Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Massive PostgreSQL Update: 11 Vulnerabilities Patched as Version 14 Hits End-of-Life Warning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 02:12:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2026_6477 #CVE_2026_6637 #database security #DevOps #infosec #Patch Alert #Postgres Update #PostgreSQL #sql injection #SysAdmin
Daily CyberSecurity
Massive PostgreSQL Update: 11 Vulnerabilities Patched as Version 14 Hits End-of-Life Warning
PostgreSQL releases updates for versions 14-18 fixing 11 vulnerabilities (CVSS 8.8). Plus, critical End-of-Life deadline issued for Postgres 14.
8 views
Daily Writeups
⤷ Title: PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:51:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_2005 #database security #Heap Buffer Overflow #infosec #Patch Alert #pgcrypto #PoC Exploit #PostgreSQL #Public Disclosure #rce #Superuser Escalation
Daily CyberSecurity
PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
Technical details and GitHub PoC exploits disclosed for PostgreSQL pgcrypto CVE-2026-2005. Low-privilege users can seize root superuser RCE. Patch now!
11 views
Daily Writeups
⤷ Title: Breaking the AI Sandbox: Critical Flowise Flaw (CVE-2026-46442) Grants Host-Level RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:40:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agent Security #code_injection #CVE_2026_46442 #Cyber Security #Flowise #infosec #LLM Orchestration #NodeVM #Patch Alert #Remote Code Execution #Sandbox Escape
Daily CyberSecurity
Breaking the AI Sandbox: Critical Flowise Flaw (CVE-2026-46442) Grants Host-Level RCE
CVE-2026-46442 in Flowise allows authenticated users to escape the NodeVM sandbox and execute system commands. Secure your AI infrastructure now!
18 views
Daily Writeups
⤷ Title: Critical Portainer Flaws Grant Restricted Users Root Access to the Host
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:10:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container escape #CVE_2026_44848 #CVE_2026_44849 #Cyber Security #DevSecOps #Docker Swarm #infosec #Patch Alert #Portainer #privilege escalation #RBAC Bypass
Daily CyberSecurity
Critical Portainer Flaws Grant Restricted Users Root Access to the Host
Portainer fixes two critical 9.4 CVSS flaws (CVE-2026-44848/49) allowing instant container escape to host root. Patch your environments now!
14 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS: Severe SQL Injection Flaw Exposed in Marten .NET Document Store Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:04:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET Security #ACID Document Database #CVE_2026_45288 #Cyber Security #Full_Text Search #infosec #Marten .NET #Patch Alert #PostgreSQL #sql injection
Daily CyberSecurity
Critical 9.8 CVSS: Severe SQL Injection Flaw Exposed in Marten .NET Document Store Engine
Marten .NET library suffers a critical 9.8 CVSS SQL injection flaw (CVE-2026-45288). Learn how to block the exploit and patch your databases now!
17 views
Daily Writeups
⤷ Title: Ethereum Deep Dive Part 2: EVM & Opcodes
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:31:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #smart_contracts #web3 #ethereum
Medium
Ethereum Deep Dive Part 2: EVM & Opcodes
Series: Web3 Security Zero se Advance | Article #4 By HackerMD | 24 min read
26 views
Daily Writeups
⤷ Title: TryHackMe : Server-side Template Injection Task 8
════════════════════════
𐀪 Author: Rindaman666
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:15:33 GMT
════════════════════════
⌗ Tags: #learning #data_science #ethical_hacking #tryhackme #cybersecurity
Medium
TryHackMe : Server-side Template Injection Task 8
Exploit various templating engines that lead to SSTI vulnerability.
34 views
Daily Writeups
⤷ Title: Network Revision — part 5
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:52:06 GMT
════════════════════════
⌗ Tags: #web_development #cyber_security_awareness #cybersecurity #ethical_hacking #infosec
Medium
Network Revision — part 5
How does websites work ?
29 views
Daily Writeups
⤷ Title: Paywall bypass exposing the premium articles for free
════════════════════════
𐀪 Author: LogicHunter
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:50:09 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #hacking #ctf #cybersecurity
Medium
Paywall bypass exposing the premium articles for free
Hi everyone,
40 views
Daily Writeups
⤷ Title: Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 19 May 2026 10:58:06 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 19 May 2026 10:24:17 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: Boot Partition Bottleneck: Microsoft Confirms Windows 11 Update KB5089549 Fails with Error 0x800f0922
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 06:52:07 +0000
════════════════════════
⌗ Tags: #Windows #EFI System Partition #Enterprise Group Policy #Error 0x800f0922 #ESP Low Space #KB5089549 #Known Issue Rollback #Patch Tuesday 2026 #ServicingBootFiles #SpaceCheck #Windows 11
Daily CyberSecurity
Boot Partition Bottleneck: Microsoft Confirms Windows 11 Update KB5089549 Fails with Error 0x800f0922
Microsoft confirms Windows 11 update KB5089549 fails and rolls back at 35% with error 0x800f0922 on systems with low EFI partition storage. Learn the fix.
