Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: PoC Exploit Code Publicly Released: New “PinTheft” Linux Flaw Overwrites Page Cache for Instant Root
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:30:01 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #infosec #io_uring #Kernel Security #Linux Exploit #LPE #PinTheft #PoC Disclosed #privilege escalation #RDS Protocol #SysAdmin #V12 Security
Daily CyberSecurity
PoC Exploit Code Publicly Released: New "PinTheft" Linux Flaw Overwrites Page Cache for Instant Root
Technical details and a working PoC exploit are public for PinTheft, a critical Linux local privilege escalation bug. Block the RDS module now.
19 views
Daily Writeups
⤷ Title: Guide to Race Conditions: Types, Exploitation, and Mitigation in APIs
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #cybersecurity #hacking #race_condition
Medium
Guide to Race Conditions: Types, Exploitation, and Mitigation in APIs
Learn what a race condition is, how it can be exploited, and how to mitigate it.
22 views
Daily Writeups
⤷ Title: Breaking OAuth Trust: An Analysis of CVE-2026–45430 in Backdrop CMS
════════════════════════
𐀪 Author: swordmein
════════════════════════
ⴵ Time: Tue, 19 May 2026 23:29:41 GMT
════════════════════════
⌗ Tags: #pentesting #cve #oauth #bug_bounty #cybersecurity
Medium
Breaking OAuth Trust: An Analysis of CVE-2026–45430 in Backdrop CMS
Recently, a critical vulnerability affecting the Salesforce module of Backdrop CMS was assigned as CVE-2026–45430.
21 views
Daily Writeups
⤷ Title: CTF de Entrada — Tarponise 2026
════════════════════════
𐀪 Author: Lmventura
════════════════════════
ⴵ Time: Tue, 19 May 2026 23:37:58 GMT
════════════════════════
⌗ Tags: #hacking #ctf_writeup #cybersecurity #segurança_da_informação #seginfo
Medium
CTF de Entrada — Tarponise 2026
Fala pessoal! Para quem não me conhece, sou Lucas Ventura, um dos organizadores do Tarponise, nosso projeto de extensão focado em…
19 views
Daily Writeups
⤷ Title: 4 Windows Compromise Patterns Every SOC Analyst Should Recognize on Sight
════════════════════════
𐀪 Author: Jbird
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:58:33 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #information_security #cybersecurity #infosec
Medium
4 Windows Compromise Patterns Every SOC Analyst Should Recognize on Sight
The host-level indicators that show up in almost every commodity Windows compromise, with the PowerShell and Sysmon queries to find them.
17 views
Daily Writeups
⤷ Title: Port Scanner
════════════════════════
𐀪 Author: Tinny
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:05:59 GMT
════════════════════════
⌗ Tags: #python #penetration_testing #cybersecurity #infosec #ethical_hacking
Medium
Port Scanner
I Built a Port Scanner from Scratch — Here’s What It Taught Me About How Hackers Think
22 views
Daily Writeups
⤷ Title: Linux Privilege Escalation: Basics | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #privilege_escalation #linux #tryhackme
Medium
Linux Privilege Escalation: Basics | TryHackMe
Learn the fundamentals of Linux privilege escalation. From enumeration to exploitation, get hands-on with over 8 different privilege…
23 views
Daily Writeups
⤷ Title: Beyond the Phone: Google Unveils Wear OS 7 with “Wear Widgets” and Wrist-Bound AI Agents
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:33:58 +0000
════════════════════════
⌗ Tags: #Technology #Android 17 Design #AppFunctions API #Bluetooth Output Switcher #Create My Widget #Gemini Wearable Agent #Google I/O 2026 #Live Updates Smartwatch #Smartwatch Automation #Wear OS 7 Update #Wear Widgets
Daily CyberSecurity
Beyond the Phone: Google Unveils Wear OS 7 with "Wear Widgets" and Wrist-Bound AI Agents
At Google I/O 2026, Google launched Wear OS 7. The smartwatch OS replaces old Tiles with dynamic Wear Widgets and opens up wrist-bound Gemini AI agents.
