Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Fusion Corp — TryHackMe Walkthrough | by Yoel Yosief
════════════════════════
𐀪 Author: Yoel Yosief [ Orit01 ]
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 10:29:32 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #active_directory #ethical_hacking #kerberoasting #ctf
Medium
Fusion Corp — TryHackMe Walkthrough | by Yoel Yosief
Fusion Corp TryHackMe Walkthrough: A Penetration Testing Exercise
43 views
Daily Writeups
⤷ Title: [Webinar] Mythos Reality Check: Beating Automated Exploitation at AI Speed
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 17:33:00 +0530
════════════════════════
⌗ Tags: No_Tags
41 views
Daily Writeups
⤷ Title: Project Glasswing Proved AI Can Find the Bugs. Who's Going to Fix Them?
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 17:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: Critical Authentication Bypass in Apache HttpClient 5.6
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:45:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache HttpClient #Apache Software Foundation #CVE_2026_40542 #HTTP Components #infosec #Java security #Microservices Security #Mutual Authentication #Patch Alert #SCRAM_SHA_256
Daily CyberSecurity
Critical Authentication Bypass in Apache HttpClient 5.6
Apache HttpClient 5.6 reveals a critical auth flaw (CVE-2026-40542) in SCRAM-SHA-256. Secure your Java microservices—upgrade to 5.6.1 immediately.
30 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS Flaws Hit ArcGIS Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:02:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Key Vulnerability #ArcGIS #CVE_2026_33518 #CVE_2026_33519 #cybersecurity #Esri #GIS Security #infosec #OAuth 2.0 #Patch Alert #Portal for ArcGIS
Daily CyberSecurity
Critical 9.8 CVSS Flaws Hit ArcGIS Infrastructure
Esri issues an urgent fix for critical 9.8 CVSS flaws in ArcGIS. Over-scoped developer credentials could expose GIS data. Patch your portal immediately.
21 views
Daily Writeups
⤷ Title: How I Earned $,$$$ by Escalating a Basic Scan into Critical Exposure Using AI
════════════════════════
𐀪 Author: Eftasib Araf Depro
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:37:34 GMT
════════════════════════
⌗ Tags: #application_security #bug_bounty #web_security
Medium
How I Earned $,$$$ by Escalating a Basic Scan into Critical Exposure Using AI
I recently earned a total of $,$$$ in bug bounty rewards from a single target: https://www.[REDACTED].com/ — and it all started with…
22 views
Daily Writeups
⤷ Title: The Missing Link: How a Broken Access Control Led to a Full Account Takeover (ATO)
════════════════════════
𐀪 Author: BelScarabX
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:10:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #broken_access_control #account_takeover #bug_hunting
Medium
The Missing Link: How a Broken Access Control Led to a Full Account Takeover (ATO)
Introduction: The Illusion of Security
23 views
Daily Writeups
⤷ Title: IDOR → Account Takeover — A Real Bug Chain Walkthrough
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 11:18:25 GMT
════════════════════════
⌗ Tags: #security #linux #hacking #bug_bounty #cybersecurity
Medium
🔓 IDOR → Account Takeover — A Real Bug Chain Walkthrough
✍️ Introduction
19 views
Daily Writeups
⤷ Title: How I Found My First Valid Bug
════════════════════════
𐀪 Author: Vamsikandukuru
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 11:16:39 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #cybersecurity
Medium
How I Found My First Valid Bug
Hello everyone, hope you are all doing well! My name is Vamsi, a Cybersecurity graduate. Today I want to share how I found my
first valid…
19 views
Daily Writeups
⤷ Title: ZeroDay Security Services
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:46:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #hacking #ethical_hacking #golden_ticket_attack
Medium
ZeroDay Security Services
Active Directory Compromise Lab Report
17 views
Daily Writeups
⤷ Title: Understanding CWE-219: Storage of File with Sensitive Data Under Web Root
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #hacking #software_development #cwe
Medium
Understanding CWE-219: Storage of File with Sensitive Data Under Web Root
Web servers deliver files to users through HTTP requests. These servers have a web root directory where public files like HTML pages…
16 views
Daily Writeups
⤷ Title: Password OSINT: How Hackers Find Your Credentials — And How You Find Them First
════════════════════════
𐀪 Author: AashishSec ఆశిష్
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:43:38 GMT
════════════════════════
⌗ Tags: #osint #ethical_hacking #osint_investigation #cybersecurity #password_management
Medium
Password OSINT: How Hackers Find Your Credentials — And How You Find Them First
21 views
Daily Writeups
⤷ Title: Modern Ransomware Operasyonları: Red Team Perspektifinden Bir Analiz
════════════════════════
𐀪 Author: Muhammed Emin Berberoğlu
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:27:36 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #ransomware #red_team #ethical_hacking
Medium
Modern Ransomware Operasyonları: Red Team Perspektifinden Bir Analiz
Bir sabah uyandığınızı ve şirketinizin tüm verilerinin kilitlendiğini düşünün.
