Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: How a Simple URL Parameter Exposed Hidden Database Records
════════════════════════
𐀪 Author: Itsmeanoop
════════════════════════
ⴵ Time: Thu, 21 May 2026 00:31:00 GMT
════════════════════════
⌗ Tags: #sql_injection #bug_bounty #web_security #cybersecurity #ethical_hacking
Medium
How a Simple URL Parameter Exposed Hidden Database Records
SQL Injection in a WHERE Clause Allowing Retrieval of Hidden Data
22 views
Daily Writeups
⤷ Title: The Biggest Cybersecurity Story of 2026? TeamPCP Claims Massive GitHub Breach
════════════════════════
𐀪 Author: Mahdi Reviews AI
════════════════════════
ⴵ Time: Wed, 20 May 2026 23:15:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #github #hacking
Medium
The Biggest Cybersecurity Story of 2026? TeamPCP Claims Massive GitHub Breach
In what could become the most significant cybersecurity incident of 2026, GitHub has confirmed a major internal security breach after the…
15 views
Daily Writeups
⤷ Title: The cybersecurity landscape .
════════════════════════
𐀪 Author: Afzal
════════════════════════
ⴵ Time: Thu, 21 May 2026 00:10:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #artificial_intelligence #infosec #ethical_hacking #threat_intelligence
Medium
The cybersecurity landscape .
The cybersecurity landscape is shifting faster than ever. With the integration of AI into both defensive and offensive security, legacy…
22 views
Daily Writeups
⤷ Title: Nmap Series: Nmap Post Port Scans — Part 4.
════════════════════════
𐀪 Author: Oluwakamiye Adeyemo
════════════════════════
ⴵ Time: Wed, 20 May 2026 23:07:31 GMT
════════════════════════
⌗ Tags: #nmap #networking #penetration_testing #cybersecurity
Medium
Nmap Series: Nmap Post Port Scans — Part 4.
In this write-up, I walk you through the Nmap Post Port Scans room on TryHackMe. I explore how to leverage Nmap for service and OS…
28 views
Daily Writeups
⤷ Title: Ecosystem Poisoned: Mini Shai-Hulud Worm Hijacks @antv npm Packages to Target CI/CD Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 02:59:48 +0000
════════════════════════
⌗ Tags: #Malware #AntV Ecosystem #CI/CD Pipeline Security #Cyber Security #echarts_for_react #GitHub Actions Memory Scraping #infosec #Mini Shai_Hulud #npm Supply Chain Attack #Sigstore Forgery #TeamPCP #Token Theft
Daily CyberSecurity
Ecosystem Poisoned: Mini Shai-Hulud Worm Hijacks @antv npm Packages to Target CI/CD Pipelines
Microsoft warns of an aggressive Mini Shai-Hulud worm attack targeting the @antv npm ecosystem and stealing secrets from cloud-connected CI/CD pipelines.
25 views
Daily Writeups
⤷ Title: Hundreds of Millions Affected: New “nginx-poolslip” Zero-Day Weaponizes ASLR Bypass for Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 02:31:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Bypass #Heap Feng Shui #infosec #memory corruption #Nebula Security #Nginx 1.31.0 #nginx_poolslip #rce #Remote Code Execution #Web Infrastructure #Zero_Day Vulnerability
Daily CyberSecurity
Hundreds of Millions Affected: New "nginx-poolslip" Zero-Day Weaponizes ASLR Bypass for Remote Code Execution
Urgent: Millions affected by "nginx-poolslip," a critical Nginx 1.31.0 zero-day that bypasses ASLR via heap feng shui to grant unauthenticated remote RCE.
14 views
Daily Writeups
⤷ Title: Signature Bypass Alert: Critical Coder Flaw (CVE-2026-46354) Exposes Git Keys and Developer Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 02:10:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Azure IMDS #Cloud Development Environments #Coder #CVE_2026_46354 #Cyber Security #infosec #OAuth exploitation #Patch Alert #Signature Bypass #Terraform Workspace #Token Theft
Daily CyberSecurity
Signature Bypass Alert: Critical Coder Flaw (CVE-2026-46354) Exposes Git Keys and Developer Tokens
Coder patches a critical 9.1 CVSS signature bypass (CVE-2026-46354) in Azure identities that allows unauthenticated workspace token theft. Patch now!
