Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: A Practical Guide to Linux Security and OS Hardening
════════════════════════
𐀪 Author: Pradyumn Yadav
════════════════════════
ⴵ Time: Mon, 22 Sep 2025 10:38:50 GMT
════════════════════════
⌗ Tags: #linux_security #cybersecurity #server_security #system_hardening
Medium
A Practical Guide to Linux Security and OS Hardening
1. OS Upgrade for Security Patches
24 views
Daily Writeups
⤷ Title: How I Installed Nessus Essentials on Linux (Step-by-Step Guide)
════════════════════════
𐀪 Author: Mohammad Al Shahin
════════════════════════
ⴵ Time: Wed, 24 Sep 2025 00:24:01 GMT
════════════════════════
⌗ Tags: #nessus #vulnerability_assessment #server_security #servers #penetration_testing
Medium
How I Installed Nessus Essentials on Linux (Step-by-Step Guide)
I recently needed to set up a vulnerability scanner for one of my projects, and of course, the first name that came to my mind was Nessus…
26 views
Daily Writeups
⤷ Title: CRITICAL ALERT: Windows Server WSUS Flaw Actively Exploited (CVE-2025-59287, CVSS 9.8)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 04:20:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cybersecurity #Microsoft #rce #Server Security #WSUS
Daily CyberSecurity
CRITICAL ALERT: Windows Server WSUS Flaw Actively Exploited (CVE-2025-59287, CVSS 9.8)
Microsoft released an emergency update for a critical WSUS flaw (CVSS 9.8) that allows unauthenticated RCE and is already being actively exploited.
13 views
Daily Writeups
⤷ Title: Windows Server WSUS Flaw Under Active Attack (CVE-2025-59287, CVSS 9.8) with Public PoC
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 26 Oct 2025 10:05:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Microsoft #RCE #Server Security #WSUS #zero_day
Penetration Testing Tools
Windows Server WSUS Flaw Under Active Attack (CVE-2025-59287, CVSS 9.8) with Public PoC
Microsoft released an emergency update for a critical WSUS flaw (CVE-2025-59287) that allows unauthenticated RCE and is already being actively exploited.
39 views
Daily Writeups
⤷ Title: Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:28:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Brian Reilly #CAR Deployment #CFAdmin #ColdFusion Archive #CVE_2025_61808 #rce #Remote Code Execution #Server Security #SMB Share #UNC path #Web Shell
Daily CyberSecurity
Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
Adobe has issued critical updates for its ColdFusion platform after security researcher Brian Reilly uncovered a clever logic flaw that allows authenticated administrators to turn a standard maint…
14 views
Daily Writeups
⤷ Title: Possessed in the Outlands: Apex Legends Hacked as “RSPN Admin” Seizes Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 03:12:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ALGS #anti_cheat #Apex Legends #Apex Legends Breach #Battle Royale News #EA Security #Game Hack 2026 #Respawn Entertainment #RSPN Admin #Server Security
Penetration Testing Tools
Possessed in the Outlands: Apex Legends Hacked as "RSPN Admin" Seizes Control
Inhabitants of the renowned online shooter Apex Legends encountered profound disruptions during matches this past weekend. Several participants
10 views
Daily Writeups
⤷ Title: CVE-2026-26016: Critical Pterodactyl API Flaw (CVSS 9.2) Exposes Entire Server Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 14:28:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Authorization Bypass #Cross_Node Vulnerability #CVE_2026_26016 #Cyber Security #Game Server Management #Patch Alert #Pterodactyl #Server Security #Wings Node
Daily CyberSecurity
CVE-2026-26016: Critical Pterodactyl API Flaw (CVSS 9.2) Exposes Entire Server Networks
Critical Pterodactyl API flaw (CVE-2026-26016) allows cross-node authorization bypass. Attackers can destroy game servers. Update to version 1.12.1 now.
17 views
Daily Writeups
⤷ Title: Total Takeover Threat: Critical IceWarp Flaws Trigger Emergency Server Patches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 04:27:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arbitrary File Read #Cross_Site Scripting #Cyber Security #Enterprise Email #IceWarp #infosec #Patch Alert #security update #Server Security #XSS
Daily CyberSecurity
Total Takeover Threat: Critical IceWarp Flaws Trigger Emergency Server Patches
IceWarp urges immediate patching for critical flaws allowing unauthorized server access, XSS, and arbitrary file reading. Update your instances today.
24 views
Daily Writeups
⤷ Title: High-Severity Flaw Exposes LiteSpeed Web Servers to OS Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:31:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_31386 #CVSS 8.6 #cybersecurity #infosec #LiteSpeed Web Server #OpenLiteSpeed #os command injection #privilege escalation #Server Security #WebAdmin
Daily CyberSecurity
High-Severity Flaw Exposes LiteSpeed Web Servers to OS Command Injection
A significant security warning has been issued for administrators utilizing LiteSpeed Web Server, a popular high-performance replacement for Apache. According to a vulnerability note from JPCERT/C…
14 views
Daily Writeups
⤷ Title: Leaving the Doors Unlocked: Critical 9.0 CVSS ScreenConnect Flaw Exposes Machine Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 12:07:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ConnectWise #Cryptographic Keys #CVE_2026_3564 #cybersecurity #infosec #Patch Alert #Remote Access #ScreenConnect #Server Security #Vulnerability
Daily CyberSecurity
Leaving the Doors Unlocked: Critical 9.0 CVSS ScreenConnect Flaw Exposes Machine Keys
A critical 9.0 CVSS vulnerability (CVE-2026-3564) in ConnectWise ScreenConnect exposes server cryptographic keys. On-premise users must update to 26.1 now.
