Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:30:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25786 #industrial automation #infosec #Manufacturing Security #OT Security #Patch Alert #PLC Security #Siemens #SIMATIC S7 #TIA Portal #XSS
Daily CyberSecurity
Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers
Critical Siemens Alert: 9.3 severity XSS flaws hit SIMATIC S7 PLCs. Attackers can hijack sessions via web interfaces. Update to V3.1.6 or follow mitigations.
14 views
Daily Writeups
⤷ Title: 9.8 Severity Alert: Malicious Git Branches Can Hijack Your WebdriverIO Build Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:30:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BrowserStack #CI/CD security #Command Injection #CVE_2026_25244 #DevOps #GitHub Security #infosec #rce #supply chain attack #Test Automation #WebdriverIO
Daily CyberSecurity
9.8 Severity Alert: Malicious Git Branches Can Hijack Your WebdriverIO Build Servers
Critical Alert: CVE-2026-25244 (CVSS 9.8) in WebdriverIO allows RCE via unsanitized git branch names. Secure your CI/CD pipeline and update to 9.24.0 now.
8 views
Daily Writeups
⤷ Title: Microsoft Patch Tuesday May 2026 Fixes 137 Flaws, Including Netlogon RCE and Critical SSO Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:18:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Azure AI Foundry #CVE_2026_41089 #Cyber Security #Hyper_V #infosec #M365 Copilot #Microsoft #Netlogon #Patch Tuesday #rce #SSO Bypass #Windows Security
Daily CyberSecurity
Microsoft Patch Tuesday May 2026 Fixes 137 Flaws, Including Netlogon RCE and Critical SSO Bypass
Microsoft’s May 2026 update fixes 137 vulnerabilities, including 30 Critical RCE and EoP flaws. Prioritize patches for Netlogon, Office, and M365 Copilot now.
12 views
Daily Writeups
⤷ Title: CVSS 10 Alert: SandboxJS Critical Escape Vulnerability Enables Host Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:02:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_43898 #infosec #JavaScript Security #rce #Remote Code Execution #Sandbox Escape #SandboxJS #Supply Chain Security #Vulnerability Alert #Web Security
Daily CyberSecurity
CVSS 10 Alert: SandboxJS Critical Escape Vulnerability Enables Host Takeover
Critical Alert: CVE-2026-43898 (CVSS 10) in SandboxJS allows a total sandbox escape and RCE. Update to version 0.9.6 immediately to secure your host.
8 views
Daily Writeups
⤷ Title: PraisonAI CVE-2026-44338 Exploited in the Wild Hours After Patch Disclosure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:00:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_44338 #Cyber Security #Exploit in the Wild #infosec #LLM Security #Multi_Agent Orchestration #PraisonAI #Sysdig TRT
Daily CyberSecurity
PraisonAI CVE-2026-44338 Exploited in the Wild Hours After Patch Disclosure
Sysdig warns: PraisonAI (CVE-2026-44338) exploited in under 4 hours. Attackers bypassed auth to hijack agents and drain API quotas. Update to 4.6.34 now!
7 views
Daily Writeups
⤷ Title: 9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:43:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BDAT #CVE_2026_45185 #Exim #GnuTLS #heap corruption #infosec #Mail Server Security #Patch Now #rce #SMTP CHUNKING #Vulnerability Alert #XBOW
Daily CyberSecurity
9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover
Urgent: Exim fixes a 9.8 severity RCE (CVE-2026-45185) affecting GnuTLS builds. A single-byte heap corruption allows for server takeover. Update to 4.99.3 now!
12 views
Daily Writeups
⤷ Title: Fortinet Critical Alert: 9.1 Severity Flaws in FortiSandbox and FortiAuthenticator Risk Remote Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:29:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #CVE_2026_26083 #CVE_2026_44277 #Cyber Security #FortiAuthenticator #Fortinet #FortiSandbox #IAM #infosec #Patch Alert #rce #Web UI Security
Daily CyberSecurity
Fortinet Critical Alert: 9.1 Severity Flaws in FortiSandbox and FortiAuthenticator Risk Remote Takeover
Urgent: Fortinet warns of 9.1 severity flaws in FortiSandbox (CVE-2026-26083) and FortiAuthenticator (CVE-2026-44277). Patch now to prevent unauthorized RCE.
11 views
Daily Writeups
⤷ Title: Multiple Memory Flaws in Dnsmasq Threaten Millions of Connected Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:27:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CERT/CC #CVE_2026_2291 #DHCPv6 #DNS Cache Poisoning #dnsmasq #DNSSEC #infosec #IoT security #network_security #Root Privilege Escalation #Router Patch
Daily CyberSecurity
Multiple Memory Flaws in Dnsmasq Threaten Millions of Connected Devices
In the foundational architecture of small-to-medium networks and home routing devices, dnsmasq is the open-source networking tool that quietly handles DNS forwarding, DHCP, and network boot servic…
15 views
Daily Writeups
⤷ Title: Critical Casdoor Vulnerability CVE-2026-44213 Allows Arbitrary File Overwrites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:01:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #Casdoor #CERT/CC #CVE_2026_44213 #Cyber Security #IAM Security #infosec #MCP #Model Context Protocol #Path Traversal #Vulnerability Alert
Daily CyberSecurity
Critical Casdoor Vulnerability CVE-2026-44213 Allows Arbitrary File Overwrites
Urgent: Casdoor IAM platform hit by critical file write flaw (CVE-2026-44213). Attackers can bypass sandboxes to overwrite databases and gain host access.
