Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 18:26:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 18:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: IoT Under Fire: Critical CVSS 10 Expression Injection Hits OpenRemote Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 14:03:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_39842 #CVSS 10 #Groovy #infosec #IoT Management #IoT security #JavaScript Injection #Nashorn Engine #OpenRemote #Patch Alert #rce
Daily CyberSecurity
IoT Under Fire: Critical CVSS 10 Expression Injection Hits OpenRemote Platform
OpenRemote CVE-2026-39842 is a critical CVSS 10 flaw allowing RCE via JavaScript and Groovy injection. Secure your IoT assets—upgrade to v1.22.0 now!
22 views
Daily Writeups
⤷ Title: Critical 9.1 SQL Injection Threatens Vendure Core Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 13:06:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@vendure/core #CVSS 9.1 #cybersecurity #e_commerce security #infosec #mysql #Patch Alert #PostgreSQL #Shop API #sql injection #sqli #Vendure
Daily CyberSecurity
Critical 9.1 SQL Injection Threatens Vendure Core Stores
Vendure Core faces a critical 9.1 SQL Injection via the Shop API. Unauthenticated attackers can hijack databases—upgrade to 3.6.2, 3.5.7, or 2.3.4 now!
10 views
Daily Writeups
⤷ Title: Signed, Trusted, and Abused: Proxy Execution via WebView2
════════════════════════
𐀪 Author: BHIS
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 14:00:00 +0000
════════════════════════
⌗ Tags: #C2 #How_To #Matthew Eidelberg #Red Team #DLL sideloading #initial access
Black Hills Information Security, Inc.
Signed, Trusted, and Abused: Proxy Execution via WebView2 - Black Hills Information Security, Inc.
An offensive security perspective on Microsoft Edge WebView2 Runtime, including architectural weaknesses, existing vulnerabilities, and exploitation methods.
10 views
Daily Writeups
⤷ Title: From IDOR to Bypass: How a “Fixed” Bug Still Exposed 6.4 Million Users’ Data [Part 2]
════════════════════════
𐀪 Author: Dedrknex
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 13:38:36 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cybersecurity #broken_access_control #idor_vulnerability
Medium
From IDOR to Bypass: How a “Fixed” Bug Still Exposed 6.4 Million Users’ Data [Part 2]
What happens when you trust a patch without verifying it? Spoiler: a sequel nobody asked for.
15 views
Daily Writeups
⤷ Title: How Hackers Turn Everyday Clues Into Password Cracking Power
════════════════════════
𐀪 Author: Daphne Stewart
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 14:37:00 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #hacking #cybersecurity #cewl #hydra
Medium
How Hackers Turn Everyday Clues Into Password Cracking Power
It feels convenient, using a password like CompanyName2026 for internal systems and test environments. It’s easy to remember, looks…
9 views
Daily Writeups
⤷ Title: What Is Phishing And How Do You Spot It In 2026?
════════════════════════
𐀪 Author: Sachdevkabir
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 13:04:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #hacking #scam #phishing
Medium
What Is Phishing And How Do You Spot It In 2026?
Phishing is a type of cybercrime where attackers trick you into sharing sensitive information. This includes passwords, credit card…
10 views
Daily Writeups
⤷ Title: The Illusion of Cloud Security: When “Nothing Is Broken” Isn’t Enough
════════════════════════
𐀪 Author: Appdirs
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 13:45:33 GMT
════════════════════════
⌗ Tags: #cloud_security #infosec #technology #cybersecurity #devops
Medium
The Illusion of Cloud Security: When “Nothing Is Broken” Isn’t Enough
Why secure-looking systems often hide real risk
14 views
Daily Writeups
⤷ Title: Lian_Yu — TryHackMe WriteUp
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 13:35:17 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #tryhackme_writeup #tryhackme_walkthrough #red_team
Medium
Lian_Yu — TryHackMe WriteUp
Date: 11/04/2026
20 views
Daily Writeups
⤷ Title: Compiled | TryHackMe Writeup
════════════════════════
𐀪 Author: Solvenite
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 14:51:01 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #ctf_writeup #tryhackme #tryhackme_walkthrough #ctf_walkthrough
Medium
Compiled | TryHackMe Writeup
Question:
34 views
Daily Writeups
⤷ Title: Title : TryHackMe: Juicy Details — A Deep Dive into Digital Forensics & Log Analysis
════════════════════════
𐀪 Author: Engosa
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 13:03:32 GMT
════════════════════════
⌗ Tags: #forensics #cybersecurity #log_analysis #blue_team #tryhackme
Medium
Title : TryHackMe: Juicy Details — A Deep Dive into Digital Forensics & Log Analysis
Introduction
42 views
Daily Writeups
⤷ Title: Fake Ledger Live App on Apple Store Linked to $9.5M Crypto Theft
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 16:47:20 +0000
════════════════════════
⌗ Tags: #Security #Crypto #Cyber Crime #Scams and Fraud #App Store #Apple #Bitcoin #Blockchain #Cybersecurity #Ledger #Ledger Live #Scam #ZachXBT
Hackread
Fake Ledger Live App on Apple Store Linked to $9.5M Crypto Theft
Apple approved a fake Ledger Live app on its App Store, allowing scammers to steal $9.5 million from more than 50 users. Did you install this app?
