Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Role of Aggregated Liquidity in Modern Crypto Markets
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:16:50 +0000
════════════════════════
⌗ Tags: #Crypto #Fintech #AI #Cryptocurency #Liquidity #Machine Learning #Technology
Hackread
The Role of Aggregated Liquidity in Modern Crypto Markets
Aggregated liquidity improves crypto trading by combining multiple sources, offering better rates, deeper markets, and more reliable execution across assets.
17 views
Daily Writeups
⤷ Title: Race Against the Clock: The 10-Minute Window Granting Root RCE in Nginx UI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:37:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_42238 #cybersecurity #Docker Security #infosec #nginx #Nginx UI #Patch Alert #rce #root access #Web Management
Daily CyberSecurity
Race Against the Clock: The 10-Minute Window Granting Root RCE in Nginx UI
Critical 9.0 CVSS RCE in Nginx UI (CVE-2026-42238) exploits a 10-minute unauthenticated window. Attackers can seize root control. Patch to the latest version now.
13 views
Daily Writeups
⤷ Title: Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_33453 #cybersecurity #Header injection #infosec #Integration Security #java #Java deserialization #middleware #Patch Alert #rce
Daily CyberSecurity
Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
Critical RCE flaws hit Apache Camel via header injection and unsafe deserialization. Secure your integrations and upgrade to version 4.20.0 today.
18 views
Daily Writeups
⤷ Title: Abused an MCP Server to Perform Lateral Movement | Critical Finding | MCP Testing Methodology
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:04:37 GMT
════════════════════════
⌗ Tags: #mcp_security #penetration_testing #bug_bounty #ai_security #hackerone
Medium
SQL Injection on MCP Server to Information Disclosure| Critical Finding | MCP Testing Methodology
Hi everyone, in this article, I’ll talk about one of my recent assessments which invoked an MCP component.
15 views
Daily Writeups
⤷ Title: WebSockets Aren’t Scary (I Learned Them So You Don’t Have To)
════════════════════════
𐀪 Author: zero_day
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:13:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #cybersecurity #bug_bounty_tips #penetration_testing
Medium
WebSockets Aren’t Scary (I Learned Them So You Don’t Have To)
Hello everyone, this is Nobody. I’m really sorry that I’m late — my semester exams are coming up and I have to prepare for them. I’ll be a…
11 views
Daily Writeups
⤷ Title: The Phantom Pharmacy: How a Single Misspelled Character Put Thousands of Shoppers at Risk
════════════════════════
𐀪 Author: NekoSecurity
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:45:55 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #typosquatting
Medium
The Phantom Pharmacy: How a Single Misspelled Character Put Thousands of Shoppers at Risk
A deep-dive into a typosquatting campaign targeting a major Southeast Asian health and beauty retail chain — and how I found it by…
13 views
Daily Writeups
⤷ Title: Why Most Penetration Testing Reports Fail (And What a Good One Looks Like)
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:32:08 GMT
════════════════════════
⌗ Tags: #saas_security #cybersecurity #application_security #penetration_testing #api_security
Medium
Why Most Penetration Testing Reports Fail (And What a Good One Looks Like)
Most companies don’t realize they have a security problem until a deal slows down.
12 views
Daily Writeups
⤷ Title: Beyond the Classroom: Why an Ethical Hacking Course in Delhi Must Include Live-Site Audits and…
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:50:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #ethical_hacking
Medium
Beyond the Classroom: Why an Ethical Hacking Course in Delhi Must Include Live-Site Audits and…
There is a moment that every ethical hacking student in Delhi eventually encounters — and most of them encounter it at the worst possible…
12 views
Daily Writeups
⤷ Title: The Next 24 Months Will Decide Who Survives the AI Cybersecurity War
════════════════════════
𐀪 Author: Faraz Weerabangsa | BSc in MIS (Special)
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:43:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #ai #artificial_intelligence #hacking
Medium
The Next 24 Months Will Decide Who Survives the AI Cybersecurity War
Companies that fail to adapt to AI-driven threats won’t just fall behind; they’ll be exposed.
13 views
Daily Writeups
⤷ Title: 2026’s Largest DeFi Heist: How Hackers Stole $290M from Kelp DAO via a Fatal Infrastructure Flaw
════════════════════════
𐀪 Author: Alice Hsu
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:29:57 GMT
════════════════════════
⌗ Tags: #defi #kelp_dao #hacking #solidity
Medium
2026’s Largest DeFi Heist: How Hackers Stole $290M from Kelp DAO via a Fatal Infrastructure Flaw
Incident Overview
10 views
Daily Writeups
⤷ Title: eJPT - The Metasploit Framework CTF 1
════════════════════════
𐀪 Author: Francesco Pastore
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:19:36 GMT
════════════════════════
⌗ Tags: #tech #cybersecurity #technology #hacking #security
Medium
eJPT - The Metasploit Framework CTF 1
A writeup for “The Metasploit Framework CTF 1” from the eJPT course.
