Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: I Tricked an AI Into Deleting a User Account (No Direct Access Needed)
════════════════════════
𐀪 Author: Mukilan Baskaran
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 06:37:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #llm #ai #chatbots
Medium
💥 I Tricked an AI Into Deleting a User Account (No Direct Access Needed)
How I Exploited a Chatbot to Execute a Hidden Command via Product Reviews (PortSwigger Lab Walkthrough)
22 views
Daily Writeups
⤷ Title: HTTP REQUEST SMUGGLING TO BYPASS FRONT-END SECURITY IN TE.CL
════════════════════════
𐀪 Author: Mo Rashid
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 06:35:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #mo_rashid #ctf #pentesting
Medium
HTTP REQUEST SMUGGLING TO BYPASS FRONT-END SECURITY IN TE.CL TO ACCESS ADMIN PANEL | Khan Sploit -Mo Rashid
Description:
17 views
Daily Writeups
⤷ Title: From Forgot Password to Account Takeover: A Simple API Mistake
════════════════════════
𐀪 Author: Muhammad Fazriansyah
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 06:10:05 GMT
════════════════════════
⌗ Tags: #hacker #bug_bounty_tips #bug_bounty
Medium
From Forgot Password to Account Takeover: A Simple API Mistake
Bagaimana Saya Mendapatkan Reward dari Sebuah Kerentanan Kritis pada Fitur Reset Password
15 views
Daily Writeups
⤷ Title: Analysis & Prevention: Hackers Used ChatGPT to Breach Government Systems
════════════════════════
𐀪 Author: Reggie Menacherry
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 06:11:56 GMT
════════════════════════
⌗ Tags: #cybersecurity_awareness #hacker #hacking #cyberattack #cybersecurity
Medium
Analysis & Prevention: Hackers Used Claude to Breach Government Systems
A single threat actor.
Nine government agencies compromised.
Hundreds of millions of citizen records exposed.
11 views
Daily Writeups
⤷ Title: Network Reconnaissance: The Hacker’s First Move
════════════════════════
𐀪 Author: Muhammed Rizwan PR
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 06:07:13 GMT
════════════════════════
⌗ Tags: #network_security #ethical_hacking #hacking #information_gathering #cybersecurity
Medium
Network Reconnaissance: The Hacker’s First Move
Before a single exploit is fired, attackers spend hours quietly mapping their target. Here’s exactly how that works — and why it matters…
10 views
Daily Writeups
⤷ Title: Your Phone Knows More About You Than Your Best Friend — And Someone Else Might Too
════════════════════════
𐀪 Author: Karanam Shrivasta
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 06:05:10 GMT
════════════════════════
⌗ Tags: #technology #hacking #digital_safety #privacy #cybersecurity
Medium
Your Phone Knows More About You Than Your Best Friend — And Someone Else Might Too
By Karanam Shrivasta — Cybersecurity Enthusiast Published: April 14, 2026 LinkedIn · GitHub
10 views
Daily Writeups
⤷ Title: Vulnerability Scanning vs Penetration Testing
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 06:32:23 GMT
════════════════════════
⌗ Tags: #infosec #ethical_hacking #information_security #cybersecurity #web_development
Medium
🔍 Vulnerability Scanning vs Penetration Testing
Core Idea
19 views
Daily Writeups
⤷ Title: Network-Based Vulnerabilities — Part 1
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 06:31:26 GMT
════════════════════════
⌗ Tags: #web_development #infosec #ethical_hacking #information_security #cybersecurity
Medium
Network-Based Vulnerabilities — Part 1
Network-based vulnerabilities and exploits can be catstrophic because of the types of damage and impact they can cause in an organization…
11 views
Daily Writeups
⤷ Title: Anthropic’s new Mythos model: Is it really a world-ending threat or just a $20,000 marketing stunt?
════════════════════════
𐀪 Author: Champ18ion
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 05:24:23 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #infosec #claude #ai
Medium
Anthropic’s new Mythos model: Is it really a world-ending threat or just a $20,000 marketing stunt?
Last week, Dario and the Anthropic team pulled the ultimate “trust me bro” power move when they announced Mythos, a model so powerful, so…
11 views
Daily Writeups
⤷ Title: FunboxEasyEnum — An Unprotected Web Shell, Default Credentials, and sudo mysql GTFOBins | OffSec PG
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 06:39:37 GMT
════════════════════════
⌗ Tags: #mysql #cybersecurity #penetration_testing #linux #ethical_hacking
Medium
FunboxEasyEnum — An Unprotected Web Shell, Default Credentials, and sudo mysql GTFOBins | OffSec PG
FunboxEasyEnum lives up to its name — enumeration does most of the work. A gobuster run turns up mini.php, a pre-installed Zerion Mini…
18 views
Daily Writeups
⤷ Title: AI Models & Data Walkthrough
════════════════════════
𐀪 Author: FireWolf
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 04:51:34 GMT
════════════════════════
⌗ Tags: #ai_agent #tryhackme_writeup #ai_model #tryhackme #tryhackme_walkthrough
Medium
AI Models & Data Walkthrough
Explore how data is fundamental to AI security, and the models which power it.
26 views
Daily Writeups
⤷ Title: XMONEY SALE PRONTO (?)
