Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: AI Models & Data Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 19:14:14 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #tryhackme #ai_security #cybersecurity
Medium
AI Models & Data Walkthrough Notes | TryHackMe
AI models and data notes from TryHackMe room overview
31 views
Daily Writeups
⤷ Title: Attackers Actively Exploiting Critical Vulnerability in Ninja Forms — File Upload Plugin
════════════════════════
𐀪 Author: Wordfence
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 21:27:04 GMT
════════════════════════
⌗ Tags: #wordpress #bug_bounty #cybersecurity_news #wordpress_security #cybersecurity
Medium
Attackers Actively Exploiting Critical Vulnerability in Ninja Forms — File Upload Plugin
32 views
Daily Writeups
⤷ Title: TryHackMe: Defensive Security Intro Writeup
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 21:36:39 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #infosec #digital_forensics #blue_team
Medium
TryHackMe: Defensive Security Intro Writeup
Introduction
28 views
Daily Writeups
⤷ Title: OT/ICS: Introduction · TryHackMe Walkthrough
════════════════════════
𐀪 Author: RosanaFSS
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 22:03:11 GMT
════════════════════════
⌗ Tags: #technology #tryhackme_walkthrough #ethical_hacking #tryhackme #cybersecurity
Medium
OT/ICS: Introduction · TryHackMe Walkthrough
Learn what Operational Technology (OT) and Industrial Control Systems (ICS) are, and how they function.
30 views
Daily Writeups
⤷ Title: Guía Completa de Vulnerabilidades JWT: Detección, Explotación y Bypass de WAF
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #hacking #technology #cybersecurity #bug_bounty #penetration_testing
Medium
Guía Completa de Vulnerabilidades JWT: Detección, Explotación y Bypass de WAF
Domina los fundamentos de JSON Web Tokens, metodologías de ataque como Key Confusion y estrategias avanzadas de bypass de seguridad.
30 views
Daily Writeups
⤷ Title: Password Reset Token Remains Valid After Email Change Leading to Account Takeover .
════════════════════════
𐀪 Author: Ali Mostafa
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 23:11:04 GMT
════════════════════════
⌗ Tags: #web_security #owasp_top_10 #account_takeover #cybersecurity #bug_bounty
Medium
Password Reset Token Remains Valid After Email Change Leading to Account Takeover .
Introduction :
36 views
Daily Writeups
⤷ Title: C*pher*torm CTF Wr*te-Up
════════════════════════
𐀪 Author: isa ergişi
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 00:11:15 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf #penetration_testing #cybersecurity #red_team
Medium
C*pher*torm CTF Wr*te-Up
Post-Exploitation Focused Analysis
34 views
Daily Writeups
⤷ Title: 220 Million at Risk: Critical 9.4 CVSS Remote Code Execution Hits protobuf.js
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 02:54:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVSS 9.4 #infosec #JavaScript Security #Node.js Security #Patch Alert #protobuf.js #Protocol Buffers #rce #web development
Daily CyberSecurity
220 Million at Risk: Critical 9.4 CVSS Remote Code Execution Hits protobuf.js
A critical 9.4 CVSS vulnerability in protobuf.js puts 220 million monthly downloads at risk of RCE. Patch your Node.js and browser apps to version 8.0.1+.
25 views
Daily Writeups
⤷ Title: High-Severity SSRF Flaw Uncovered in Angular’s Server-Side Rendering
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 02:32:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@angular/platform_server #Angular #CVE #infosec #javascript #Origin Hijacking #Server_Side Rendering #SSR #ssrf #TypeScript #Web Security
Daily CyberSecurity
High-Severity SSRF Flaw Uncovered in Angular’s Server-Side Rendering
Angular patches a critical 8.7 SSRF flaw in @angular/platform-server. Attackers can hijack SSR origins via URL normalization. Patch v19, v20, or v21 now!
16 views
Daily Writeups
⤷ Title: CISA Adds Critical Apache ActiveMQ RCE Flaw to KEV Catalog
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 01:53:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache ActiveMQ #CISA KEV #CVE_2026_34197 #cybersecurity #infosec #Jolokia #Message Broker Security #Patch Alert #rce #Remote Code Execution #Spring Framework
Daily CyberSecurity
CISA Adds Critical Apache ActiveMQ RCE Flaw to KEV Catalog
CISA adds CVE-2026-34197 to KEV. Apache ActiveMQ's Jolokia bridge flaw allows RCE via remote Spring XML loading. Remediate by April 30, 2026. Patch now!