23 views
Daily Writeups
⤷ Title: Microsoft Breaks Container Boundaries: Azure Linux 4.0 Drops as a Full General-Purpose Server OS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:26:17 +0000
════════════════════════
⌗ Tags: #Linux #Azure Linux 4.0 #Bare_Metal Cloud Server #Fedora Linux Upstream #Headless Server OS #Microsoft Server Distribution #Open Source Summit 2026 #Red Hat Ubuntu Coexistence #Software Supply Chain Safety #Virtual Machine Image #WSL Windows 11 Parity
Daily CyberSecurity
Microsoft Breaks Container Boundaries: Azure Linux 4.0 Drops as a Full General-Purpose Server OS
Microsoft releases Azure Linux 4.0 at the Open Source Summit, transforming its custom OS into a full general-purpose VM server distribution based on Fedora.
20 views
Daily Writeups
⤷ Title: Passwords and SMS Are Dead: Microsoft Begins Sunsetting Text Message Verification for Consumer Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:22:28 +0000
════════════════════════
⌗ Tags: #Technology #Credential Harvesting Mitigation #Cryptographic Key Pair #Microsoft Identity Core #Microsoft SMS Deprecation #Multi_Factor Authentication Safety #Origin Binding Phishing Protection #Passkey Authentication #Passwordless Microsoft Account #SIM Swapping Defense #Windows Hello Security
Daily CyberSecurity
Passwords and SMS Are Dead: Microsoft Begins Sunsetting Text Message Verification for Consumer Accounts
Microsoft has announced the deprecation of SMS verification codes for consumer accounts, forcing a shift to secure passkeys and biometric authentication.
12 views
Daily Writeups
⤷ Title: Critical ZKTeco CCTV Flaw (CVE-2026-8598) Leaks Admin Credentials Without Authentication
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:16:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #Authentication Bypass #Camera Hijacking #CCTV Vulnerability #CVE_2026_8598 #Cyber Security #firmware update #infosec #IoT security #Patch Alert #ZKTeco
Daily CyberSecurity
Critical ZKTeco CCTV Flaw (CVE-2026-8598) Leaks Admin Credentials Without Authentication
ZKTeco patches a critical 9.1 CVSS flaw (CVE-2026-8598) in CCTV cameras leaking admin credentials without authentication. Upgrade your firmware now!
14 views
Daily Writeups
⤷ Title: The End of Unlimited Prompts: Google Drops $100 “AI Ultra” Tier and Shifts to Metered Compute Billing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:13:23 +0000
════════════════════════
⌗ Tags: #Technology #Cloud Economics 2026 #Compute_Used Billing Matrix #Gemini 3.5 Flash #Gemini Spark Agent #Google AI Ultra Tier #Google Antigravity #Google I/O 2026 #Project Genie #Rolling Compute Window #YouTube Premium Bundling
Daily CyberSecurity
The End of Unlimited Prompts: Google Drops $100 "AI Ultra" Tier and Shifts to Metered Compute Billing
At Google I/O 2026, Google launched a $100 AI Ultra tier and shifted its billing model from message limits to a strict, metered Compute-Used matrix.
13 views
Daily Writeups
⤷ Title: Google Teases “Android Halo” to Track Invisible 24/7 AI Agents at a Glance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:07:35 +0000
════════════════════════
⌗ Tags: #Android #Android 17 Operating System #Android Halo Feature #Android Show 2026 #Background Agent Visibility #Contextual Polymorphism #Gemini Spark Status Tracker #Google I/O 2026 #Mobile UX Breakthrough #Persistent Ambient Telemetry #Status Bar AI Morphing
Daily CyberSecurity
Google Teases "Android Halo" to Track Invisible 24/7 AI Agents at a Glance
At Google I/O 2026, Google unveiled Android Halo—a persistent status bar interface coming to Android 17 to subtly track background AI agents.
12 views
Daily Writeups
⤷ Title: Agentic Era Begins: Google DeepMind Launches Gemini 3.5 Flash to Power 24/7 AI Workers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:02:08 +0000
════════════════════════
⌗ Tags: #Technology #AI Studio API #Artificial Analysis Matrix #Frontier Safety Framework #Gemini 3.5 Flash #Gemini 3.5 Pro Release #Gemini Spark Agent #Google Antigravity Framework #Google DeepMind #Sub_Agent Orchestration #Terminal_Bench 2.1
Daily CyberSecurity
Agentic Era Begins: Google DeepMind Launches Gemini 3.5 Flash to Power 24/7 AI Workers
Google DeepMind skips v4.0 to drop Gemini 3.5 Flash. Running 4x faster than rivals, it powers 24/7 autonomous agents via the new Antigravity framework.