11 views
Daily Writeups
⤷ Title: CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:49:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Secure Workload #Cisco Security Advisory #CVE_2026_20223 #CVSS 10 #Cyber Security #infosec #Patch Alert #privilege escalation #REST API Exploit #Tenant Cross_Bypass #Zero_Trust Microsegmentation
Daily CyberSecurity
CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
Cisco drops an urgent advisory for CVE-2026-20223 (CVSS 10.0) in Secure Workload. Unauthenticated remote attackers can steal full Site Admin privileges.
14 views
Daily Writeups
⤷ Title: Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:45:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ChromaDB #CVE_2026_45829 #Cyber Security #FastAPI #HiddenLayer #Hugging Face #infosec #Machine Learning Security #Pre_Authentication RCE #trust_remote_code #Vector Database
Daily CyberSecurity
Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
Unpatched CVSS 10 flaw (CVE-2026-45829) in ChromaDB allows unauthenticated remote code execution via Hugging Face models. Isolate your servers now!
18 views
Daily Writeups
⤷ Title: Double Critical Threat: Google Chrome Rushes Out Urgent Fixes for WebRTC and UI Sandbox Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:43:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome Security Update #CVE_2026_9110 #CVE_2026_9111 #Cyber Security #google chrome #infosec #Sandbox Escape #Type Confusion #use after free #WebRTC Vulnerability
Daily CyberSecurity
Double Critical Threat: Google Chrome Rushes Out Urgent Fixes for WebRTC and UI Sandbox Flaws
Google has dropped an urgent Chrome desktop update fixing 16 vulnerabilities, including two critical sandbox subversion flaws in WebRTC and the UI.
14 views
Daily Writeups
⤷ Title: Drupal Database API Flaw (CVE-2026-9082) Exposes PostgreSQL Sites to Unauthenticated SQLi
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:35:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_9082 #Cyber Security #Database Abstraction API #Drupal Core #infosec #PostgreSQL Security #SA_CORE_2026_004 #sql injection #Symfony Patch #Twig Template #unauthenticated RCE
Daily CyberSecurity
Exploited in the Wild: Critical Drupal SQL Injection (CVE-2026-9082) Grants Attacker Root Access
Urgent: Drupal releases patches for highly critical SQLi flaw CVE-2026-9082. Unauthenticated attackers can exploit PostgreSQL backends for full remote RCE.
24 views
Daily Writeups
⤷ Title: Unpatched SGLang Vulnerabilities (CVE-2026-7301) Expose AI Inference Pipelines to RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:25:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #artificial intelligence #CVE_2026_7301 #CVE_2026_7302 #CVE_2026_7304 #DeepSeek #infosec #Path Traversal #Pickle Deserialization #Remote Code Execution #SGLang #ZeroMQ
Daily CyberSecurity
Unpatched SGLang Vulnerabilities (CVE-2026-7301) Expose AI Inference Pipelines to RCE
CERT/CC warns of unpatched critical flaws in SGLang (CVE-2026-7301) exposing AI inference models to unauthenticated RCE. Restrict your ports now!
21 views
Daily Writeups
⤷ Title: Critical RCE Exploits Exposed: Apache OFBiz Patches Severe Authentication Bypass Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:01:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache OFBiz #Authentication Bypass #CVE_2026_31378 #CVE_2026_45434 #Cyber Security #infosec #JSON Attribute Manipulation #Patch Alert #Remote Code Execution #Server Side Template Injection #ssti
Daily CyberSecurity
Critical RCE Exploits Exposed: Apache OFBiz Patches Severe Authentication Bypass Flaws
Apache OFBiz releases version 24.09.06 to patch severe RCE flaws, token forgery, and a critical password-reset authentication bypass. Upgrade now!