35 views
Daily Writeups
⤷ Title: Remote Code Execution (RCE) — The Ultimate Critical Vulnerability
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 15:38:34 GMT
════════════════════════
⌗ Tags: #hacking #linux #bug_bounty #cybersecurity #security
Medium
💻 Remote Code Execution (RCE) — The Ultimate Critical Vulnerability
✍️ Introduction
24 views
Daily Writeups
⤷ Title: AI Secret Scanner That Understands Code | ReconFusionAI
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 15:09:21 GMT
════════════════════════
⌗ Tags: #web_development #bug_bounty #ai #cybersecurity #hacking
Medium
AI Secret Scanner That Understands Code | ReconFusionAI
10 views
Daily Writeups
⤷ Title: Your Active Directory Is Flat. That’s Why You Keep Getting Burned.
════════════════════════
𐀪 Author: The Man Behind The Line
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 16:08:23 GMT
════════════════════════
⌗ Tags: #infosec #identity_management #it_security #active_directory #cybersecurity
Medium
Your Active Directory Is Flat. That’s Why You Keep Getting Burned.
A practitioner’s case for tiered administration, and why most organizations still get it wrong.
10 views
Daily Writeups
⤷ Title: Malware Disguised as a Job Opportunity: A Real-World Analysis
════════════════════════
𐀪 Author: Munaniadeno
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 16:01:15 GMT
════════════════════════
⌗ Tags: #malware_analysis #cybersecurity #job_search #threat_awareness #infosec
Medium
Malware Disguised as a Job Opportunity: A Real-World Analysis
While browsing a job board, I came across a suspicious posting containing obfuscated PowerShell code. At first glance, it looked like…
9 views
Daily Writeups
⤷ Title: Understanding Dark Web Security Risks in 2026
════════════════════════
𐀪 Author: Tor BBB
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 15:16:32 GMT
════════════════════════
⌗ Tags: #infosec #darkweb #osint #cybersecurity
Medium
Understanding Dark Web Security Risks in 2026
The dark web continues to evolve, but so do the risks tied to it. While many people associate it with anonymity and privacy, the reality is…
10 views
Daily Writeups
⤷ Title: From SSH Key Leak to Root: Lupine VulnHub CTF Walkthrough (Python Hijack & pip Exploit)
════════════════════════
𐀪 Author: Nwoke Evan Elochukwu Eguzozie
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 16:57:34 GMT
════════════════════════
⌗ Tags: #vulnhub #cybersecurity #ethical_hacking #penetration_testing #ctf_walkthrough
Medium
From SSH Key Leak to Root: Lupine VulnHub CTF Walkthrough (Python Hijack & pip Exploit)
A practical walkthrough demonstrating real-world misconfigurations leading to full system compromise on a VulnHub machine.
7 views
Daily Writeups
⤷ Title: I Built a MITRE ATT&CK-Style Framework for AI Agents — Because No One Else Had
════════════════════════
𐀪 Author: Bedrettin Cakmak
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 16:36:35 GMT
════════════════════════
⌗ Tags: #ai_security #artificial_intelligence #agentic_ai #cybersecurity #penetration_testing
Medium
I Built a MITRE ATT&CK-Style Framework for AI Agents — Because No One Else Had
Enterprises are deploying AI agents in production with no formal way to security test them. MITRE ATT&CK covers networks. ATLAS covers…
10 views
Daily Writeups
⤷ Title: TryHackMe White Rabbit Writeup
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 15:41:11 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough
Medium
TryHackMe White Rabbit Writeup
Room link: https://tryhackme.com/room/whiterabbit
23 views