Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: TryHackMe Forward Walkthrough: Full Active Directory Compromise
════════════════════════
𐀪 Author: Aniket Tegginamath
════════════════════════
ⴵ Time: Thu, 21 May 2026 21:45:01 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #cybersecurity
Medium
TryHackMe Forward Walkthrough: Full Active Directory Compromise
Target: 10.48.171.192 Initial credentials: ctf.local\j.smith / JSmith@IT2024 Administrator flag:
16 views
Daily Writeups
⤷ Title: Hands-On SQL Injection Lab (DVWA — Low Security)
════════════════════════
𐀪 Author: Tobiloba Lawal
════════════════════════
ⴵ Time: Thu, 21 May 2026 21:45:05 GMT
════════════════════════
⌗ Tags: #dvwa_sql_injection #sql_injection #sql #install_dvwa #dvwa
Medium
Hands-On SQL Injection Lab (DVWA — Low Security)
As part of my cybersecurity learning journey, I recently completed a practical SQL Injection (SQLi) lab using Damn Vulnerable Web…
23 views
Daily Writeups
⤷ Title: PowerDNS Fixes Flaws Granting Server Crashes and Memory Corruption
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 00:17:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authoritative Server #Bind Backend #CVE_2026_41999 #CVE_2026_42000 #CVE_2026_42001 #CVE_2026_42002 #Cyber Security #Denial of Service #GSS_TSIG #infosec #memory corruption #PowerDNS
Daily CyberSecurity
PowerDNS Fixes Flaws Granting Server Crashes and Memory Corruption
PowerDNS coordinates patches for CVE-2026-42001 and adjacent flaws that trigger server crashes, GSS-TSIG memory corruption, and view data leaks. Patch now!
22 views
Daily Writeups
⤷ Title: CISA Sound the Alarm: Langflow AI Platform and Trend Micro Added to KEV Catalog Due to Active Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 23:29:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Binding Operational Directive #CISA KEV #Cross_Origin Resource Sharing #CVE_2025_34291 #CVE_2026_34926 #Cyber Security #Directory Traversal #infosec #Langflow #Remote Code Execution #SameSite Cookie #Trend Micro Apex One
Daily CyberSecurity
CISA Sound the Alarm: Langflow AI Platform and Trend Micro Added to KEV Catalog Due to Active Exploitation
CISA updates its KEV Catalog with critical flaws in Langflow (CVE-2025-34291) and Trend Micro Apex One. Federal agencies ordered to patch by June 4, 2026.
9 views
Daily Writeups
⤷ Title: XSS Testing Checklist: 12 Important Test Cases Every Security Tester Should Know
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Fri, 22 May 2026 00:33:59 GMT
════════════════════════
⌗ Tags: #xss_attack #osint #bug_bounty #ethical_hacking #cybersecurity
Medium
XSS Testing Checklist: 12 Important Test Cases Every Security Tester Should Know
A beginner-friendly guide to finding Cross-Site Scripting vulnerabilities
15 views
Daily Writeups
⤷ Title: SQL Injection Testing Checklist: 10 Important Test Cases Every Security Tester Should Know
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Fri, 22 May 2026 00:32:56 GMT
════════════════════════
⌗ Tags: #sql #penetration_testing #bug_bounty #ethical_hacking #cybersecurity
Medium
SQL Injection Testing Checklist: 10 Important Test Cases Every Security Tester Should Know
A beginner-friendly guide to finding SQL injection vulnerabilities, no jargon, just clear steps
14 views
Daily Writeups
⤷ Title: I was tired of Flameshot. So i built a Burp Suite extension
════════════════════════
𐀪 Author: Juan Felipe Osorio Z
════════════════════════
ⴵ Time: Thu, 21 May 2026 23:51:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #burpsuite #burpsuite_extension #hacking
Medium
I was tired of Flameshot. So i built a Burp Suite extension
How a repetitive documentation workflow during pentests led me to build RepShot an open source Burp Suite extension that generates…
17 views
Daily Writeups
⤷ Title: Inclusiveness — LFI to RCE via FTP Upload + SUID PATH Hijack | OffSec PG Play
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Fri, 22 May 2026 00:29:33 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #cybersecurity #offensive_security #pentesting
Medium
Inclusiveness — LFI to RCE via FTP Upload + SUID PATH Hijack | OffSec PG Play
Inclusiveness is a box that rewards patience during enumeration. Three services are running — FTP, SSH, and HTTP — and the path to root…
19 views
Daily Writeups
⤷ Title: Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 02:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_47137 #CVE_2026_47140 #CVE_2026_47210 #Cyber Security #infosec #JSPI Promise #Node.js Sandbox Escape #patch bypass #Prototype Hijacking #Remote Code Execution #vm2 sandbox
Daily CyberSecurity
Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
Five critical sandbox escape flaws in vm2 (CVE-2026-47140 & more) allow unauthenticated remote code execution on the host server. Update now!