23 views
Daily Writeups
⤷ Title: Aaj ek aur serious cybersecurity issue samne aayi hai: OpenClaw skills ke through malicious RATs…
════════════════════════
𐀪 Author: Muhammad Hamza
════════════════════════
ⴵ Time: Thu, 21 May 2026 02:06:21 GMT
════════════════════════
⌗ Tags: #ai_agent #openclaw #hacking #ai
Medium
Aaj ek aur serious cybersecurity issue samne aayi hai: OpenClaw skills ke through malicious RATs…
Aaj ek aur serious cybersecurity issue samne aayi hai: OpenClaw skills ke through malicious RATs aur info-stealers deploy kiye ja rahe hain. Masla sirf malware ka nahi, masla trust ka hai. Jab AI …
35 views
Daily Writeups
⤷ Title: HTB Web Attacks - Skill Assessment
════════════════════════
𐀪 Author: ZeroByte
════════════════════════
ⴵ Time: Thu, 21 May 2026 02:58:01 GMT
════════════════════════
⌗ Tags: #hackthebox_walkthrough #xxe #penetration_testing #cybersecurity #idor
Medium
HTB Web Attacks - Skill Assessment
Chaining IDOR, HTTP Verb Tampering, and XXE for Flag Exfiltration
37 views
Daily Writeups
⤷ Title: GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:57:01 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:14:11 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: Ecosystem Evolution: Google Unveils “Continue On” in Android 17 to Match Apple’s Handoff
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 04:46:30 +0000
════════════════════════
⌗ Tags: #Android #Android 17 Continue On #Android PC Ecosystem Parity #Android Software Fragmentation #Apple Handoff Android Version #Bidirectional App State Migration #Cross Device App Continuity #Google IO 2026 #Pixel Launcher Taskbar #Progressive Web App Fallback #WebRTC Encoded Intent
Daily CyberSecurity
Ecosystem Evolution: Google Unveils "Continue On" in Android 17 to Match Apple’s Handoff
Google introduces "Continue On" at I/O 2026, an Android 17 cross-device framework providing seamless, bidirectional app handoffs between phones and tablets.
20 views
Daily Writeups
⤷ Title: The Free-for-Life Eviction: Google Triggers Outrage by Forcing Legacy G Suite Family Domains to Paid Plans
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 04:40:26 +0000
════════════════════════
⌗ Tags: #Technology #Algorithmic False Positive #Commercial Reclassification #Custom Domain Email #Data Backup Drive #Family Domain Eviction #G Suite Legacies 2026 #G Suite Legacy Free #Google Admin Console Appeal #Google Workspace Upgrade #Personal Non_Commercial Use Policy
Daily CyberSecurity
The Free-for-Life Eviction: Google Triggers Outrage by Forcing Legacy G Suite Family Domains to Paid Plans
Google sparks widespread dissent by unilaterally reclassifying personal legacy G Suite free accounts as commercial, forcing a paid Workspace upgrade.
14 views
Daily Writeups
⤷ Title: The AI Flood That’s Killing Bug Bounty — And the Hidden Reason Nobody Is Talking About
By Adil Ali
════════════════════════
𐀪 Author: Adil Alee
════════════════════════
ⴵ Time: Thu, 21 May 2026 03:02:07 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #bug_bounty #infosec #cybersecurity #ethical_hacking
Medium
The AI Flood That’s Killing Bug Bounty — And the Hidden Reason Nobody Is Talking About
By Adil Ali
The bug bounty ecosystem is in crisis.
HackerOne paused its Internet Bug Bounty program in March 2026. The cURL project abandoned monetary…
12 views
Daily Writeups
⤷ Title: Linux Capture The Flag Bandit Level 15
════════════════════════
𐀪 Author: Red
════════════════════════
ⴵ Time: Thu, 21 May 2026 03:07:00 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #infosec #hacking #linux
Medium
Linux Capture The Flag Bandit Level 15
SSL/TLS Encryption and OpenSSL
13 views