18 views
Daily Writeups
⤷ Title: One Username to Rule Them All: The Persistent RCE Shadow Haunting Control Web Panel
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:19:49 +0000
════════════════════════
⌗ Tags: #Vulnerability #AlmaLinux #centos #Control Web Panel #CVE_2025_48703 #CVE_2025_70951 #CWP #Fenrisk #Linux Hosting #RCE #remote code execution #Rocky Linux #Server Security
Penetration Testing Tools
One Username to Rule Them All: The Persistent RCE Shadow Haunting Control Web Panel
A profound architectural frailty has been unearthed within a ubiquitous server management console, permitting an adversary to usurp
21 views
Daily Writeups
⤷ Title: Nginx 1.29.8 and FreeNginx Launch with Critical Security Shields
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:33:14 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_27654 #CVE_2026_28753 #DNS PTR vulnerability #FreeNginx 1.29.7 #Mainline Branch #max_headers directive #nginx 1.29.8 #OpenSSL 4.0 #Server Security 2026 #WebDAV exploit
Penetration Testing Tools
Nginx 1.29.8 and FreeNginx Launch with Critical Security Shields
Within the nginx ecosystem, a dual release has emerged, impacting both the project’s primary development branch and its
21 views
Daily Writeups
⤷ Title: cPanel Issues Emergency Patch for All Supported Versions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:16:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Vulnerability #CPanel #cybersecurity #infosec #Patch Alert #security update #Server Management #Server Security #SysAdmin #Web Hosting #WHM
Daily CyberSecurity
Exploited in the Wild: PoC Released for cPanel CVE-2026-41940 Authentication Bypass Zero-Day
cPanel issues emergency patches for a critical authentication vulnerability affecting all supported versions. Run /scripts/upcp --force immediately to patch.
12 views
Daily Writeups
⤷ Title: 44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 02:04:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CISA KEV #CPanel #CVE_2026_41940 #CVSS 9.8 #cybersecurity #infosec #Mirai botnet #ransomware #Server Security #WebPros #WHM
Daily CyberSecurity
44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge
CISA warns of cPanel CVE-2026-41940 (CVSS 9.8). 44,000 IPs compromised via authentication bypass, fueling ransomware and botnets. Patch by May 3rd!
24 views
Daily Writeups
⤷ Title: The File Timestamp That Didn’t Make Sense — And Why I Didn’t Ignore It
════════════════════════
𐀪 Author: Faruk Ahmed
════════════════════════
ⴵ Time: Tue, 05 May 2026 15:32:14 GMT
════════════════════════
⌗ Tags: #linux #sysadmin #infosec #server_security #cybersecurity
Medium
The File Timestamp That Didn’t Make Sense — And Why I Didn’t Ignore It
I wasn’t investigating anything.
18 views
Daily Writeups
⤷ Title: Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:31:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #CVE_2026_23918 #CVE_2026_24072 #Cybersecurity 2026 #HTTP/2 #mod_rewrite #Patch Management #privilege escalation #RCE #remote code execution #Server Security
Penetration Testing Tools
Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
A critical vulnerability has been identified within the ubiquitous Apache web server, potentially facilitating the complete compromise of
8 views
Daily Writeups
⤷ Title: cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:22:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CPanel #CVE_2026_29205 #CVE_2026_29206 #Cyber Security #infosec #Patch Alert #Server Security #sql injection #WHM #WP Squared
Daily CyberSecurity
cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi
cPanel & WHM fix 5 critical vulnerabilities (CVE-2026-29205). Fixes for arbitrary file read, SQLi, and privilege escalation are now live. Update now!
19 views
Daily Writeups
⤷ Title: Comet Backup Server Flaw Exposes Remote Customer Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 09:56:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Comet Backup #CVE_2026_32999 #RCE vulnerability #Server Security #Software Patch
Daily CyberSecurity
Comet Backup Server Flaw Exposes Remote Customer Data
A critical Comet Backup RCE vulnerability has been found. Learn about the CVE-2026-32999 patch released to secure backup servers and user data.
21 views
Daily Writeups
⤷ Title: Severe Plesk Privilege Escalation Flaw Patched in Linux Versions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Linux Security #Plesk #privilege escalation #Server Security #Xpath injection
Daily CyberSecurity
Severe Plesk Privilege Escalation Flaw Patched in Linux Versions
Secure your servers against a major Plesk privilege escalation flaw. Learn how the latest CVE-2026-44962 patch protects Linux infrastructure.
12 views
Daily Writeups
⤷ Title: Apache Fesod SSRF Vulnerability Exposes Internal Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 03:55:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fesod #CVE_2026_49328 #Java Library #Server Security #SSRF vulnerability
Daily CyberSecurity
Apache Fesod SSRF Vulnerability Exposes Internal Networks
A critical Apache Fesod SSRF vulnerability has been found. Learn about the CVE-2026-49328 patch released to protect internal network resources.
16 views