, a suspected Chinese state-sponsored cyber espionage group using custom backdoors to infiltrate Asian military networks.
21 views
Daily Writeups
⤷ Title: Apache Livy Patches Path Traversal and File Access Flaws Exposing Spark Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:43:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Livy #Apache Spark #CVE_2025_60012 #CVE_2025_66249 #cybersecurity #infosec #Patch Alert #Path Traversal #REST API Security #vulnerability management
Daily CyberSecurity
Apache Livy Patches Path Traversal and File Access Flaws Exposing Spark Clusters
Protect your Spark clusters: Apache Livy 0.9.0 patches two important file access and path traversal vulnerabilities (CVE-2025-60012 & CVE-2025-66249).
16 views
Daily Writeups
⤷ Title: Veeam Urgently Patches Critical 9.9 CVSS RCE Flaws in Backup Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:35:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backup Security #CVE_2026_21669 #CVE_2026_21708 #cybersecurity #infosec #Patch Alert #privilege escalation #Ransomware Defense #RCE vulnerability #Veeam Backup & Replication
Daily CyberSecurity
Veeam Urgently Patches Critical 9.9 CVSS RCE Flaws in Backup Servers
Veeam releases a critical security update fixing 9.9 CVSS RCE flaws (CVE-2026-21669, CVE-2026-21708) in Backup & Replication. Patch servers immediately.
17 views
Daily Writeups
⤷ Title: How I Use Google Dorking to Find Hidden Vulnerabilities
════════════════════════
𐀪 Author: loopXvedant
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:31:00 GMT
════════════════════════
⌗ Tags: #google_dorking #google_dorks_list #bug_bounty #google_dork #hacking
Medium
How I Use Google Dorking to Find Hidden Vulnerabilities 🔍
Google isn’t just a search engine. In the right hands, it’s a hacking tool.
15 views
Daily Writeups
⤷ Title: Your Data Is More Valuable Than You Think
════════════════════════
𐀪 Author: Armansyah hakim
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:43:26 GMT
════════════════════════
⌗ Tags: #data #cybersecurity #hacking #technology #data_breach
Medium
Your Data Is More Valuable Than You Think
Understanding PII, PHI, and PSI Before the Next Data Breach
16 views
Daily Writeups
⤷ Title: Más allá del bolsillo: El mapa de las amenazas móviles en 2026
════════════════════════
𐀪 Author: Domínguez Pérez Jesús Alonso
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:32:00 GMT
════════════════════════
⌗ Tags: #cibersecurity #ciberseguridad #hacking #mobile #malware
Medium
Más allá del bolsillo: El mapa de las amenazas móviles en 2026
En la actualidad, nuestro smartphone es mucho más que un dispositivo de comunicación; es nuestra oficina, nuestro banco y nuestro diario…
19 views
Daily Writeups
⤷ Title: Your WordPress Site Might Be Hacked Right Now — And You Would Never Know
════════════════════════
𐀪 Author: ToolXray
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:50:37 GMT
════════════════════════
⌗ Tags: #seo #hacking #programming #coding
Medium
Your WordPress Site Might Be Hacked Right Now — And You Would Never Know
Most WordPress hacks are designed to be invisible to the site owner. Here are the signs, the recovery steps, and how to make sure it never…
19 views
Daily Writeups
⤷ Title: What Security Analysts Actually Look at All Day
════════════════════════
𐀪 Author: Armansyah hakim
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:27:57 GMT
════════════════════════
⌗ Tags: #hacking #technology #data_security #online_safety #cybersecurity
Medium
What Security Analysts Actually Look at All Day
Understanding Logs, Alerts, and Threat Monitoring
17 views
Daily Writeups
⤷ Title: Abusing AD-DACL: ForceChangePassword
════════════════════════
𐀪 Author: Youssef Said Thabet
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:16:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #active_directory_attack
Medium
Abusing AD-DACL: ForceChangePassword
This permission grants the right to change the password of a user account without knowing their current password. Consequently, attackers…
19 views
Daily Writeups
⤷ Title: Try Hack Me- Tokyo Ghoul CTF Walkthrough
════════════════════════
𐀪 Author: PulseEinher
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:54:14 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #penetration_testing #tryhackme_writeup #cybersecurity #tryhackme
Medium
Try Hack Me- Tokyo Ghoul CTF Walkthrough
Hello, stranger — let’s begin.
