Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: PraisonAI CVE-2026-44338 Exploited in the Wild Hours After Patch Disclosure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:00:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_44338 #Cyber Security #Exploit in the Wild #infosec #LLM Security #Multi_Agent Orchestration #PraisonAI #Sysdig TRT
Daily CyberSecurity
PraisonAI CVE-2026-44338 Exploited in the Wild Hours After Patch Disclosure
Sysdig warns: PraisonAI (CVE-2026-44338) exploited in under 4 hours. Attackers bypassed auth to hijack agents and drain API quotas. Update to 4.6.34 now!
7 views
Daily Writeups
⤷ Title: 9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:43:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BDAT #CVE_2026_45185 #Exim #GnuTLS #heap corruption #infosec #Mail Server Security #Patch Now #rce #SMTP CHUNKING #Vulnerability Alert #XBOW
Daily CyberSecurity
9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover
Urgent: Exim fixes a 9.8 severity RCE (CVE-2026-45185) affecting GnuTLS builds. A single-byte heap corruption allows for server takeover. Update to 4.99.3 now!
12 views
Daily Writeups
⤷ Title: Fortinet Critical Alert: 9.1 Severity Flaws in FortiSandbox and FortiAuthenticator Risk Remote Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:29:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #CVE_2026_26083 #CVE_2026_44277 #Cyber Security #FortiAuthenticator #Fortinet #FortiSandbox #IAM #infosec #Patch Alert #rce #Web UI Security
Daily CyberSecurity
Fortinet Critical Alert: 9.1 Severity Flaws in FortiSandbox and FortiAuthenticator Risk Remote Takeover
Urgent: Fortinet warns of 9.1 severity flaws in FortiSandbox (CVE-2026-26083) and FortiAuthenticator (CVE-2026-44277). Patch now to prevent unauthorized RCE.
11 views
Daily Writeups
⤷ Title: Multiple Memory Flaws in Dnsmasq Threaten Millions of Connected Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:27:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CERT/CC #CVE_2026_2291 #DHCPv6 #DNS Cache Poisoning #dnsmasq #DNSSEC #infosec #IoT security #network_security #Root Privilege Escalation #Router Patch
Daily CyberSecurity
Multiple Memory Flaws in Dnsmasq Threaten Millions of Connected Devices
In the foundational architecture of small-to-medium networks and home routing devices, dnsmasq is the open-source networking tool that quietly handles DNS forwarding, DHCP, and network boot servic…
15 views
Daily Writeups
⤷ Title: Critical Casdoor Vulnerability CVE-2026-44213 Allows Arbitrary File Overwrites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:01:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #Casdoor #CERT/CC #CVE_2026_44213 #Cyber Security #IAM Security #infosec #MCP #Model Context Protocol #Path Traversal #Vulnerability Alert
Daily CyberSecurity
Critical Casdoor Vulnerability CVE-2026-44213 Allows Arbitrary File Overwrites
Urgent: Casdoor IAM platform hit by critical file write flaw (CVE-2026-44213). Attackers can bypass sandboxes to overwrite databases and gain host access.
19 views
Daily Writeups
⤷ Title: HSC RTV CTF — Msg Packed (Reversing — 250 pts)
════════════════════════
𐀪 Author: Life of a Pentester
════════════════════════
ⴵ Time: Wed, 13 May 2026 02:03:04 GMT
════════════════════════
⌗ Tags: #hacking #ctf #reversing #reverse_engineering #cybersecurity
Medium
HSC RTV CTF — Msg Packed (Reversing — 250 pts)
This reversing challenge was a little easy considering you know what the MessagePack format is, which is a serialized binary data. Think of…
22 views
Daily Writeups
⤷ Title: Forest — HTB Writeup
════════════════════════
𐀪 Author: William Shively
════════════════════════
ⴵ Time: Wed, 13 May 2026 01:13:02 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #active_directory #hackthebox
Medium
Forest — HTB Writeup
Introduction:
26 views
Daily Writeups
⤷ Title: GemStuffer: Attackers Weaponize RubyGems as a Covert Data Drop for UK Gov Scraping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:21:32 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #data exfiltration #GemStuffer #infosec #Malware Analysis #ModernGov #Ruby Security #RubyGems #Socket #supply chain attack #UK Council Security
Daily CyberSecurity
GemStuffer: Attackers Weaponize RubyGems as a Covert Data Drop for UK Gov Scraping
GemStuffer exploits RubyGems as an illicit data transport to scrape UK council portals. Discover how this supply chain attack bypasses standard defenses.
23 views
Daily Writeups
⤷ Title: Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 03:52:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #Cyber Security #double_free #infosec #Patch Alert #PoC #proof_of_concept #rce #Web Server Security
Daily CyberSecurity
Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
Urgent: Public PoC for Apache CVE-2026-23918. A critical double-free in mod_http2 enables unauthenticated DoS and RCE. Update to Apache 2.4.67 immediately.
