Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Root of the Problem: Sudo Flaw Exposes Linux Systems to Local Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:40:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #exec_mailer #infosec #Linux Security #Local Privilege Escalation #Patch Alert #root access #Sudo Vulnerability #System Administration #Ubuntu
Daily CyberSecurity
Root of the Problem: Sudo Flaw Exposes Linux Systems to Local Privilege Escalation
A critical Sudo vulnerability in the exec_mailer function allows local attackers to bypass security restrictions and escalate privileges to root access.
28 views
Daily Writeups
⤷ Title: High-Severity Flaw Exposes LiteSpeed Web Servers to OS Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:31:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_31386 #CVSS 8.6 #cybersecurity #infosec #LiteSpeed Web Server #OpenLiteSpeed #os command injection #privilege escalation #Server Security #WebAdmin
Daily CyberSecurity
High-Severity Flaw Exposes LiteSpeed Web Servers to OS Command Injection
A significant security warning has been issued for administrators utilizing LiteSpeed Web Server, a popular high-performance replacement for Apache. According to a vulnerability note from JPCERT/C…
14 views
Daily Writeups
⤷ Title: Critical 10.0 CVSS SandboxJS Flaw Grants Complete Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:19:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_26954 #CVSS 10 #cybersecurity #JavaScript Security #Node.js vulnerability #Patch Alert #Remote Code Execution #Sandbox Escape #SandboxJS #supply chain attack
Daily CyberSecurity
Critical 10.0 CVSS SandboxJS Flaw Grants Complete Remote Code Execution
Critical 10.0 CVSS flaw in SandboxJS (CVE-2026-26954) allows attackers to escape the sandbox and achieve Remote Code Execution. Patch to version 0.8.34 now.
16 views
Daily Writeups
⤷ Title: Wi-Fi Exploitation II — The Attacker’s Playbook
════════════════════════
𐀪 Author: Ishant
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:38:15 GMT
════════════════════════
⌗ Tags: #technology #hardware #bug_bounty #ethical_hacking #cybersecurity
Medium
Wi-Fi Exploitation II — The Attacker’s Playbook
Every concept, every tool, and every piece of hardware a wireless attacker uses — explained from scratch so you actually understand what…
13 views
Daily Writeups
⤷ Title: Introduction To Malware Development — NIR(1)
════════════════════════
𐀪 Author: TheCyberNirvana
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:41:50 GMT
════════════════════════
⌗ Tags: #malware_development #cybersecurity #hacking #malware #thecybernirvana
Medium
Introduction To Malware Development — NIR(1)
Hello, Cybersecurity enthusiasts and white hat hackers!
13 views
Daily Writeups
⤷ Title: The Industrialization of Ransomware
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:04:55 GMT
════════════════════════
⌗ Tags: #ransomware #cybercrime #cyberattack #cybersecurity #hacking
Medium
The Industrialization of Ransomware
The Industrialization of Ransomware How Cyber Extortion Became a Structured Global Economy in 2025 The year 2025 will likely be remembered as the moment when ransomware fully crossed the line from …
14 views
Daily Writeups
⤷ Title: Agentic AI Will Become the Most Dangerous Insider Threat
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 11:42:36 GMT
════════════════════════
⌗ Tags: #ai_agent #hacking #ai #technology #cybersecurity
Medium
Agentic AI Will Become the Most Dangerous Insider Threat
Everyone is talking about AI productivity.
17 views
Daily Writeups
⤷ Title: Insecure Direct Object Reference (IDOR) in Leave Application System (PHP & SQLite3)
════════════════════════
𐀪 Author: Hemant Raj Bhati
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 11:25:27 GMT
════════════════════════
⌗ Tags: #red_team #hacking #cybersecurity #penetration_testing #ethical_hacking
Medium
Insecure Direct Object Reference (IDOR) in Leave Application System (PHP & SQLite3)
Author
17 views
Daily Writeups
⤷ Title: CTF Basics: Understanding Base64URL Encoding
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 11:02:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #ctf #technology
Medium
CTF Basics: Understanding Base64URL Encoding
This article covers Base64URL, a variant of Base64 that appears frequently in web security contexts, particularly in JSON Web Tokens…
11 views
Daily Writeups
⤷ Title: The SOC Analyst Roadmap Nobody Gives You (But Everyone Desperately Needs)
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:48:20 GMT
════════════════════════
⌗ Tags: #technology #infosec #information_technology #cybersecurity #ethical_hacking
Medium
The SOC Analyst Roadmap Nobody Gives You (But Everyone Desperately Needs)
Before I start, make sure to watch my video below if you need any directions or clarifications on this article:
21 views
Daily Writeups
⤷ Title: Stored Cross-Site Scripting (XSS) in Simple Customer Relationship Management System (CRM-PHP)
════════════════════════
𐀪 Author: Hemant Raj Bhati
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 11:11:36 GMT
════════════════════════
⌗ Tags: #ethical_hacking #red_team #penetration_testing #cybersecurity #web_security
