Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:30:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4922 #CVE_2026_5816 #DevSecOps #gitlab #GraphQL API #infosec #Patch Alert #security update #Session Hijacking #Web IDE
Daily CyberSecurity
GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
GitLab fixes high-severity GraphQL CSRF and Web IDE vulnerabilities in versions 18.11.1, 18.10.4, and 18.9.6. Protect your sessions and projects—patch now!
19 views
Daily Writeups
⤷ Title: CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:05:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40342 #CVSS 10.0 #CWE_22 #database security #Firebird #infosec #Patch Alert #Path Traversal #rce #Remote Code Execution #sql injection
Daily CyberSecurity
CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database
Critical 10.0 CVSS flaw in Firebird Database allows RCE via path traversal in the engine loader. Attackers gain root/SYSTEM privileges. Patch to 5.0.4+ now.
15 views
Daily Writeups
⤷ Title: Bug Bounty $$$ Write-up: OTP Bypass
════════════════════════
𐀪 Author: secureITmania
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:37:14 GMT
════════════════════════
⌗ Tags: #software_development #ethical_hacking #cybersecurity #bug_bounty #information_security
Medium
Bug Bounty $$$ Write-up: OTP Bypass
How an Eagle-Eyed Observation Led to a Critical Account Takeover
15 views
Daily Writeups
⤷ Title: Broken Access Control Leads to Unauthorized Account Deletion via API
════════════════════════
𐀪 Author: Seafeldeenwael
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:18:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #broken_access_control #bug_bounty #cyber_security_awareness
Medium
Broken Access Control Leads to Unauthorized Account Deletion via API
This write-up covers my very first bug hunting experience on HackerOne. To be honest, I was initially quite intimidated by the fierce…
16 views
Daily Writeups
⤷ Title: When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 11:56:25 GMT
════════════════════════
⌗ Tags: #user_input #injection #content_security_policy #bug_bounty #htmli
Medium
When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
In bug bounty hunting, not every vulnerability needs flashy payloads or JavaScript execution to matter. Sometimes, the simplest flaws —…
15 views
Daily Writeups
⤷ Title: So You Want to Break an AI? A Casual Guide to Testing AI & Its Weirdest Vulnerabilities
════════════════════════
𐀪 Author: rozzen
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 11:40:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #bug_bounty
Medium
So You Want to Break an AI? A Casual Guide to Testing AI & Its Weirdest Vulnerabilities
Imagine you just built a super smart robot babysitter. It can watch kids, answer questions, and even order pizza. Cool, right?
13 views
Daily Writeups
⤷ Title: “Vercel Hack Exposed: How a Simple AI Tool Led to a $2M Data Breach”
════════════════════════
𐀪 Author: Mohd Azhar
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:34:36 GMT
════════════════════════
⌗ Tags: #data_breach #hacking #vercel #artificial_intelligence
Medium
“Vercel Hack Exposed: How a Simple AI Tool Led to a $2M Data Breach”
Subtitle: Inside Vercel’s 22-month supply chain breach — and why the next frontier of cybersecurity isn’t firewalls, it’s the invisible…
14 views
Daily Writeups
⤷ Title: The Arbitrum Situation
════════════════════════
𐀪 Author: John Philip
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:11:23 GMT
════════════════════════
⌗ Tags: #technology_news #arbitrum #hacking #decentralised_finance #decentralized_exchange
Medium
The Arbitrum Situation
When Your “Decentralized” Pause Button Actually Works
15 views
Daily Writeups
⤷ Title: How to remove a hacker from your smartphone
════════════════════════
𐀪 Author: Wesley Plongisuan
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:02:43 GMT
════════════════════════
⌗ Tags: #hacking #dating #love #mental_health #hacker
Medium
How to remove a hacker from your smartphone
Phone hacking can compromise your identity and privacy without you even knowing. Fraudsters continuously evolve and improve hacking…
14 views
Daily Writeups
⤷ Title: Module 2 | Foundations of Cybersecurity | Google Professional Cybersecurity Certificate
════════════════════════
𐀪 Author: Aruldeshwal
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:54:02 GMT
════════════════════════
⌗ Tags: #cybersecurity_analyst #cybersecurity_training #infosec #cybersecurity #information_security
Medium
Module 2 | Foundations of Cybersecurity | Google Professional Cybersecurity Certificate
Module 2: The evolution of cybersecurity.