14 views
Daily Writeups
⤷ Title: Breaking the Impersonation Barrier: A Deep Dive into Entity-Based Authorization Bypass
════════════════════════
𐀪 Author: Sayed
════════════════════════
ⴵ Time: Wed, 13 May 2026 03:29:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #cybersecurity #hacking
Medium
Breaking the Impersonation Barrier: A Deep Dive into Entity-Based Authorization Bypass
When Debug Interfaces Become Attack Surfaces
19 views
Daily Writeups
⤷ Title: How I Lost My Apple Account in 10 Days Despite Two-Factor Authentication and No Apple Device
════════════════════════
𐀪 Author: Jo Teh
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:03:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #technology #personal_story #apple
Medium
How I Lost My Apple Account in 10 Days Despite Two-Factor Authentication and No Apple Device
The First Warning Sign
10 views
Daily Writeups
⤷ Title: Network Revision — part 2
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:52:11 GMT
════════════════════════
⌗ Tags: #web_development #infosec #cyber_security_awareness #cybersecurity #ethical_hacking
Medium
Network Revision — part 2
OSI Model
10 views
Daily Writeups
⤷ Title: Network Revision — part 1
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:51:02 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #infosec #ethical_hacking #web_development
Medium
Network Revision — part 1
→ What is networking ?
18 views
Daily Writeups
⤷ Title: I did not set out to find a critical vulnerability on my own computer.
════════════════════════
𐀪 Author: Boneycyriac
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:32:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #nmap #network_security #python #penetration_testing
Medium
I did not set out to find a critical vulnerability on my own computer.
I was just trying to learn how network scanners work. Build something. Understand the tools that security engineers use every day. What…
18 views
Daily Writeups
⤷ Title: Anatomi Serangan: Membedah Metodologi Penetration Testing
════════════════════════
𐀪 Author: Khairielputra
════════════════════════
ⴵ Time: Wed, 13 May 2026 03:39:38 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #cybersecurity #red_team #information_security
Medium
Anatomi Serangan: Membedah Metodologi Penetration Testing
Dunia keamanan siber tidak hanya soal membangun benteng yang tinggi melalui enkripsi atau kebijakan Zero Trust yang ketat. Memiliki teori…
26 views
Daily Writeups
⤷ Title: JDownloader Site Breach Installs Rootkits that Kill Your Antivirus
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 06:09:45 +0000
════════════════════════
⌗ Tags: #Malware #antivirus bypass #C2 Dead_Drop #Code Integrity #Cyber Security #Gen Digital #infosec #JDownloader #Malware Analysis #Pyarmor #r77 Rootkit #supply chain attack #WDAC
Daily CyberSecurity
JDownloader Site Breach Installs Rootkits that Kill Your Antivirus
Gen Digital exposes a JDownloader site breach (May 6-7, 2026). Attackers used WDAC policies to kill antivirus and r77 rootkits for total system invisibility.
23 views
Daily Writeups
⤷ Title: Fast Flux DNS & Bulletproof Hosting: The Infrastructure Behind Persistent Threats
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 13 May 2026 06:50:34 GMT
════════════════════════
⌗ Tags: #bug_bounty #artificial_intelligence #hacking #dns #cybersecurity
Medium
Fast Flux DNS & Bulletproof Hosting: The Infrastructure Behind Persistent Threats
Every serious threat actor needs two things: infrastructure that stays online no matter what, and infrastructure that’s nearly impossible…
21 views
Daily Writeups
⤷ Title: 20+ Vulnerabilities in a Static Website — Bug Bounty Cheat Codes
════════════════════════
𐀪 Author: 0xMaximux
════════════════════════
ⴵ Time: Wed, 13 May 2026 06:45:31 GMT
════════════════════════
⌗ Tags: #security #vulnerability #website #cybersecurity #bug_bounty
16 views
Daily Writeups
⤷ Title: PortSwigger Lab -Broken Access Control (URL-based access control can be circumvented) Writeup
════════════════════════
𐀪 Author: Onlyrahimsec
════════════════════════
ⴵ Time: Wed, 13 May 2026 05:35:14 GMT
════════════════════════
⌗ Tags: #broken_access_control #bug_bounty_writeup #rahimsec #bug_bounty #portswigger_lab
Medium
PortSwigger Lab -Broken Access Control (URL-based access control can be circumvented) Writeup
Lab 05: URL-based access control can be circumvented
8 views
Daily Writeups
⤷ Title: A Multi-Million Dollar Bank Heist that no one Talks About
════════════════════════
𐀪 Author: Fadyl Raffi
════════════════════════
ⴵ Time: Wed, 13 May 2026 06:10:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #crime #hacking #true_crime #cybercrime
Medium
A Multi-Million Dollar Bank Heist that no one Talks About
Just another day at the office.
14 views
Daily Writeups
⤷ Title: OverTheWire Bandit Walkthrough — Level 1 → 2 | 30-Day Cybersecurity Learning Journey (Day 2)
════════════════════════
𐀪 Author: William | Cybersecurity & SOC Analyst
════════════════════════
ⴵ Time: Wed, 13 May 2026 05:12:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #security #linux #infosec
9 views