19 views
Daily Writeups
⤷ Title: Red Team Simulation
════════════════════════
𐀪 Author: Jeffersonpacana
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 02:30:59 GMT
════════════════════════
⌗ Tags: #red_team #simulation #ethical_hacking
Medium
Red Team Simulation
The red-team simulation to obtain a remote shell and extract credentials. I executed the following sequence of actions (detailed steps…
29 views
Daily Writeups
⤷ Title: OpenClaw Part II: The Growing Security Risks Behind One-Click RCE in AI Agents
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 00:55:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #openclaw #one_click_rce #threat_intelligence #rce
Medium
OpenClaw Part II: The Growing Security Risks Behind One-Click RCE in AI Agents
A 1-Click Remote Code Execution (RCE) vulnerability, CVE-2026–25253, was recently disclosed in the AI agent platform OpenClaw, drawing…
44 views
Daily Writeups
⤷ Title: 45 Seconds to Empty: Ledger Unmasks Critical MediaTek Flaw That Turns Phones Into Glass Vaults
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:47:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #Crypto Wallet Hack #Ledger Donjon #March 2026 Security Patch #MediaTek #Mobile Hardware Security #Nothing CMF Phone 1 #Seed Phrase Theft #TEE #Trusted Execution Environment
Daily CyberSecurity
45 Seconds to Empty: Ledger Unmasks Critical MediaTek Flaw That Turns Phones Into Glass Vaults
Ledger Donjon uncovers a critical MediaTek TEE flaw allowing attackers to extract PINs and crypto seed phrases in 45 seconds. Patch now.
30 views
Daily Writeups
⤷ Title: The Multiplier Model: OpenAI Leaks New $100 “ChatGPT Pro 5x” Tier to Bridge the Pro Gap
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:41:58 +0000
════════════════════════
⌗ Tags: #Technology #AI Subscription #ChatGPT #ChatGPT Plus #ChatGPT Pro 20x #ChatGPT Pro 5x #GPT_5.4 #Multiplier pricing #OpenAI #Power users #prompt engineering #Tech News 2026
Daily CyberSecurity
The Multiplier Model: OpenAI Leaks New $100 "ChatGPT Pro 5x" Tier to Bridge the Pro Gap
OpenAI is launching a $100 "ChatGPT Pro 5x" tier to bridge the gap between Plus and Pro. Experience 5x the compute power without the $200 price tag.
18 views
Daily Writeups
⤷ Title: Network Hijack: Critical 9.8 CVSS Flaw in AdGuard Home Grants Hackers Full DNS Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:37:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AdGuard Home #Authentication Bypass #CVE_2026_32136 #CVSS 9.8 #cybersecurity #DNS hijacking #HTTP/2 Vulnerability #infosec #network_security #Patch Alert
Daily CyberSecurity
Network Hijack: Critical 9.8 CVSS Flaw in AdGuard Home Grants Hackers Full DNS Control
A critical 9.8 CVSS vulnerability (CVE-2026-32136) in AdGuard Home lets unauthenticated attackers hijack network DNS settings. Update to v0.107.73 now.
18 views
Daily Writeups
⤷ Title: Winter CMS Urgently Patches Critical 10.0 CVSS Privilege Escalation Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:24:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #CMS Security #CVE_2026_27591 #CVSS 10 #cybersecurity #infosec #Patch Alert #privilege escalation #vulnerability management #Winter CMS
Daily CyberSecurity
Winter CMS Urgently Patches Critical 10.0 CVSS Privilege Escalation Flaw
Winter CMS urgently patches a critical 10.0 CVSS privilege escalation flaw (CVE-2026-27591) allowing low-level backend users to gain full system control.
32 views
Daily Writeups
⤷ Title: Total Takeover: Veeam Patches Critical 9.9 CVSS RCE Flaws in Backup & Replication 12.3.2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:07:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backup Security #CVE_2026_21666 #CVE_2026_21708 #cybersecurity #infosec #Patch Alert #privilege escalation #RCE vulnerability #Veeam Backup & Replication
Daily CyberSecurity
Total Takeover: Veeam Patches Critical 9.9 CVSS RCE Flaws in Backup & Replication 12.3.2
Veeam urgently patches critical 9.9 CVSS RCE flaws (CVE-2026-21666, CVE-2026-21708) in Backup & Replication 12.3.2. Update your servers immediately.
14 views
Daily Writeups
⤷ Title: Lab: Reflected XSS into HTML context with all tags blocked except custom ones
════════════════════════
𐀪 Author: mayhack
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:16:07 GMT
════════════════════════
⌗ Tags: #bug_bounty #xss_attack #ctf #hacking #cybersecurity
Medium
Lab: Reflected XSS into HTML context with all tags blocked except custom ones
Challenge Overview
16 views
Daily Writeups
⤷ Title: The Evolution of Web Application Security: Comparing OWASP Top 10 Risks from 2021 to 2025
════════════════════════
𐀪 Author: Priyanka Behera
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #cybersecurity #owasp #application_security
Medium
The Evolution of Web Application Security: Comparing OWASP Top 10 Risks from 2021 to 2025
A practical comparison of modern web application vulnerabilities and how the OWASP threat landscape is evolving. Web applications are…
16 views