Medium
Stored Cross-Site Scripting (XSS) in Simple Customer Relationship Management System (CRM-PHP)
Introduction
16 views
Daily Writeups
⤷ Title: Exploiting Content Providers in Android Applications
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 11:09:57 GMT
════════════════════════
⌗ Tags: #penetration_testing #android_security #cybersecurity #mobile_security #android_development
Medium
Exploiting Content Providers in Android Applications
Content Providers are one of the most powerful data-sharing mechanisms in Android. They enable structured data exchange between…
27 views
Daily Writeups
⤷ Title: HTB Devvortex: From Joomla Info Disclosure to Root
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 10:55:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #hackthebox #penetration_testing #ctf_writeup
Medium
HTB Devvortex: From Joomla Info Disclosure to Root
Add machine ip to /etc/hosts
41 views
Daily Writeups
⤷ Title: Latest Cyber Security Threats: Critical Risks Every Organization Must Prepare For
════════════════════════
𐀪 Author: cyber security Updates
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 11:52:05 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity_training #cybersecurity_threat #education #cybersecurity
Medium
Latest Cyber Security Threats: Critical Risks Every Organization Must Prepare For
The latest cyber security threats in 2026 are more advanced, automated, and dangerous than ever before. Attackers now use artificial…
45 views
Daily Writeups
⤷ Title: Adobe to Pay $150 Million Over Hidden Fees and Hard-to-Cancel Subscriptions
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 14:17:32 +0000
════════════════════════
⌗ Tags: #Security #Scams and Fraud #Adobe #Adobe Creative Cloud #Cybersecurity #Fraud #Photoshop #ROSCA #Scam #Technology
Hackread
Adobe to Pay $150 Million Over Hidden Fees and Hard-to-Cancel Subscriptions
Adobe hit with a $150M settlement after the DOJ found the company hid cancellation fees and trapped subscribers in frustrating exit loops.
34 views
Daily Writeups
⤷ Title: The Poisoned Pickle: Critical Unpatched RCE Flaws Expose SGLang AI Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 14:02:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_3059 #CVE_2026_3060 #CVE_2026_3989 #cybersecurity #LLM Security #Pickle Deserialization #Remote Code Execution #SGLang #ZeroMQ
Daily CyberSecurity
The Poisoned Pickle: Critical Unpatched RCE Flaws Expose SGLang AI Infrastructure
Critical 9.8 CVSS unpatched RCE flaws in the SGLang AI framework (CVE-2026-3059 & CVE-2026-3060) expose servers via unsafe Python pickle deserialization.
22 views
Daily Writeups
⤷ Title: Critical 9.7 CVSS TinaCMS Flaw Exposes Local Developer Machines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 13:03:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CORS Misconfiguration #CVE_2026_28792 #CVSS 9.7 #cybersecurity #developer security #Drive_by Attack #File Exfiltration #infosec #Path Traversal #TinaCMS
Daily CyberSecurity
Critical 9.7 CVSS TinaCMS Flaw Exposes Local Developer Machines
Critical 9.7 CVSS flaw in TinaCMS (CVE-2026-28792) lets attackers hijack local developer machines via CORS and path traversal. Patch to 2.1.8 immediately.
24 views
Daily Writeups
⤷ Title: How I Discovered a $700 CSRF Vulnerability and Recreated It as a Security Lab
════════════════════════
𐀪 Author: C0deRevenant
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 14:21:17 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #ethical_hacking #web_security #cybersecurity
Medium
How I Discovered a $700 CSRF Vulnerability and Recreated It as a Security Lab
Cross-Site Request Forgery (CSRF) is one of those vulnerabilities that often appears simple in theory but can have serious consequences…
13 views
Daily Writeups
⤷ Title: DRILLAPP: Russia-Linked Browser Espionage in Ukraine
════════════════════════
𐀪 Author: Dice
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 13:39:46 GMT
════════════════════════
⌗ Tags: #russia #cybersecurity #hacking #ukraine #malware
Medium
DRILLAPP: Russia-Linked Browser Espionage in Ukraine
In the shadowed corridors of the ongoing Russia vs Ukraine cyber conflict, a new player has emerged that quietly redefines evasion tactics…
11 views
Daily Writeups
⤷ Title: This GitHub Repo Hacks Websites Automatically!!!
════════════════════════
𐀪 Author: cybrNK
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:59:13 GMT
════════════════════════
⌗ Tags: #hacking #ethical_hacking #cybersecurity #penetration_testing #offensive_security
Medium
This GitHub Repo Hacks Websites Automatically!!!
Hey folks, if you’re into cybersecurity and pentesting, you have probably heard whispers about tools that automate the grunt work while…
15 views
Daily Writeups
⤷ Title: CTF Write-Up — Pickle Rick (TryHackMe)
════════════════════════
𐀪 Author: Hectorlazzari
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 13:55:14 GMT
════════════════════════
⌗ Tags: #tryhackme #infosec #writing_tips #pentesting #cybersecurity
Medium
CTF Write-Up — Pickle Rick (TryHackMe)
Recentemente finalizei o laboratório Pickle Rick na plataforma TryHackMe. O objetivo era comprometer um servidor web e encontrar 3…
14 views