Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: What Happens Inside PDFAid in Seconds: From Upload to Download
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 14:50:02 +0000
════════════════════════
⌗ Tags: #Software Reviews #Technology #Document #PDF #PDFAid
Hackread
What Happens Inside PDFAid in Seconds: From Upload to Download
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
36 views
Daily Writeups
⤷ Title: Reader Freedom: Amazon Returns DRM Control to Publishers for EPUB/PDF Downloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 04:25:09 +0000
════════════════════════
⌗ Tags: #Technology #Amazon #copyright #Digital Rights Management #DRM #ebook #EPUB #KDP #Kindle #Pdf #publishing
Daily CyberSecurity
Reader Freedom: Amazon Returns DRM Control to Publishers for EPUB/PDF Downloads
Amazon shifts DRM control to publishers/authors starting Jan 2026. Readers can download unencrypted EPUB/PDF files if the publisher consents, boosting reader choice.
25 views
Daily Writeups
⤷ Title: CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:18:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_68428 #data exfiltration #Information Disclosure #JavaScript Security #jsPDF #lfi #local file inclusion #Node.js #Patch Alert #Path Traversal #PDF Generation
Daily CyberSecurity
CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
A critical vulnerability has been discovered in jsPDF, one of the most popular JavaScript libraries for generating PDF documents. The flaw, assigned a scorching CVSS score of 9.2, allows attackers…
13 views
Daily Writeups
⤷ Title: Attackers Weaponize Legitimate RMM Tools via Fake PDFs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:12:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASEC #cyber attacks #living_off_the_land #Malware Analysis #NinjaOne #NSIS #PDF Malware #phishing #RMM Abuse #ScreenConnect #SuperOps #Syncro
Daily CyberSecurity
Attackers Weaponize Legitimate RMM Tools via Fake PDFs
ASEC warns: Hackers abuse Syncro, SuperOps & NinjaOne RMM tools via fake PDF lures. Learn how this phishing campaign installs persistent backdoors.
16 views
Daily Writeups
⤷ Title: Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 19:30:37 +0000
════════════════════════
⌗ Tags: #Phishing Scam #Security #Cyber Attack #Cybersecurity #Dropbox #Fraud #Password #PDF #Phishing #Privacy #Scam
Hackread
Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
40 views
Daily Writeups
⤷ Title: Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:11:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cloud Security #Credential Harvesting #Dropbox Impersonation #Email Security #PDF Phishing #phishing #social engineering #Telegram bot #Vercel Blob #X_Labs
Daily CyberSecurity
Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
Sophisticated phishing abuses Vercel Blob & PDFs to bypass filters. Stolen credentials are exfiltrated via Telegram bots. Learn how to spot this attack.
14 views
Daily Writeups
⤷ Title: “PDF” Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:07:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroForm #BMPDecoder #CVE_2026_24133 #CVE_2026_24737 #Denial of Service #Front_end Development #JavaScript Library #jsPDF #PDF Generation #Web Security #XSS
Daily CyberSecurity
"PDF" Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
Critical jsPDF flaws (CVE-2026-24133) allow XSS & DoS via malicious BMPs. Update to v4.1.0 immediately to prevent browser crashes and code injection.
26 views
Daily Writeups
⤷ Title: How to Securely Edit and Redact Sensitive PDFs: A Cybersecurity Guide
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 11:12:30 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Cybersecurity #Data Redaction #Data Security #PDF #pdfFiller
Hackread
How to Securely Edit and Redact Sensitive PDFs: A Cybersecurity Guide
PDF security guide covering redaction, metadata risks, compliance standards, and safe editing of password-protected files to prevent data leaks.
37 views
Daily Writeups
⤷ Title: Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:17:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroJS Bypass #AppSec #CVE_2026_25755 #Cyber Security #infosec #JavaScript Security #jsPDF #npm Vulnerability #Patch Alert #PDF Object Injection
Daily CyberSecurity
Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
A critical PDF Object Injection flaw (CVE-2026-25755) in jsPDF allows attackers to bypass AcroJS sandboxes. Update to version 4.2.0 immediately.
9 views
Daily Writeups
⤷ Title: PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 04:54:58 GMT
════════════════════════
⌗ Tags: #application_security #devsecops #secure_coding #cybersecurity #pdf
Medium
PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
How malicious content can hide in PDFs through template injection, JavaScript execution, and user input vulnerabilities — and how to…
16 views
Daily Writeups
⤷ Title: The MuPDF Vulnerability Turning “Safe” PDFs into System Hijackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 12:00:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Artifex #CVE_2026_3308 #heap overflow #infosec #integer overflow #Linux Security #Memory Management #MuPDF #PDF Security #rce #Vulnerability
Daily CyberSecurity
The MuPDF Vulnerability Turning "Safe" PDFs into System Hijackers
Artifex MuPDF faces a 7.8 CVSS integer overflow (CVE-2026-3308) allowing RCE via "crafted" PDFs. With no official patch, sandboxing is vital. Update now.
