Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: When null Became the OTP: Exploiting a Broken Password Reset Flow to Take Over an Admin Account
════════════════════════
𐀪 Author: Yeboahromeo
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:33:44 GMT
════════════════════════
⌗ Tags: #penetration_testing #appsec #webapp_security #cybersecurity
Medium
When null Became the OTP: Exploiting a Broken Password Reset Flow to Take Over an Admin Account
Authentication systems are supposed to protect users, especially privileged accounts like administrators. Among the most trusted security…
23 views
Daily Writeups
⤷ Title: STACK-BASED BUFFER OVERFLOW EXPLOITATION
════════════════════════
𐀪 Author: Eilipkarki
════════════════════════
ⴵ Time: Wed, 06 May 2026 22:08:36 GMT
════════════════════════
⌗ Tags: #reverse_engineering #binary_exploitation #cybersecurity #ethical_hacking
Medium
STACK-BASED BUFFER OVERFLOW EXPLOITATION
Security Evaluation of the “space” Binary
25 views
Daily Writeups
⤷ Title: How I pwend my high school CS teacher
════════════════════════
𐀪 Author: Gombos Ákos-Roland
════════════════════════
ⴵ Time: Thu, 07 May 2026 00:44:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #computer_science #django #bug_bounty #web_security
Medium
How I pwend my high school CS teacher
I was never a good student. I didn’t like doing something just because I was told to — I needed to understand why, and if it didn’t tickle…
24 views
Daily Writeups
⤷ Title: HTB File Inclusion Skills Assessment — From LFI to RCE (Full Walkthrough)
════════════════════════
𐀪 Author: 0x4rt1st
════════════════════════
ⴵ Time: Wed, 06 May 2026 23:46:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #penetration_testing #local_file_inclusion #bug_bounty
Medium
HTB File Inclusion Skills Assessment — From LFI to RCE (Full Walkthrough)
How I chained LFI, source code disclosure, and a broken file upload to get full remote code execution. Final part of the File Inclusion…
17 views
Daily Writeups
⤷ Title: On Recent AI Hacks
════════════════════════
𐀪 Author: John Philip
════════════════════════
ⴵ Time: Thu, 07 May 2026 00:41:35 GMT
════════════════════════
⌗ Tags: #software_engineering #hacking #software_development #programming #ai
Medium
On Recent AI Hacks
Truth be told, every engineer should be security-conscious, and learn to respect a good exploit. AI hacks are starting to feel like the…
14 views
Daily Writeups
⤷ Title: A Killer CTF Mechanic: Protocol Rotation
════════════════════════
𐀪 Author: Taulan Zauzanov
════════════════════════
ⴵ Time: Thu, 07 May 2026 00:08:13 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #pentesting #penetration_testing #programming
Medium
A Killer CTF Mechanic: Protocol Rotation
Using a Defensive Methodology
16 views
Daily Writeups
⤷ Title: Linux CLI Basics — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Wed, 06 May 2026 23:31:01 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_pre_security #tryhackme_writeup #linux #tryhackme
Medium
Linux CLI Basics — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: Linux CLI Basics
Room URL: https://tryhackme.com/room/linuxclibasics
Difficulty: Easy
Please attempt the room…
28 views
Daily Writeups
⤷ Title: Critical 9.0 CVSS Flaw in ArcadeDB Allows Total Cross-Database Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 02:17:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ArcadeDB #Authorization Bypass #CVE_2026_44221 #cybersecurity #Data Isolation #database security #infosec #Multi_Model DBMS #Multi_tenancy #Patch Alert
Daily CyberSecurity
Critical 9.0 CVSS Flaw in ArcadeDB Allows Total Cross-Database Access
ArcadeDB 26.4.1 fixes a critical 9.0 CVSS authorization bypass (CVE-2026-44221) that dismantles database isolation. Secure your multi-model data and patch now!
22 views
Daily Writeups
⤷ Title: Critical Spring Cloud Config Flaws Expose Arbitrary Files and GCP Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 02:10:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40981 #CVE_2026_40982 #cybersecurity #Directory Traversal #GCP Security #Google Secrets Manager #infosec #Patch Alert #Spring Boot #Spring Cloud Config
Daily CyberSecurity
Critical Spring Cloud Config Flaws Expose Arbitrary Files and GCP Secrets
Spring Cloud Config fixes a 9.1 CVSS directory traversal (CVE-2026-40982) and a GCP secret leak. Secure your distributed system—upgrade to the latest patches!
14 views
Daily Writeups
⤷ Title: Bitcoin Core Fixes High-Severity Remote Crash Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 02:02:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bitcoin Core #Bitcoin Node #Blockchain security #C++ #crypto security #CVE_2024_52911 #cybersecurity #Denial of Service #infosec #Proof of Work #use after free
Daily CyberSecurity
Bitcoin Core Fixes High-Severity Remote Crash Vulnerability
Bitcoin Core v29.0 fixes a high-severity use-after-free bug (CVE-2024-52911) that could allow attackers to remotely crash nodes. Upgrade your node today.
