Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 18:27:00 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: Claude Code Can Be Manipulated via CLAUDE.md to Run SQL Injection Attacks
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:50:29 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #AI #Anthropic #Claude #Claude AI #Claude Code #Cybersecurity #LayerX #Vulnerability
Hackread
Claude Code Can Be Manipulated via CLAUDE.md to Run SQL Injection Attacks
Claude Code can be manipulated via CLAUDE.md to bypass safeguards and execute SQL injection attacks, enabling credential theft, says LayerX.
25 views
Daily Writeups
⤷ Title: Cloud Engineering at Risk: AWS Patches Critical Privilege Escalation and RCE Flaws in RES
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:45:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Web Services #AWS RES #Cloud Security #Command Injection #CVE_2026_5707 #CVE_2026_5708 #CVE_2026_5709 #EC2 Security #infosec #privilege escalation #Research Computing #root access
Daily CyberSecurity
Cloud Engineering at Risk: AWS Patches Critical Privilege Escalation and RCE Flaws in RES
AWS patches critical RES flaws (CVE-2026-5707/8/9) allowing root access and instance profile hijacking. Protect your cloud lab—update to v2026.03 now.
15 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS Flaws in goshs Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:04:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_35392 #CVE_2026_35393 #cybersecurity #File Security #Golang #goshs #infosec #Path Traversal #rce #SimpleHTTPServer #Vulnerability Research
Daily CyberSecurity
Critical 9.8 CVSS Flaws in goshs Exposed
Critical 9.8 flaws in goshs v2.0.0-beta.2 allow unauthenticated attackers to write or delete any file on your system. Update to v2.0.0-beta.3 immediately!
13 views
Daily Writeups
⤷ Title: The “Open Door” Vulnerability: Unchanged Default Passwords Put Juniper vLWC at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:56:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_33784 #CVSS 9.8 #cybersecurity #Default Password #infosec #JSI #Juniper Networks #network_security #Support Insights #Virtual Collector #vLWC
Daily CyberSecurity
The "Open Door" Vulnerability: Unchanged Default Passwords Put Juniper vLWC at Risk
Juniper warns of a critical 9.8 CVSS flaw in JSI vLWC. A default password allows unauthenticated attackers to take full device control. Update to 3.0.94 now!
12 views
Daily Writeups
⤷ Title: 100,000+ Sites Exposed: Critical 9.8 CVSS Flaw Hits Everest Forms WordPress Plugin
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:05:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #9.8 CVSS #CVE_2026_3296 #cybersecurity #Everest Forms #infosec #PHP Object Injection #plugin security #rce #WordPress Patch #wordpress security
Daily CyberSecurity
100,000+ Sites Exposed: Critical 9.8 CVSS Flaw Hits Everest Forms WordPress Plugin
Everest Forms patches a critical 9.8 CVSS PHP Object Injection vulnerability affecting 100,000+ sites. Update to v3.4.4 now to prevent full site takeover!
11 views
Daily Writeups
⤷ Title: Mallory Launches AI-Native Threat Intelligence Platform, Turning Global Threat Data Into Prioritized Action
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:00:52 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
Mallory Launches AI-Native Threat Intelligence Platform, Turning Global Threat Data Into Prioritized Action
Austin, Texas, United States, 9th April 2026, CyberNewswire
10 views
Daily Writeups
⤷ Title: The Shadow Admin: How I Created Admin Accounts in Any SaaS Tenant
════════════════════════
𐀪 Author: Jawad Momani
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:08:28 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #infosec #tech #technology
Medium
The Shadow Admin: How I Created Admin Accounts in Any SaaS Tenant
The Shadow Admin: How I Created Admin Accounts in Any SaaS Tenant I recently discovered a way to create active admin accounts inside any organization on an enterprise financial platform without a …
9 views
Daily Writeups
⤷ Title: …
════════════════════════
𐀪 Author: MOAMEN REZK
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:04:34 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #cybersecurity #ai_agent #ai
Medium
🚨 𝐃𝐢𝐝 𝐭𝐡𝐞 𝐀𝐱𝐢𝐨𝐬 𝐬𝐮𝐩𝐩𝐥𝐲 𝐜𝐡𝐚𝐢𝐧 𝐚𝐭𝐭𝐚𝐜𝐤 𝐜𝐚𝐭𝐜𝐡 𝐲𝐨𝐮𝐫 𝐭𝐞𝐚𝐦…
On March 31, one of npm’s most trusted libraries was hijacked and silently installed a Remote Access Trojan on developer machines…
11 views
Daily Writeups
⤷ Title: From Learning to Building: My First Automated Reconnaissance Tool
════════════════════════
𐀪 Author: Drash Tyagi
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:55:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_hunting #bug_bounty #tools
Medium
From Learning to Building: My First Automated Reconnaissance Tool
When I started learning bug bounty, reconnaissance felt overwhelming. There were too many tools, too many workflows, and no clear…
11 views
Daily Writeups
⤷ Title: Your VPN is Your Biggest Vulnerability: The Irony of Perimeter Security
════════════════════════
𐀪 Author: Hugo Valters
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:54:14 GMT
════════════════════════
⌗ Tags: #infosec #hacking #python #cybersecurity #devops
Medium
Your VPN is Your Biggest Vulnerability: The Irony of Perimeter Security
There is a dark, painful irony in modern infrastructure: the very appliance you spent $50,000 on to keep the bad guys out is almost…
13 views
Daily Writeups
⤷ Title: THE ATTACKER CLICKED A BUTTON. THEN WENT TO LUNCH.