14 views
Daily Writeups
⤷ Title: The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 01:00:22 +0000
════════════════════════
⌗ Tags: #Malware #DPRK #Git History #github #infosec #Lazarus Group #malware #North Korea #PolinRider #supply chain attack #TasksJacker #VS Code Extensions
Daily CyberSecurity
The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware
Security researchers from the OpenSourceMalware (OSM) team have uncovered a massive and rapidly expanding threat campaign targeting the heart of the developer ecosystem. The actor, dubbed PolinRid…
15 views
Daily Writeups
⤷ Title: How I Hunt Threats Without Any Alerts
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 02:39:41 GMT
════════════════════════
⌗ Tags: #programming #threat_hunting #bug_bounty #cybersecurity #hacking
Medium
How I Hunt Threats Without Any Alerts
Waiting for the SIEM to fire is how you miss the things that matter most.
18 views
Daily Writeups
⤷ Title: Article 1: Points Are Money: The Case for LARS ( Loyalty Application Risk Scoring) Framework
════════════════════════
𐀪 Author: Tanmay Bhattacharjee
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 01:05:26 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #bug_bounty #penetration_testing #information_security #cybersecurity
Medium
Article 1: Points Are Money: The Case for LARS ( Loyalty Application Risk Scoring) Framework
3:14 AM
15 views
Daily Writeups
⤷ Title: The $10,000 Tap: How “Convenience” Created a Multi-Thousand Dollar Security Hole
════════════════════════
𐀪 Author: Purvansh Bhatt
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 02:19:32 GMT
════════════════════════
⌗ Tags: #red_team #online_payments #hacking #man_in_the_middle_attack #cybersecurity_awareness
Medium
The $10,000 Tap: How “Convenience” Created a Multi-Thousand Dollar Security Hole
A recent demonstration by Veritasium, featuring tech reviewer MKBHD and cybersecurity researchers from the University of Surrey, just…
15 views
Daily Writeups
⤷ Title: Weekly Threat Intelligence Report 13 Apr 2026
════════════════════════
𐀪 Author: NSHC ThreatRecon Team
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 02:09:28 GMT
════════════════════════
⌗ Tags: #threat_intelligence #cyberattack #infosec #hacking #cybersecurity
Medium
Weekly Threat Intelligence Report 13 Apr 2026
This document summarizes key cyber threats identified between Apr 6 and Apr 12, 2026, including related threat events
20 views
Daily Writeups
⤷ Title: ¿Qué carajo tiene por dentro un Mod APK que no tiene uno normal?
════════════════════════
𐀪 Author: r/dPixls
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 01:51:42 GMT
════════════════════════
⌗ Tags: #programming #android #hacking
Medium
¿Qué carajo tiene por dentro un Mod APK que no tiene uno normal?
25 views
Daily Writeups
⤷ Title: CVE-2021–42013 Analysis
════════════════════════
𐀪 Author: isa ergişi
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 00:11:15 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf #penetration_testing #cybersecurity #red_team
Medium
C*pher*torm CTF Wr*te-Up
Post-Exploitation Focused Analysis
37 views
Daily Writeups
⤷ Title: 【威脅情資】從網頁 RCE 漏洞到 AD 淪陷-分析攻擊手法與鑑識溯源
════════════════════════
𐀪 Author: segalee
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:16:08 GMT
════════════════════════
⌗ Tags: #microsoft #blue_team #cybersecurity #active_directory #rce_vulnerability
Medium
【威脅情資】從網頁 RCE 漏洞到 AD 淪陷-分析攻擊手法與鑑識溯源
免責聲明:本篇文章基於真實的資安事件鑑識報告改寫，旨在分享攻擊手法、防禦實務與威脅狩獵。本文中所提及的所有時間點、IP…
34 views
Daily Writeups
⤷ Title: Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:52:00 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: Wormable Bugs: Microsoft April 2026 Patch Tuesday Fixes Two “Zero-Interaction” RCE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 03:15:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_33824 #CVE_2026_33827 #cybersecurity #IKE Service #infosec #IPv6 #lateral movement #Microsoft #Patch Tuesday #rce #windows #Wormable
Daily CyberSecurity
Wormable Bugs: Microsoft April 2026 Patch Tuesday Fixes Two "Zero-Interaction" RCE Flaws
Microsoft’s April 2026 Patch Tuesday fixes two "wormable" CVEs (9.8 & 8.1 CVSS). Secure your network against zero-click RCE and lateral movement now.
28 views
Daily Writeups
⤷ Title: How I Found an Exposed Google Maps API Key on a Global Brand’s Checkout Page
════════════════════════
𐀪 Author: Mallikarjun Biradar
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 04:53:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #vdp #bug_bounty #hackerone
Medium
How I Found an Exposed Google Maps API Key on a Global Brand’s Checkout Page
Bug bounty hunting is not always about chaining complex vulnerabilities for a critical RCE. Sometimes the most meaningful findings are…
25 views