25 views
Daily Writeups
⤷ Title: Bypassing File Upload Limits via Race Condition
════════════════════════
𐀪 Author: Na_stark
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:03:47 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #bugbounty_writeup #bugs #hackerone
Medium
Bypassing File Upload Limits via Race Condition
*How parallel requests can break business logic that looks rock solid on the surface*
17 views
Daily Writeups
⤷ Title: What Are the Main Aims of Penetration Testing?
════════════════════════
𐀪 Author: Nishant
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:04:13 GMT
════════════════════════
⌗ Tags: #penetration_testing #internet_security #cybersecurity #ai #latest_cyber_threats
Medium
What Are the Main Aims of Penetration Testing?
Penetration testing, often called pen testing, is one of the most effective ways to understand how secure a system really is. Instead of…
32 views
Daily Writeups
⤷ Title: Understanding Vulnerability Databases Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 10:43:03 GMT
════════════════════════
⌗ Tags: #red_team #tryhackme_writeup #tryhackme_walkthrough #cybersecurity #tryhackme
Medium
Understanding Vulnerability Databases Walkthrough Notes | TryHackMe
Learn about vulnerability databases, scoring systems, and exploit references.
48 views
Daily Writeups
⤷ Title: Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 16:48:00 +0530
════════════════════════
⌗ Tags: No_Tags
44 views
Daily Writeups
⤷ Title: New Linux FIRESTARTER Backdoor Targets Cisco Firepower Devices
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 11:41:17 +0000
════════════════════════
⌗ Tags: #Security #Malware #backdoor #Cisco #Cyber Attack #Firestarter #firewall #Linux #VPN
Hackread
New Linux FIRESTARTER Backdoor Targets Cisco Firepower Devices
FIRESTARTER, a Linux-based backdoor, targets Cisco Firepower devices, evades patches, and enables persistent access even after firmware updates.
32 views
Daily Writeups
⤷ Title: Why Unofficial Download Sources Are Still a Security Risk in 2026
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 11:01:37 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Cybersecurity #Downloads #Fraud #Malware #Phishing #Scam #security #VPN
Hackread
Why Unofficial Download Sources Are Still a Security Risk in 2026
Security Risk in 2026: why unofficial download sources still put users at risk, and how to verify safe, official install paths before installing software.
17 views
Daily Writeups
⤷ Title: Langflow Alert: Path Traversal Flaw in Knowledge Bases API Risks Total Data Wipeout
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 12:48:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_42048 #cybersecurity #Data Loss #infosec #Langflow #Path Traversal #Python Security #shutil.rmtree #Vulnerability Research
Daily CyberSecurity
Langflow Alert: Path Traversal Flaw in Knowledge Bases API Risks Total Data Wipeout
Langflow patches a critical 9.6 CVSS path traversal vulnerability (CVE-2026-42048). Learn how an unsafe bulk delete function put entire filesystems at risk.
14 views
Daily Writeups
⤷ Title: Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 12:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #C++ #CVE_2026_41603 #cybersecurity #go #infosec #java #memory corruption #mitm #Node.js #RPC Security #swift
Daily CyberSecurity
Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws
Apache Thrift fixes critical cross-language vulnerabilities (MitM, memory corruption, DoS). Secure your Java, Go, and C++ stacks by upgrading to version 0.23.0.
10 views
Daily Writeups
⤷ Title: SVG Abuse: Account Takeover Without XSS
════════════════════════
𐀪 Author: Austin Long
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 11:55:42 GMT
════════════════════════
⌗ Tags: #bug_bounty #security #red_team #pentesting #cybersecurity
Medium
SVG Abuse: Account Takeover Without XSS
SVG uploads are a fun attack surface! Most testers check for XSS, but what if the Content Security Policy (CSP)is set to script-src: none?
11 views
Daily Writeups
⤷ Title: Kenapa Pendidikan Keamanan Siber di Indonesia Masih Terbatas?
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 12:32:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #technology #education #information_security
Medium
Kenapa Pendidikan Keamanan Siber di Indonesia Masih Terbatas?
Keamanan siber kini menjadi salah satu sektor yang sangat dibutuhkan dalam era digital saat ini.
13 views