19 views
Daily Writeups
⤷ Title: HSC RTV CTF — Msg Packed (Reversing — 250 pts)
════════════════════════
𐀪 Author: Life of a Pentester
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:03:04 GMT
════════════════════════
⌗ Tags: #hacking #ctf #reversing #reverse_engineering #cybersecurity
Medium
HSC RTV CTF — Msg Packed (Reversing — 250 pts)
This reversing challenge was a little easy considering you know what the MessagePack format is, which is a serialized binary data. Think of…
22 views
Daily Writeups
⤷ Title: Forest — HTB Writeup
════════════════════════
𐀪 Author: William Shively
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:13:02 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #active_directory #hackthebox
Medium
Forest — HTB Writeup
Introduction:
26 views
Daily Writeups
⤷ Title: GemStuffer: Attackers Weaponize RubyGems as a Covert Data Drop for UK Gov Scraping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:21:32 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #data exfiltration #GemStuffer #infosec #Malware Analysis #ModernGov #Ruby Security #RubyGems #Socket #supply chain attack #UK Council Security
Daily CyberSecurity
GemStuffer: Attackers Weaponize RubyGems as a Covert Data Drop for UK Gov Scraping
GemStuffer exploits RubyGems as an illicit data transport to scrape UK council portals. Discover how this supply chain attack bypasses standard defenses.
23 views
Daily Writeups
⤷ Title: Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 03:52:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #Cyber Security #double_free #infosec #Patch Alert #PoC #proof_of_concept #rce #Web Server Security
Daily CyberSecurity
Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
Urgent: Public PoC for Apache CVE-2026-23918. A critical double-free in mod_http2 enables unauthenticated DoS and RCE. Update to Apache 2.4.67 immediately.
14 views
Daily Writeups
⤷ Title: Breaking the Impersonation Barrier: A Deep Dive into Entity-Based Authorization Bypass
════════════════════════
𐀪 Author: Sayed
════════════════════════
ⴵ Time: Wed, 13 May 2026 03:29:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #cybersecurity #hacking
Medium
Breaking the Impersonation Barrier: A Deep Dive into Entity-Based Authorization Bypass
When Debug Interfaces Become Attack Surfaces
19 views
Daily Writeups
⤷ Title: How I Lost My Apple Account in 10 Days Despite Two-Factor Authentication and No Apple Device
════════════════════════
𐀪 Author: Jo Teh
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:03:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #technology #personal_story #apple
Medium
How I Lost My Apple Account in 10 Days Despite Two-Factor Authentication and No Apple Device
The First Warning Sign
10 views
Daily Writeups
⤷ Title: Network Revision — part 2
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:52:11 GMT
════════════════════════
⌗ Tags: #web_development #infosec #cyber_security_awareness #cybersecurity #ethical_hacking
Medium
Network Revision — part 2
OSI Model
10 views
Daily Writeups
⤷ Title: Network Revision — part 1
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:51:02 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #infosec #ethical_hacking #web_development
Medium
Network Revision — part 1
→ What is networking ?
18 views
Daily Writeups
⤷ Title: I did not set out to find a critical vulnerability on my own computer.
════════════════════════
𐀪 Author: Boneycyriac
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:32:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #nmap #network_security #python #penetration_testing
Medium
I did not set out to find a critical vulnerability on my own computer.
I was just trying to learn how network scanners work. Build something. Understand the tools that security engineers use every day. What…
18 views
Daily Writeups
⤷ Title: Anatomi Serangan: Membedah Metodologi Penetration Testing
════════════════════════
𐀪 Author: Khairielputra
════════════════════════
ⴵ Time: Wed, 13 May 2026 03:39:38 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #cybersecurity #red_team #information_security
Medium
Anatomi Serangan: Membedah Metodologi Penetration Testing
Dunia keamanan siber tidak hanya soal membangun benteng yang tinggi melalui enkripsi atau kebijakan Zero Trust yang ketat. Memiliki teori…
26 views
Daily Writeups
⤷ Title: JDownloader Site Breach Installs Rootkits that Kill Your Antivirus
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 06:09:45 +0000
════════════════════════
⌗ Tags: #Malware #antivirus bypass #C2 Dead_Drop #Code Integrity #Cyber Security #Gen Digital #infosec #JDownloader #Malware Analysis #Pyarmor #r77 Rootkit #supply chain attack #WDAC
Daily CyberSecurity
JDownloader Site Breach Installs Rootkits that Kill Your Antivirus
Gen Digital exposes a JDownloader site breach (May 6-7, 2026). Attackers used WDAC policies to kill antivirus and r77 rootkits for total system invisibility.
23 views
Daily Writeups
⤷ Title: Fast Flux DNS & Bulletproof Hosting: The Infrastructure Behind Persistent Threats
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 13 May 2026 06:50:34 GMT
════════════════════════
⌗ Tags: #bug_bounty #artificial_intelligence #hacking #dns #cybersecurity
Medium
Fast Flux DNS & Bulletproof Hosting: The Infrastructure Behind Persistent Threats
Every serious threat actor needs two things: infrastructure that stays online no matter what, and infrastructure that’s nearly impossible…
21 views