════════════════════════
𐀪 Author: Eduardo Urbina Arredondo
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 05:44:50 GMT
════════════════════════
⌗ Tags: #xs #bitcoin #technology #cryptocurrency
Medium
XMONEY SALE PRONTO (?)
Quizás ya es momento de que salga a la luz xmoney, lanzado bajo la plataforma x https://x.com/home (Ex twitter) Tiempos geniales se…
32 views
Daily Writeups
⤷ Title: 108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 14:05:00 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: CISA Adds 7 Fresh Exploits to KEV Catalog
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 08:46:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe Acrobat Reader #CISA KEV #CVE_2026_21643 #CVE_2026_34621 #Fortinet Security #infosec #Microsoft Exchange #Patch Alert #vulnerability management #zero_day
Daily CyberSecurity
CISA Adds 7 Fresh Exploits to KEV Catalog
CISA adds 7 active exploits to the KEV catalog, from legacy Office bugs to 2026 Fortinet zero-days. Patch these high-risk flaws now to secure your network.
24 views
Daily Writeups
⤷ Title: Inside the Global “MaaS” Engine of the K99 Scam Compound
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 08:30:24 +0000
════════════════════════
⌗ Tags: #Malware #Android Banking Trojan #APK Malware #Biometric Hijacking #financial fraud #Human Trafficking #Infoblox #K99 Triumph City #MaaS #Southeast Asia Scams #Threat Intel
Daily CyberSecurity
Inside the Global "MaaS" Engine of the K99 Scam Compound
Infoblox uncovers the K99 compound: a brutal MaaS operation using human trafficking to power biometric hijacking and global Android banking fraud.
13 views
Daily Writeups
⤷ Title: Critical 9.8 RCE Flaw in Qlik Talend Threatens Enterprise Data Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 08:03:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_6264 #Data Orchestration #infosec #Java security #JMX Port #Patch Alert #QlikTech #rce #Remote Code Execution #Talend
Daily CyberSecurity
Critical 9.8 RCE Flaw in Qlik Talend Threatens Enterprise Data Pipelines
Qlik issues a critical 9.8 CVSS alert for Talend JobServer and Runtime. Unauthenticated RCE via JMX ports puts data pipelines at risk. Patch immediately.
10 views
Daily Writeups
⤷ Title: Maximum Severity RCE Vulnerability Decimating Paperclip AI Instances
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:45:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@paperclipai/server #AI security #CVSS 10 #cybersecurity #infosec #Node.js #Paperclip #rce #React #Remote Code Execution #Vulnerability
Daily CyberSecurity
Maximum Severity RCE Vulnerability Decimating Paperclip AI Instances
A maximum10 CVSS score: Paperclip's RCE flaw allows unauthenticated server takeover in 6 API calls. Secure your AI workforce and update to v2026.410.0 now!
11 views
Daily Writeups
⤷ Title: Hijacking the Soundboard: Critical 9.8 RCE Flaws Hit Ubiquiti UniFi Play Audio
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:30:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Audio Port #Command Injection #CVE_2026_22562 #firmware update #infosec #IoT security #network_security #PowerAmp #rce #Ubiquiti #UniFi Play
Daily CyberSecurity
Hijacking the Soundboard: Critical 9.8 RCE Flaws Hit Ubiquiti UniFi Play Audio
Ubiquiti fixes critical 9.8 CVSS RCE flaws in UniFi Play PowerAmp and Audio Port. Don't let attackers control your sound—update your firmware immediately.
11 views
Daily Writeups
⤷ Title: Hardware-Locked: How Chrome’s New DBSC Makes Stolen Cookies Worthless
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:18:14 +0000
════════════════════════
⌗ Tags: #Technology #Chrome 146 #cybersecurity #DBSC #Device Bound Credentials #google chrome #infosec #InfoStealer malware #Secure Enclave #Session Hijacking #TPM #Web Security
Daily CyberSecurity
Hardware-Locked: How Chrome’s New DBSC Makes Stolen Cookies Worthless
Google launches DBSC in Chrome 146, binding session cookies to hardware like TPM. Neutralize infostealers and stop session hijacking with this new standard.
12 views
Daily Writeups
⤷ Title: Apache NiFi Patches High-Severity Code Execution Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:12:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache NiFi #Authorization Bypass #cybersecurity #Data Pipeline #Groovy Scripting #infosec #Patch Alert #rce #Tinkerpop
Daily CyberSecurity
Apache NiFi Patches High-Severity Code Execution Flaw
Apache NiFi 2.9.0 fixes a high-severity RCE (CVE-2026-39816) in the Tinkerpop service. Secure your data pipelines and verify your annotations today!
9 views
Daily Writeups
⤷ Title: Inside the Masjesu IoT Botnet’s 3-Year Stealth Reign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:05:05 +0000
════════════════════════
⌗ Tags: #Malware #C2 Infrastructure #D_Link #DDoS_for_hire #GPON #IoT security #Malware Analysis #Masjesu Botnet #Netgear #Trellix ARC #XOR encryption
Daily CyberSecurity
Inside the Masjesu IoT Botnet’s 3-Year Stealth Reign
Trellix ARC reveals Masjesu, a stealthy, professional IoT botnet operational since 2023. Targeted DDoS-for-hire with a low-profile strategy. Patch now!
13 views