════════════════════════
𐀪 Author: Dishanth C A
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:29:09 GMT
════════════════════════
⌗ Tags: #security #hacking #cybersecurity #ai #cloud_security
Medium
THE ATTACKER CLICKED A BUTTON. THEN WENT TO LUNCH.
In September 2025, a Chinese state-sponsored group ran a cyberattack against 30 global targets. The AI did 90% of the work. The human…
12 views
Daily Writeups
⤷ Title: Iranian APT Just Walked Into US Critical Infrastructure Through the Front Door — No Zero-Day…
════════════════════════
𐀪 Author: Adrian Găitan
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:01:02 GMT
════════════════════════
⌗ Tags: #technology #data_science #cybersecurity #ci #hacking
Medium
Iranian APT Just Walked Into US Critical Infrastructure Through the Front Door — No Zero-Day Required
A complete technical breakdown of Joint Advisory AA26–097A, the attack chain that made it possible, how to find out if you’re exposed right…
12 views
Daily Writeups
⤷ Title: VulnNet: dotjar (THM) Tryhackme WriteUp Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:47:49 GMT
════════════════════════
⌗ Tags: #ctf_writeup #hacking #cybersecurity #ctf #tryhackme
Medium
VulnNet: dotjar (THM) Tryhackme WriteUp Answer
Description : VulnNet Entertainment never gives up… are you ready?
11 views
Daily Writeups
⤷ Title: BadPlugin — DockerLabs WRITEUP BY IG:@_jotasec
════════════════════════
𐀪 Author: _jotasec
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:38:50 GMT
════════════════════════
⌗ Tags: #dockerlabs #cybersecurity #hacking
Medium
BadPlugin — DockerLabs WRITEUP BY IG:@_jotasec
BadPlugin — Dockerlabs Writeup By @_jotasec
10 views
Daily Writeups
⤷ Title: Signs of spousal infidelity
════════════════════════
𐀪 Author: Michael Parks
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:25:59 GMT
════════════════════════
⌗ Tags: #affairs #hacking #infidelity_in_marriage #infidelity #cheating
Medium
Signs of spousal infidelity
6 SIGNS YOUR SPOUSE MAY BE CHEATING
14 views
Daily Writeups
⤷ Title: Pico ctf write-up (Crack the Gate 1)
════════════════════════
𐀪 Author: Blacklotus
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:22:05 GMT
════════════════════════
⌗ Tags: #ctfwrite #hacking #ctf
Medium
Pico ctf write-up (Crack the Gate 1)
Step 1 — Inspecting the Login Page
12 views
Daily Writeups
⤷ Title: How Hackers Are Using AI to Attack You — And How to Fight Back
════════════════════════
𐀪 Author: Adrian Găitan
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:01:04 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #technology #hacking #data_science #cybersecurity
Medium
How Hackers Are Using AI to Attack You — And How to Fight Back
Real attacks, real numbers, and a practical defense playbook for 2026 — from the IBM X-Force report to the $25M deepfake heist
13 views
Daily Writeups
⤷ Title: Most API security tools check 2 of these 5 things. Attackers know which 3 they skip
════════════════════════
𐀪 Author: Kate Bennett
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:28:24 GMT
════════════════════════
⌗ Tags: #data_security #information_security #api_security #cyber_security_awareness #infosec
Medium
Most API security tools check 2 of these 5 things. Attackers know which 3 they skip
Most API breaches don’t happen because security teams ignore vulnerabilities. They happen because the wrong ones get prioritized.
12 views
Daily Writeups
⤷ Title: Easy Peasy — TryHackMe WalkThrough
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 13:05:55 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #tryhackme #tryhackme_walkthrough #red_team
Medium
Easy Peasy — TryHackMe WalkThrough
Date: 09/04/2026
9 views
Daily Writeups
⤷ Title: I Thought Information Security Was About Hackers… Until Everything Went Wrong (Introduction to…
════════════════════════
𐀪 Author: Orem Gitonga
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 14:22:17 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #threat #information_security #cybersecurity
Medium
I THOUGHT INFORMATION SECURITY WAS ABOUT HACAKERS(Introduction to Information Security: HackTheBox)
I used to think information security was simple.
9 views