23 views
Daily Writeups
⤷ Title: Shai-Hulud Returns: Massive npm Supply Chain Attack Hijacks AntV Ecosystem to Scrape GitHub Runner Memory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 06:52:05 +0000
════════════════════════
⌗ Tags: #Malware #AntV Ecosystem #atool #Claude Code Hijack #Cyber Security #GitHub Actions #infosec #Mini Shai_Hulud #npm Worm #Runner Memory Scraper #supply chain attack #timeago.js
Daily CyberSecurity
Shai-Hulud Returns: Massive npm Supply Chain Attack Hijacks AntV Ecosystem to Scrape GitHub Runner Memory
The Mini Shai-Hulud npm worm has hijacked the atool account, poisoning AntV & timeago.js to scrape GitHub runner memory. Execute a full reset now!
13 views
Daily Writeups
⤷ Title: AI “Vibe Coding” Fuels a Phishing Free-For-All: How EvilTokens Bypasses Microsoft 365 MFA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 06:11:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Conditional Access #Cyber Security #Device Code Phishing #EvilTokens #infosec #MFA Bypass #Microsoft 365 #PhaaS #Phishing_as_a_Service #Proofpoint #Vibe Coding
Daily CyberSecurity
AI "Vibe Coding" Fuels a Phishing Free-For-All: How EvilTokens Bypasses Microsoft 365 MFA
AI "vibe coding" and the EvilTokens PhaaS platform are supercharging device code phishing to bypass Microsoft 365 MFA. Secure your network today!
14 views
Daily Writeups
⤷ Title: Microsoft Explains the New “SecureBoot” Folder in Windows 11 KB5089549 Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 05:43:42 +0000
════════════════════════
⌗ Tags: #Windows #C:\Windows\SecureBoot #Detect_SecureBootCertUpdateStatus #Device Security #Enterprise Fleet Management #KB5089549 #PowerShell Script #Secure Boot Expiration #Trust Chain Renovation #UEFI CA 2023 #Windows 11 May Update
Daily CyberSecurity
Microsoft Explains the New "SecureBoot" Folder in Windows 11 KB5089549 Update
Seeing a new SecureBoot folder under C:Windows? Microsoft confirms it is part of an essential KB5089549 update to replace expiring 2011 UEFI certificates.
12 views
Daily Writeups
⤷ Title: Curiosity, never giving up, and a little adventure — that’s all it takes!
════════════════════════
𐀪 Author: Ghost
════════════════════════
ⴵ Time: Tue, 19 May 2026 05:57:07 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #ethical_hacking #red_team #penetration_testing
Medium
Curiosity, never giving up, and a little adventure — that’s all it takes!
You guys want to see some real hacking? Well, get ready — let’s goooooooooooooooooooooooooooooooooo!
14 views
Daily Writeups
⤷ Title: The XSS Escalation Playbook: From Basic Reflection to DOM Breakouts
════════════════════════
𐀪 Author: Sau Rav
════════════════════════
ⴵ Time: Tue, 19 May 2026 05:33:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #xss_attack #penetration_testing #cybersecurity
Medium
The XSS Escalation Playbook: From Basic Reflection to DOM Breakouts
A comprehensive breakdown of mapping, context breakouts, WAF evasion, and DOM architecture attacks.
13 views
Daily Writeups
⤷ Title: The Ultimate Guide to Launching a Cyber Security Career: Why Hands-On Summer Internship Training is…
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Tue, 19 May 2026 05:59:51 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #ethical_hacking
Medium
The Ultimate Guide to Launching a Cyber Security Career: Why Hands-On Summer Internship Training is…
The landscape of entry-level engineering and technology recruitment has fundamentally shifted. Gone are the days when a stellar academic…
18 views
Daily Writeups
⤷ Title: Exposing the Scam Industry — Ethical Investigation, OSINT & Scam Infrastructure Analysis (Series…
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 19 May 2026 05:21:21 GMT
════════════════════════
⌗ Tags: #hacking #security #true_crime #money #osint
Medium
🎭 Exposing the Scam Industry — Ethical Investigation, OSINT & Scam Infrastructure Analysis (Series Introduction)
By Ghostyjoe
15 views
Daily Writeups
⤷ Title: Network Revision — PART 6
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:59:59 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #web_development #ethical_hacking #infosec #cybersecurity
Medium
Network Revision — PART 6
Module 3 How the web works ?
21 views
Daily Writeups
⤷ Title: The Dark Side of QR Codes Nobody Talks About
════════════════════════
𐀪 Author: pavani
════════════════════════
ⴵ Time: Tue, 19 May 2026 06:45:23 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #penetration_testing
Medium
The Dark Side of QR Codes Nobody Talks About
How One Simple Scan Can Open the Door to Scams, Malware, and Digital Theft 📱⚠️
34 views