Daily Writeups
@Daily_Writeups
3.83K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.83K subscribers
Daily Writeups
⤷ Title: Details and PoC Exploit Code Released: Critical Cockpit RCE Flaw Grants Instant Root Shells
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cockpit RCE #Command Injection #Hakai Security #infosec #linux vulnerability #PoC Exploit Released #Red Hat Security #Remote Code Execution #SysAdmin
Daily CyberSecurity
Details and PoC Exploit Code Released: Critical Cockpit RCE Flaw Grants Instant Root Shells
Technical details and a functional Python PoC exploit have been released for CVE-2026-4802, a critical Cockpit flaw giving low-privilege users root.
18 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS: NVIDIA Triton Inference Server Authentication Bypass Threatens AI Workloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:01:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Authentication Bypass #CVE_2026_24207 #Cyber Security #DALI Backend #infosec #machine_learning #NVIDIA Triton Inference Server #Patch Alert #rce
Daily CyberSecurity
Critical 9.8 CVSS: NVIDIA Triton Inference Server Authentication Bypass Threatens AI Workloads
NVIDIA patches a critical 9.8 CVSS authentication bypass (CVE-2026-24207) in Triton Inference Server. Update to r26.03 to secure AI workloads!
13 views
Daily Writeups
⤷ Title: SSRF NEDİR, NASIL ÇALIŞIR?
════════════════════════
𐀪 Author: YavuzSO
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:11:55 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #web_security #hacking #cybersecurity
Medium
SSRF NEDİR, NASIL ÇALIŞIR?
OWASP Top 10'un efsanevi açığı SSRF'i, en temel mantığından WAF bypass taktiklerine kadar pratik ve samimi bir dille inceliyoruz.
13 views
Daily Writeups
⤷ Title: Stack Smasher — Buffer Overflow Walkthrough en Español
════════════════════════
𐀪 Author: h4rveyx
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:30:55 GMT
════════════════════════
⌗ Tags: #ctf #hacking #buffer_overflow #ctf_walkthrough #ctf_writeup
Medium
Stack Smasher — Buffer Overflow Walkthrough en Español
Introducción práctica a Binary Exploitation explotando un stack buffer overflow para sobrescribir variables en memoria.
11 views
Daily Writeups
⤷ Title: I learned how to pitch a demo. Here’s how you can too
════════════════════════
𐀪 Author: Tiffany Jachja
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:19:33 GMT
════════════════════════
⌗ Tags: #hacking #software_engineering #public_speaking #engineering_mangement
Medium
I learned how to pitch a demo. Here’s how you can too
I recently won a company-wide internal hackathon. The grand prize was the opportunity to share your product idea with the company’s COO and…
15 views
Daily Writeups
⤷ Title: Weekly Threat Intelligence Report 18 May 2026
════════════════════════
𐀪 Author: NSHC ThreatRecon Team
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:13:00 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #cyberattack #hacking #threat_intelligence
12 views
Daily Writeups
⤷ Title: 【逆向筆記】拆解 jpg中的一句話木馬
════════════════════════
𐀪 Author: segalee
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:01:04 GMT
════════════════════════
⌗ Tags: #malware_analysis #infosec #trojan #blue_team #cybersecurity
Medium
【逆向筆記】拆解 jpg中的一句話木馬
因為預計今年年底報考 TCM 的 PMRP，所以會開始學習有關逆向分析的知識 該系列會針對獲得的樣本進行逆向分析筆記，因為還在學習中如有錯誤請見諒
13 views
Daily Writeups
⤷ Title: Resolute — HTB Writeup
════════════════════════
𐀪 Author: William Shively
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:01:59 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #windows #active_directory #hackthebox
Medium
Resolute — HTB Writeup
Introduction:
17 views
Daily Writeups
⤷ Title: TryHackMe — Wonderland | Full Walkthrough
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:50:29 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #web_penetration_testing #ctf_writeup #penetration_testing
Medium
TryHackMe — Wonderland | Full Walkthrough
Author: Shikhali Jamalzade GitHub: github.com/alisalive LinkedIn: linkedin.com/in/camalzads
31 views
Daily Writeups
⤷ Title: GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 20 May 2026 09:31:15 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:06:15 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber Security #GitHub Token Rotation #Grafana Labs #Incident Response #infosec #Mini Shai_Hulud #npm Worm #Ransom Demand #Source Code Theft #supply chain attack
Daily CyberSecurity
The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
Grafana Labs confirms a targeted cyberattack and source code theft after a missed token from the Mini Shai-Hulud npm worm left a repository exposed.