12 views
Daily Writeups
⤷ Title: Talk to Your Tech: Google Debuts “Ask YouTube” and Instant Voice “Live” Tools at I/O 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:49:29 +0000
════════════════════════
⌗ Tags: #Technology #Ask YouTube AI Feature #Conversational Voice Prompting #Docs Live #Gemini Omni Integration #Gmail Live #Google I/O 2026 #Google Workspace Live #Keep Live #Multi_Modal Search #YouTube Labs Portal
Daily CyberSecurity
Talk to Your Tech: Google Debuts "Ask YouTube" and Instant Voice "Live" Tools at I/O 2026
At Google I/O 2026, Google unveiled "Ask YouTube" for natural-language video interrogation alongside "Live" voice-prompting across Gmail, Docs, and Keep.
13 views
Daily Writeups
⤷ Title: Keys to the Kingdom: Critical 9.9 CVSS Budibase Flaw Allows Total Tenant Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:40:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Authorization Bypass #Budibase #CVE_2026_46425 #Cyber Security #DevSecOps #Identity Management #infosec #Patch Alert #privilege escalation #SCIM
Daily CyberSecurity
Keys to the Kingdom: Critical 9.9 CVSS Budibase Flaw Allows Total Tenant Takeover
Budibase patches a critical 9.9 CVSS SCIM authorization bypass (CVE-2026-46425). Basic users can delete admins and hijack accounts. Update now!
14 views
Daily Writeups
⤷ Title: Details and PoC Exploit Code Released: Critical Cockpit RCE Flaw Grants Instant Root Shells
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cockpit RCE #Command Injection #Hakai Security #infosec #linux vulnerability #PoC Exploit Released #Red Hat Security #Remote Code Execution #SysAdmin
Daily CyberSecurity
Details and PoC Exploit Code Released: Critical Cockpit RCE Flaw Grants Instant Root Shells
Technical details and a functional Python PoC exploit have been released for CVE-2026-4802, a critical Cockpit flaw giving low-privilege users root.
17 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS: NVIDIA Triton Inference Server Authentication Bypass Threatens AI Workloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:01:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_24207 #Cyber Security #DALI Backend #infosec #machine_learning #NVIDIA Triton Inference Server #Patch Alert #rce
Daily CyberSecurity
Critical 9.8 CVSS: NVIDIA Triton Inference Server Authentication Bypass Threatens AI Workloads
NVIDIA patches a critical 9.8 CVSS authentication bypass (CVE-2026-24207) in Triton Inference Server. Update to r26.03 to secure AI workloads!
12 views
Daily Writeups
⤷ Title: SSRF NEDİR, NASIL ÇALIŞIR?
════════════════════════
𐀪 Author: YavuzSO
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:11:55 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #web_security #hacking #cybersecurity
Medium
SSRF NEDİR, NASIL ÇALIŞIR?
OWASP Top 10'un efsanevi açığı SSRF'i, en temel mantığından WAF bypass taktiklerine kadar pratik ve samimi bir dille inceliyoruz.
13 views
Daily Writeups
⤷ Title: Stack Smasher — Buffer Overflow Walkthrough en Español
════════════════════════
𐀪 Author: h4rveyx
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:30:55 GMT
════════════════════════
⌗ Tags: #ctf #hacking #buffer_overflow #ctf_walkthrough #ctf_writeup
Medium
Stack Smasher — Buffer Overflow Walkthrough en Español
Introducción práctica a Binary Exploitation explotando un stack buffer overflow para sobrescribir variables en memoria.
11 views
Daily Writeups
⤷ Title: I learned how to pitch a demo. Here’s how you can too
════════════════════════
𐀪 Author: Tiffany Jachja
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:19:33 GMT
════════════════════════
⌗ Tags: #hacking #software_engineering #public_speaking #engineering_mangement
Medium
I learned how to pitch a demo. Here’s how you can too
I recently won a company-wide internal hackathon. The grand prize was the opportunity to share your product idea with the company’s COO and…
15 views