Ekranda tek bir mesaj var: “Dosyalarınız şifrelendi. Geri…
21 views
Daily Writeups
⤷ Title: Why BOLA is the #1 Threat and How to Automate the “Token Swap” with RoleRival
════════════════════════
𐀪 Author: Role Rival
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:07:49 GMT
════════════════════════
⌗ Tags: #idor #api_security #api_testing #owasp_api_security_top_10 #bola
Medium
Why BOLA is the #1 Threat and How to Automate the “Token Swap” with RoleRival
In the world of API security, one vulnerability consistently sits at the top of the OWASP Top 10 list: BOLA (Broken Object Level…
35 views
Daily Writeups
⤷ Title: One Missing Dictionary Key. One Production Cloud Identity.
════════════════════════
𐀪 Author: Ilias Armenakis
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 11:12:22 GMT
════════════════════════
⌗ Tags: #graphql #rce #appsec #cloud_security #cybersecurity
Medium
One Missing Dictionary Key. One Production Cloud Identity.
Python’s exec() function will run whatever you give it. The only thing standing between user-supplied code and the underlying system is…
45 views
Daily Writeups
⤷ Title: Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 19:12:00 +0530
════════════════════════
⌗ Tags: No_Tags
47 views
Daily Writeups
⤷ Title: ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 18:47:00 +0530
════════════════════════
⌗ Tags: No_Tags
47 views
Daily Writeups
⤷ Title: Windows Python Users Warned of High-Severity “asyncio” Memory Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 14:15:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Asyncio #buffer overflow #CVE_2026_3298 #cybersecurity #infosec #memory safety #Patch Alert #ProacterEventLoop #Python #rce #windows
Daily CyberSecurity
Windows Python Users Warned of High-Severity "asyncio" Memory Flaw
Python’s asyncio on Windows faces a high-severity RCE (CVE-2026-3298). A missing boundary check in ProacterEventLoop risks memory corruption. Update now.
30 views
Daily Writeups
⤷ Title: Mailcow Critical Alert: Unauthenticated XSS Threatens Admin Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 13:55:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Dashboard #Autodiscover #CVE_2026_40872 #docker #Email Security #infosec #mailcow #Patch Alert #Redis #Session Hijacking #Stored XSS #Web Security
Daily CyberSecurity
Mailcow Critical Alert: Unauthenticated XSS Threatens Admin Takeover
Unauthenticated attackers can hijack mailcow admin sessions via a critical CVSS 9.3 Stored XSS in Autodiscover logs. Patch to version 2026-03b immediately.
21 views
Daily Writeups
⤷ Title: Unpatch Ollama Flaw: Malicious Model Uploads Can Leak Server Heap Memory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 13:05:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_5757 #GGUF #Go Security #Heap Leak #Information Disclosure #infosec #LLM Security #Ollama #Quantization Engine #zero_day
Daily CyberSecurity
Unpatch Ollama Flaw: Malicious Model Uploads Can Leak Server Heap Memory
A critical unauthenticated remote information disclosure vulnerability has been uncovered in Ollama, the popular open-source tool used to run LLMs on macOS, Windows, and Linux. The flaw, tracked a…
16 views
Daily Writeups
⤷ Title: I Used One Google Search to Find Exposed API Keys, Databases, and Cloud Secrets
════════════════════════
𐀪 Author: oldman
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 14:03:53 GMT
════════════════════════
⌗ Tags: #osint #cybersecurity #bug_bounty
Medium
The Most Underrated Google Dork That Keeps Leaking Secrets
The Most Underrated Google Dork That Keeps Leaking Secrets How ext:env quietly exposes API keys, database passwords, and cloud credentials across the web By oldman Security Researcher & Bug Bounty …
20 views