25 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 03:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8711 #Denial of Service #F5 Security Advisory #Heap Buffer Overflow #NGINX JavaScript #njs module #Patch Alert #Remote Code Execution #reverse proxy #Web Infrastructure
Daily CyberSecurity
Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
F5 warns of a critical 9.2 CVSS flaw (CVE-2026-8711) in NGINX JavaScript (njs). Unauthenticated attackers can trigger heap overflows and potential RCE.
17 views
Daily Writeups
⤷ Title: Solidity Basics Part 1: Language Fundamentals
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:31:00 GMT
════════════════════════
⌗ Tags: #web3 #solidity #ethereum #smart_contracts #bug_bounty
Medium
Solidity Basics Part 1: Language Fundamentals
Series: Web3 Security Zero se Advance | Article #5 By HackerMD | 25 min read
14 views
Daily Writeups
⤷ Title: ️ Understanding Phishing Attack-SOC”Security Operation Center”
════════════════════════
𐀪 Author: Zoningxtr
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:07:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #python #penetration_testing #web_development #bug_bounty
Medium
🛡️ Understanding Phishing Attack-SOC”Security Operation Center”
🎣 “The Email Looked Legitimate… And That Was the Real Weapon”
17 views
Daily Writeups
⤷ Title: Linux Privilege Escalation: Enumeration | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:17:27 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #enumeration #tryhackme_walkthrough #linux
Medium
Linux Privilege Escalation: Enumeration | TryHackMe | Walkthrough
Task 3 OS Enumeration
21 views
Daily Writeups
⤷ Title: Ethical Hacking Skills for Strong Cybersecurity Foundations
════════════════════════
𐀪 Author: Adhiraj Kasabe
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:50:16 GMT
════════════════════════
⌗ Tags: #ethical_hacking_course #ethical_hacking #ethical_hacking_training #artificial_intelligence #ai
Medium
Ethical Hacking Skills for Strong Cybersecurity Foundations
The Ethical Hacking Foundation Certification kinda helps professionals pick up the essential knowledge to spot vulnerabilities, make sense…
33 views
Daily Writeups
⤷ Title: Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 20 May 2026 10:42:06 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: Kernel Chaos: Linus Torvalds Blasts “Drive-By” AI Bug Reports Paralyzing Linux Maintainers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:48:05 +0000
════════════════════════
⌗ Tags: #Linux #AI Bug Reports #Automated Vulnerability Submissions #Bug Regression #Code Review Fatigue #DevSecOps 2026 #Drive_By Patching #Linus Torvalds #Linux Kernel Development #Open Source Maintainers #Security Mailing List Bottleneck
Daily CyberSecurity
Kernel Chaos: Linus Torvalds Blasts "Drive-By" AI Bug Reports Paralyzing Linux Maintainers
Linus Torvalds warns that a massive influx of automated, duplicate AI bug reports is causing severe administrative fatigue across Linux security mailing lists.
21 views
Daily Writeups
⤷ Title: Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:45:58 +0000
════════════════════════
⌗ Tags: #Malware #AppleSeed #cyber_espionage #HelloDoor #infosec #Kimsuky #MemLoad #PebbleDash #Rust Backdoor #threat intelligence #TryCloudflare #VSCode Remote Tunneling
Daily CyberSecurity
Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
Kimsuky APT evolves its arsenal with "HelloDoor," a new Rust-based backdoor, and hijacks trusted VSCode Remote Tunneling to bypass corporate firewalls.
13 views
Daily Writeups
⤷ Title: Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:43:11 +0000
════════════════════════
⌗ Tags: #Technology #Automated Enforcement Algorithms #Cloud Concentration Risk #Google Cloud Account Suspension #Infrastructure Automation Failure #Multi_Cloud Redundancy #Non_Enterprise Build Throttle #Railway Outage 2026 #Site Reliability Engineering #Unilateral Cloud Termination #UniSuper GCP Incident
Daily CyberSecurity
Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
Developer cloud platform Railway suffers a widespread, catastrophic infrastructure outage after Google Cloud abruptly suspends its corporate account.
11 views
Daily Writeups
⤷ Title: Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:39:53 +0000
════════════════════════
⌗ Tags: #Data Leak #Credential Harvesting Payload #Cryptographic Token Rotation #Developer Endpoint Isolation #Forensic Log Analysis #GitHub Copilot Leak #GitHub Enterprise Server #GitHub Source Code Breach #supply chain attack #TeamPCP Syndicate #VS Code Extension Worm
Daily CyberSecurity
Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
GitHub confirms a perimeter breach by TeamPCP. An administrative VS Code extension supply-chain worm exfiltrated 3,800 proprietary core source repositories.
11 views