Daily Writeups
@Daily_Writeups
3.47K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.47K subscribers
Daily Writeups
⤷ Title: The Next.js Nightmare? Vercel Investigates “Critical” Internal Breach and Supply Chain Threat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 23:59:43 +0000
════════════════════════
⌗ Tags: #Data Leak #cybersecurity news #Data Breach #github #infosec #Next.js #npm #Secret Rotation #ShinyHunters #supply chain attack #Turbo.js #Vercel
Daily CyberSecurity
The Next.js Nightmare? Vercel Investigates "Critical" Internal Breach and Supply Chain Threat
Vercel investigates a major breach by ShinyHunters. With Next.js source code and tokens at risk, developers must rotate secrets immediately. Stay updated.
35 views
Daily Writeups
⤷ Title: 7 ferramentas de engenharia social
════════════════════════
𐀪 Author: Moprius
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 00:15:26 GMT
════════════════════════
⌗ Tags: #osint #information_security #hacking #technology #cybersecurity
Medium
7 ferramentas de engenharia social
Há um ponto em que a conversa sobre engenharia social deixa de ser abstrata e passa a tocar a infraestrutura concreta do ataque. É aí que…
27 views
Daily Writeups
⤷ Title: I created security agents workflow that auto review your PRs on Azure , Github and Gitlab
════════════════════════
𐀪 Author: Jay@ Thinkode AI +
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 23:08:14 GMT
════════════════════════
⌗ Tags: #browser_extension #cloud_security #penetration_testing #code_review
Medium
I created security agents workflow that auto review your PRs on Azure , Github and Gitlab
Hello peer developers,
37 views
Daily Writeups
⤷ Title: From Second-Order SQLi to Full RCE: Breaking Through Filters in a Multi-Tenant Export Engine
════════════════════════
𐀪 Author: Omar Elshopky (3l5h0pky)
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 23:02:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_development #cybersecurity #sql_injection #postgresql
Medium
From Second-Order SQLi to Full RCE: Breaking Through Filters in a Multi-Tenant Export Engine
Turning a constrained second-order SQL injection into full RCE by bypassing filters using PostgreSQL tricks and payload reconstruction.
38 views
Daily Writeups
⤷ Title: Root Access Unlocked: FortiSandbox CVE-2026-39808 Details and PoC Exploit Publicly Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 02:26:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_39808 #CWE_78 #Exploit Disclosure #Fortinet Security #FortiSandbox #infosec #Patch Alert #PoC #rce #root access
Daily CyberSecurity
Root Access Unlocked: FortiSandbox CVE-2026-39808 Details and PoC Exploit Publicly Disclosed
Critical 9.1 CVSS flaw in FortiSandbox: Full PoC & details for CVE-2026-39808 are now public. Unauthenticated root RCE is possible. Upgrade to 4.4.9 immediately.
32 views
Daily Writeups
⤷ Title: JanaWare’s 5-Year Geofenced Ransomware Reign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 02:05:39 +0000
════════════════════════
⌗ Tags: #Malware #Acronis TRU #Adwind RAT #cybersecurity #Geofencing #infosec #JanaWare #phishing #Polymorphic Malware #ransomware #SMB Security #Turkey
Daily CyberSecurity
JanaWare’s 5-Year Geofenced Ransomware Reign
Acronis uncovers JanaWare, a persistent ransomware targeting Turkey since 2020. Discover how geofencing and polymorphism keep this threat in the shadows.
19 views
Daily Writeups
⤷ Title: Windows Snipping Tool Can Leak Your Identity, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:47:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #Blackarrow #Deep Link #Exploit Code #Microsoft Security #ms_screensketch #NTLM Disclosure #proof_of_concept #Tarlogic #Windows Snipping Tool #Windows vulnerability
Daily CyberSecurity
Windows Snipping Tool Can Leak Your Identity, PoC Available
Detailed PoC and exploit code for CVE-2026-33829 are now public. See how the Windows Snipping Tool can leak NTLM hashes and how to patch the flaw.
15 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:29:13 +0000
════════════════════════
⌗ Tags: #Weekly Recap #AI Infrastructure #Apache ActiveMQ #CISA KEV #CVE_2026_21643 #cybersecurity #Fortinet #Legacy Software Security #MCP Security #Model Context Protocol #vulnerability management
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026)
This week's digest: 1,214 new bugs, including active exploits on 2009 Excel fossils and critical 10.0 flaws in new AI/MCP infrastructure. Priority: Patch now.
14 views
Daily Writeups
⤷ Title: More Than a Miner: The Evasive MiningDropper Framework Hijacking Android Worldwide
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:00:34 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #BTMOB #cybersecurity #Cyble #infosec #Infostealer #Lumolight #Malware Delivery Framework #MiningDropper #mobile security #rat
Daily CyberSecurity
More Than a Miner: The Evasive MiningDropper Framework Hijacking Android Worldwide
Cyble reveals MiningDropper, a modular Android threat delivering RATs and infostealers via multi-stage payloads. Protect your mobile devices now.