3 views
Daily Writeups
⤷ Title: Zero-Day Alert: Sophisticated PDF Exploit Targets Adobe Reader for Massive Data Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:21:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe Reader #Adobe Security #cybersecurity #EXPMON #file theft #infosec #Malware Analysis #PDF Exploit #rce #Sandbox Escape #zero_day
Daily CyberSecurity
Zero-Day Alert: Sophisticated PDF Exploit Targets Adobe Reader for Massive Data Theft
A critical Adobe Reader zero-day allows attackers to steal local files and achieve system control via malicious PDFs. Learn how the unpatched exploit works.
14 views
Daily Writeups
⤷ Title: Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 16:45:40 +0000
════════════════════════
⌗ Tags: #Security #0day #Adobe #Adobe Reader #Cyber Attack #Cybersecurity #EXPMON #Haifei Li #PDF #Vulnerability
Hackread
Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs
An Adobe Reader zero-day vulnerability is being actively exploited via malicious PDFs, allowing hackers to steal data without user interaction, with no patch available.
18 views
Daily Writeups
⤷ Title: Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:48:03 +0000
════════════════════════
⌗ Tags: #Data Leak #Cloudinary #cybersecurity #Data Exposure #data leak #Fiverr #freelance security #Google Indexing #infosec #PDF Security #Privacy Breach
Daily CyberSecurity
Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
Fiverr fails to fix a critical flaw exposing 30,000+ private PDFs, including taxpayer info, to Google Search. Learn how public Cloudinary URLs caused the leak.
13 views
Daily Writeups
⤷ Title: Critical 9.4 CVSS Flaw Leaves Dolibarr ERP Open to RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 13:13:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CRM #CVE_2026_23500 #cybersecurity #Dolibarr #ERP #infosec #Open Source Security #Patch Alert #PDF Conversion #rce
Daily CyberSecurity
Critical 9.4 CVSS Flaw Leaves Dolibarr ERP Open to RCE
Dolibarr ERP faces a critical 9.4 CVSS RCE flaw (CVE-2026-23500) in its PDF conversion logic. Unsanitized commands allow full system takeover. Upgrade to 23.0!
21 views
Daily Writeups
⤷ Title: Attackers Are Weaponizing Foxit PDF Reader’s Reputation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 06:02:15 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Danish Passport Decoy #Foxit Software #G DATA #infosec #malware #PDF Security #Remote Access Trojan #social engineering #UltraVNC
Daily CyberSecurity
Attackers Are Weaponizing Foxit PDF Reader’s Reputation
G DATA warns Foxit PDF users of a global malware campaign using fake installers and Danish passport decoys to deploy hidden UltraVNC remote access tools.
17 views
Daily Writeups
⤷ Title: Maximum Severity Flaw: How a Newline Character Shattered Gotenberg’s PDF Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 01:00:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40281 #CVSS 10 #Docker Security #ExifTool #Gotenberg #infosec #Patch Alert #PDF API #rce #SSRF Bypass #Web Security
Daily CyberSecurity
Maximum Severity Flaw: How a Newline Character Shattered Gotenberg's PDF Security
Gotenberg PDF API hit with a rare CVSS 10 flaw. Unauthenticated RCE, file overwrites, and SSRF bypasses discovered. Upgrade to version 8.32 immediately.
23 views
Daily Writeups
⤷ Title: Beyond Text: How Google Gemini’s New Multimodal RAG Turns Images and PDFs into Actionable Intelligence
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:54:20 +0000
════════════════════════
⌗ Tags: #Technology #AI Development #AI Studio #enterprise AI #File Search #Gemini Embedding 2 #Google Cloud #Google Gemini API #Knowledge Base #Multimodal RAG #PDF Analysis #RAG Workflow #Vector Search
Daily CyberSecurity
Beyond Text: How Google Gemini’s New Multimodal RAG Turns Images and PDFs into Actionable Intelligence
Google Gemini API expands file search with Multimodal RAG. Featuring image-text retrieval, custom metadata, and page-level citations for enterprise AI.
17 views
Daily Writeups
⤷ Title: Hackers Use Fake Claude Code Guide and AI PDFs to Spread AsyncRAT Malware
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 13:20:34 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Malware #Scams and Fraud #AsyncRAT #Claude Code #Cyber Attack #Cybersecurity #PDF #RAT #Scam #Windows
Hackread
Hackers Use Fake Claude Code Guide and AI PDFs to Spread AsyncRAT Malware
Hackers are using fake Claude Code guide and AI PDFs to spread AsyncRAT malware via Windows attack using PowerShell and Defender exclusions.
27 views
Daily Writeups
⤷ Title: Modern Enterprises: How to Evaluate the Security and Compliance of Office Software
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 16:32:29 +0000
════════════════════════
⌗ Tags: #Software Reviews #Security #Business #Compliance #Cybersecurity #PDF #Technology #UPDF
Hackread
Modern Enterprises: How to Evaluate the Security and Compliance of Office Software
How modern businesses can judge office software for ISO 27001 certification, GDPR-aligned data handling, encryption and safer PDF workflows with clarity.
13 views