9 views
Daily Writeups
⤷ Title: State-Sponsored Actors Weaponize Critical PAN-OS Zero-Day for Root
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:55:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #captive portal #CL_STA_1132 #CVE_2026_0300 #cyber_espionage #Edge Security #infosec #Palo Alto Networks #PAN_OS #Root RCE #Unit 42 #zero_day
Daily CyberSecurity
State-Sponsored Actors Weaponize Critical PAN-OS Zero-Day for Root
Palo Alto Networks warns of active root RCE (CVE-2026-0300) in PAN-OS. State-sponsored cluster CL-STA-1132 is targeting edge assets. Patch and restrict now!
10 views
Daily Writeups
⤷ Title: Chrome’s Security Overhaul: 127 Fixes and $100k+ in Bounties Power the New Chrome 148 Stable Release
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:46:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Blink Engine #bug bounty #Chrome 148 #CVE_2026_7896 #cybersecurity #google chrome #Google Security #infosec #integer overflow #use after free #V8 Engine
Daily CyberSecurity
Chrome’s Security Overhaul: 127 Fixes and $100k+ in Bounties Power the New Chrome 148 Stable Release
Google Chrome 148 is out with 127 security fixes, including 3 Critical flaws in Blink and V8. Protect your data—check your version and update today!
11 views
Daily Writeups
⤷ Title: Critical Redis Patches Fix RCE and Memory Corruption Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:25:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25243 #cybersecurity #infosec #Lua Scripting #memory corruption #Patch Alert #rce #Redis #RedisBloom #RedisTimeSeries #Remote Code Execution #use after free
Daily CyberSecurity
Critical Redis Patches Fix RCE and Memory Corruption Flaws
Redis releases critical patches for 5 vulnerabilities, including RCE via the RESTORE command (CVSS 7.7). Secure your self-managed Redis instances immediately!
18 views
Daily Writeups
⤷ Title: Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:01:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Wicket #CVE_2026_40010 #CVE_2026_43646 #CVE_2026_43975 #infosec #Java security #Patch Alert #Path Traversal #Session Fixation #web development #XSS
Daily CyberSecurity
Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
Apache Wicket 10.9.0 fixes 3 Critical flaws: Path Traversal (CVE-2026-43975), Session Fixation, and Resource Guard bypass. Secure your Java apps and patch now!
13 views
Daily Writeups
⤷ Title: Detecting Credential Stuffing Infrastructure Using ASN & Fingerprinting Techniques
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:58:40 GMT
════════════════════════
⌗ Tags: #threat_intelligence #hacking #cybersecurity #credential_stuffing #anomaly_detection
Medium
Detecting Credential Stuffing Infrastructure Using ASN & Fingerprinting Techniques
How adversaries build scalable attack infrastructure — and how to catch them before the damage is done
8 views
Daily Writeups
⤷ Title: My Telegram account got hacked – even with 2FA on
════════════════════════
𐀪 Author: S.S. Kajla
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:33:09 GMT
════════════════════════
⌗ Tags: #pen_with_paper #android #social_media #telegram #hacking
9 views
Daily Writeups
⤷ Title: The Agentic Takeover: Hacking Digital Sovereignty with Beam AI, Salesforce Agentforce, and Claude…
════════════════════════
𐀪 Author: Terri Smith
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:25:33 GMT
════════════════════════
⌗ Tags: #python #claude #ai #technology #hacking
Medium
The Agentic Takeover: Hacking Digital Sovereignty with Beam AI, Salesforce Agentforce, and Claude Desktop
Why 2026 is the year we stop managing software and start managing outcomes.
13 views
Daily Writeups
⤷ Title: Hackers Hate This Browser Trick That Exposes Shady Domains!!
════════════════════════
𐀪 Author: cybrNK
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:18:44 GMT
════════════════════════
⌗ Tags: #osint #cybersecurity #hacking #threat_intelligence #chrome_extension
Medium
Hackers Hate This Browser Trick That Exposes Shady Domains!!
Mitaka is a practical browser extension for OSINT work that helps you inspect suspicious IPs, domains, URLs, hashes, emails, and other…
8 views
Daily Writeups
⤷ Title: IDE — An easy box to polish your enumeration skills!
════════════════════════
𐀪 Author: NullxCipher
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:21:24 GMT
════════════════════════
⌗ Tags: #easybox #tryhackme_walkthrough #web_hacking #tryhackme #ctf_writeup
Medium
IDE — An easy box to polish your enumeration skills!
THM ROOM LINK
20 views
Daily Writeups
⤷ Title: My First Flags: What the MythX Endgame CTF Taught Me in 24 Hours
════════════════════════
𐀪 Author: Asmita Das
════════════════════════
ⴵ Time: Thu, 07 May 2026 02:08:03 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ethical_hacking #ctf #web_security #cybersecurity
Medium
My First Flags: What the MythX Endgame CTF Taught Me in 24 Hours
Four web challenges, a browser, and the humbling experience of learning that the most dangerous vulnerabilities are often the most obvious…
29 views
Daily Writeups
⤷ Title: vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:45:00 +0530
════════════════════════
⌗ Tags: No_Tags
26 views