18 views
Daily Writeups
⤷ Title: F5 BIGIP LTM GTM APM WAF ASM
════════════════════════
𐀪 Author: DeepDive4learn
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:03:38 GMT
════════════════════════
⌗ Tags: #web_development #information_security #web_design #penetration_testing #cybersecurity
Medium
F5 BIGIP LTM GTM APM WAF ASM
F5 PROMO LINK @ Udemy
11 views
Daily Writeups
⤷ Title: What is Penetration Testing? A Complete Guide for Businesses
════════════════════════
𐀪 Author: Tushar Tanwar
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 11:21:42 GMT
════════════════════════
⌗ Tags: #best_penetration_testing #penetration_testing
Medium
What is Penetration Testing? A Complete Guide for Businesses
In today’s digital landscape, cybersecurity is no longer optional. Businesses of every size are operating in environments where threats are…
18 views
Daily Writeups
⤷ Title: TryHackMe SOC Analyst Road Map Part-25
════════════════════════
𐀪 Author: safa kaya
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:17:34 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity
Medium
TryHackMe SOC Analyst Road Map Part-25
BUILD YOUR CYBER SECURITY CAREER-
-SECURITY PRINCIPLES-
Task 1 -Introduction
güvenli olduğunu iddia etmek ister. Ancak gerçekten öyle…
17 views
Daily Writeups
⤷ Title: Ethical Hacking Training in Hyderabad: Your Complete Guide to a Cybersecurity Career
════════════════════════
𐀪 Author: Saikiranversionit
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:21:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking_course #ethical_hacking #ethical_hacking_training #technology #online_training
Medium
Ethical Hacking Training in Hyderabad: Your Complete Guide to a Cybersecurity Career
In todays world security on the internet is more important than ever. There are a lot of threats to our computers and data and companies…
18 views
Daily Writeups
⤷ Title: Inside a Fintech Security Simulation: How I Uncovered 3 Overlapping Attacks in One Investigation
════════════════════════
𐀪 Author: Adekunle A. J
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 11:22:26 GMT
════════════════════════
⌗ Tags: #data_analysis #cybersecurity #information_security #ethical_hacking #threat_intelligence
Medium
Inside a Fintech Security Simulation: How I Uncovered 3 Overlapping Attacks in One Investigation
At exactly 3:51 AM, a high-severity alert was triggered.
29 views
Daily Writeups
⤷ Title: Juice Shop Write-up: User Credentials Challenge
════════════════════════
𐀪 Author: ~ Jeff ~
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:06:44 GMT
════════════════════════
⌗ Tags: #owasp_juice_shop #web_penetration_testing #sql_injection #sqlite
Medium
Juice Shop Write-up: User Credentials Challenge
The goal of this challenge is to extract sensitive user data from the database by exploiting an SQL Injection vulnerability in the product…
34 views
Daily Writeups
⤷ Title: Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 13:57:34 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Malware #Acronis #backdoor #China #Cyber Attack #Cybersecurity #India #LOTUSLITE #Mustang Panda #South Korea
Hackread
Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor
Mustang Panda is using an updated version of LOTUSLITE backdoor to target Indian banks and Korean diplomats with DLL sideloading attack.
32 views
Daily Writeups
⤷ Title: Total Database Collapse: Inside the ElectricSQL CVSS 10.0 SQL Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 14:06:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40906 #CVSS 10 #cyber attack #database security #ElectricSQL #infosec #Multi_tenancy #Patch Alert #PostgreSQL #sql injection #sqli
Daily CyberSecurity
Total Database Collapse: Inside the ElectricSQL CVSS 10.0 SQL Injection
ElectricSQL reveals a critical 10.0 CVSS SQL injection (CVE-2026-40906). Attackers can hijack PostgreSQL and bypass tenant isolation. Patch to v1.5.0 now.
25 views
Daily Writeups
⤷ Title: High-Severity PHPUnit Vulnerability Enables Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 13:45:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation Security #CI/CD security #CVE_2026_41570 #DevSecOps #infosec #Patch Alert #PHP Security #PHPUnit #Poisoned Pipeline #rce
Daily CyberSecurity
High-Severity PHPUnit Vulnerability Enables Remote Code Execution
PHPUnit CVE-2026-41570 allows RCE via invisible newline injection in CI/CD pipelines. Secure your build servers—update to 12.5.22 or 13.1.6 today.
15 views
Daily Writeups
⤷ Title: NVIDIA Fixes High-Severity Flaws in KAI Scheduler and CUDA-Q
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 13:06:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #CUDA_Q #CVE_2026_24177 #CVE_2026_24189 #CWE_125 #Denial of Service #GPU Security #infosec #KAI Scheduler #nvidia #Patch Alert
Daily CyberSecurity
NVIDIA Fixes High-Severity Flaws in KAI Scheduler and CUDA-Q
NVIDIA patches critical flaws in KAI Scheduler and CUDA-Q. CVE-2026-24189 and CVE-2026-24177 risk data leaks and DoS. Secure your GPU workloads—update today!
14 views
Daily Writeups
⤷ Title: PortSwigger XSS Lab Walkthrough: When Input Sanitization Fails
════════════════════════
𐀪 Author: HACKER OF JUSTICE
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 13:58:10 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #cybersecurity #portswigger #xss_attack
Medium
PortSwigger XSS Lab Walkthrough: When Input Sanitization Fails
Introduction: The 1999 Bug That Won’t Quit
14 views