25 views
Daily Writeups
⤷ Title: Overwatch || HTB Machine | Lab
════════════════════════
𐀪 Author: #UNKNOWN
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 02:55:10 GMT
════════════════════════
⌗ Tags: #hackthebox #hacks #hacking #ethical_hacking
Medium
Overwatch || HTB Machine | Lab
STEP I: Start with basic enumeration part using nmap
17 views
Daily Writeups
⤷ Title: Your API Keys Aren’t Safe — And the Vercel Incident Proves It
════════════════════════
𐀪 Author: RipeLemons
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 02:05:15 GMT
════════════════════════
⌗ Tags: #hacking #security #ai #software_development #api
Medium
🚨 Your API Keys Aren’t Safe — And the Vercel Incident Proves It
🚨 Your API Keys Aren’t Safe — And the Vercel Incident Proves It If you believe your credentials are safe because you’re using a trusted platform… you’re trusting the wrong …
12 views
Daily Writeups
⤷ Title: Reconstruct any Unity game with Coding Agents
════════════════════════
𐀪 Author: Alex Zeez
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:48:26 GMT
════════════════════════
⌗ Tags: #game_development #agentic_workflow #hacking #reverse_engineering #unity
Medium
Reconstruct any Unity game with Coding Agents
In 2026, de-compile, rip assets, and reconstruct nearly any C# Unity game, even if obfuscated. To prove it, I’ll show you how I did it.
11 views
Daily Writeups
⤷ Title: Vercel Got Powned By An OAuth App. Again… Here Is What Happened and What You Should Do
════════════════════════
𐀪 Author: Mandar Karhade, MD. PhD.
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:47:47 GMT
════════════════════════
⌗ Tags: #hacking #generative_ai_tools #software_development #ai_agent #artificial_intelligence
Medium
Vercel Got Powned By An OAuth App. Again… Here Is What Happened and What You Should Do
And if you installed the same AI tool they did, you’re already in the blast radius.
17 views
Daily Writeups
⤷ Title: Ferramentas para hacking e auditoria
════════════════════════
𐀪 Author: Moprius
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:32:32 GMT
════════════════════════
⌗ Tags: #information_security #red_team #penetration_testing #cybersecurity #hacking
Medium
Ferramentas para hacking e auditoria
A fragilidade de um sistema quase nunca se revela à primeira vista. A superfície parece estável, o serviço responde, a autenticação…
16 views
Daily Writeups
⤷ Title: Strored Xss
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:16:16 GMT
════════════════════════
⌗ Tags: #stored_xss #css #csrf #xss_vulnerability #xss_attack
Medium
Strored Xss
Stored XSS, where the malicious script comes from the website’s database, also known as second-order or persistent XSS.
32 views
Daily Writeups
⤷ Title: SQL injection UNION attack that retrieves data from other tables
════════════════════════
𐀪 Author: Bea Dela Cruz
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:03:47 GMT
════════════════════════
⌗ Tags: #union_attack #sql_injection
Medium
SQL injection UNION attack that retrieves data from other tables
This is a combination of different techniques to successfully retrieve data from other tables using UNION attack
40 views
Daily Writeups
⤷ Title: Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:05:00 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: The Protocol That Learns from IPv6: Why the New IPv8 Draft Is Built to Save IPv4
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 03:48:36 +0000
════════════════════════
⌗ Tags: #Technology #Autonomous System Number #BGP8 #CGNAT #Data Center #IETF #Internet Protocol #IPv4 #IPv6 #IPv8 #IT Infrastructure #network_security #Networking
Daily CyberSecurity
The Protocol That Learns from IPv6: Why the New IPv8 Draft Is Built to Save IPv4
Industry stakeholders submit the IPv8 draft to the IETF. Discover how its 64-bit address space and 100% IPv4 backward compatibility aim to end address exhaustion.
32 views
Daily Writeups
⤷ Title: Zero-Day Alert: The “Red Sun” Vulnerability Turning Microsoft Defender into a Hacker’s Tool
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 03:42:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BlueHammer #Chaotic Eclipse #cybersecurity #Local Privilege Escalation #malware #Microsoft Defender #MSRC #Red Sun #UnDefend #Windows Security #Zero_Day Exploit
Daily CyberSecurity
Zero-Day Alert: The "Red Sun" Vulnerability Turning Microsoft Defender into a Hacker’s Tool
Microsoft Defender faces a critical "Red Sun" vulnerability. Learn how this zero-day exploit bypasses security to grant hackers full administrative control.
12 views
Daily Writeups
⤷ Title: Goodbye Lag: Microsoft’s “Windows K2” Project to Rebuild the Start Menu for Instant Speed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 03:36:16 +0000
════════════════════════
⌗ Tags: #Windows #Microsoft #Performance #software update #Start Menu #Tech News #User Interface #Windows 11 #Windows Insider #Windows K2 #WinUI 3
Daily CyberSecurity
Goodbye Lag: Microsoft’s "Windows K2" Project to Rebuild the Start Menu for Instant Speed
Microsoft is rebuilding the Windows 11 Start menu with WinUI 3. Codenamed "K2," this update promises near-instant speed and the ability to hide "Recommended."
10 views
Daily Writeups
⤷ Title: CORS Misconfiguration Cross-Origin Resource Sharing: Wrong Settings Se User Data Steal Karo!
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 04:31:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #owasp #web_security #cors #bug_bounty
Medium
CORS Misconfiguration Cross-Origin Resource Sharing: Wrong Settings Se User Data Steal Karo!
Series: Bug Bounty Zero se Hero 🦸 | Article #18
By HackerMD | 17 min read
8 views