15 views
Daily Writeups
⤷ Title: Print-Path RCE Exposed: Critical HP Linux Driver Flaws (CVE-2026-8631) Grant Root Privileges
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 02:12:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8631 #CVE_2026_8632 #Cyber Security #Driver Vulnerability #HP Linux Driver #hpcups Processing #HPLIP Software #infosec #integer overflow #Local Privilege Escalation #Remote Code Execution
Daily CyberSecurity
Print-Path RCE Exposed: Critical HP Linux Driver Flaws (CVE-2026-8631) Grant Root Privileges
HP patches critical 9.3 CVSS flaw CVE-2026-8631 in HPLIP drivers. Unauthenticated attackers can bypass memory limits for Linux remote code execution.
12 views
Daily Writeups
⤷ Title: Splunk Patches High-Severity Bugs Granting DoS and Internal Log Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:20:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #CVE_2026_20238 #CVE_2026_20239 #CVE_2026_20240 #Cyber Security #Denial of Service #infosec #Log Leak #Session Cookie Exposure #Splunk AI Toolkit #Splunk Enterprise
Daily CyberSecurity
Splunk Patches High-Severity Bugs Granting DoS and Internal Log Leaks
Splunk releases coordinated patches for CVE-2026-20240 and adjacent flaws exposing raw session cookies, data filters, and triggering server DoS.
18 views
Daily Writeups
⤷ Title: Critical Altium Enterprise Server Flaws Grant RCE and Database Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:01:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Altium Enterprise Server #ComparisonService #CVE_2026_9102 #CVE_2026_9129 #Cyber Security #Gerber File Upload #infosec #Path Traversal #PCB Design Security #rce #Remote Code Execution #StorageController
Daily CyberSecurity
Critical Altium Enterprise Server Flaws Grant RCE and Database Access
Altium patches dual critical 9.4 CVSS flaws (CVE-2026-9129 & CVE-2026-9102) allowing authenticated users to execute remote code and steal files.
16 views
Daily Writeups
⤷ Title: HackTheBox: Nibbles Write-up (Walkthrough)
════════════════════════
𐀪 Author: ankamcharanteja
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:10:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackthebox_writeup
Medium
HackTheBox: Nibbles Write-up (Walkthrough)
Nibbles is a short, Linux-based HackTheBox machine featuring a clean, realistic attack path. The initial foothold leverages a file upload…
29 views
Daily Writeups
⤷ Title: From a Simple Profile Endpoint to a 100k+ User IDOR on HackerRank
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:24:22 GMT
════════════════════════
⌗ Tags: #hackerrank #idor #bug_bounty_writeup
Medium
From a Simple Profile Endpoint to a 100k+ User IDOR on HackerRank
From a Simple Profile Endpoint to a 100k+ User IDOR on HackerRank Introduction This write-up was published with permission from HackerRank, with sensitive details properly redacted to keep users …
41 views
Daily Writeups
⤷ Title: New Apache Camel K Flaw (CVE-2026-45760) Enables Cross-Namespace Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 03:12:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel K #Authorization Bypass #Build Deputy Attack #Cloud Native Security #CVE_2026_45760 #Cyber Security #infosec #Kubernetes Namespace Bypass #Multi_Tenancy Defect #Patch Alert #Pod Generation Hijack
Daily CyberSecurity
New Apache Camel K Flaw (CVE-2026-45760) Enables Cross-Namespace Attacks
Apache Camel K fixes CVE-2026-45760, a critical cross-namespace "Build Deputy" flaw allowing authorized users to hijack pods in secure namespaces.
25 views
Daily Writeups
⤷ Title: Your VPN Might Not Be Protecting You on Android 16
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:31:00 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #android
Medium
Your VPN Might Not Be Protecting You on Android 16
Millions of users trust VPNs to hide their identity online. But what if Android itself is quietly bypassing the VPN tunnel?
17 views
Daily Writeups
⤷ Title: Flipper One Is an Open Linux Cyberdeck, Not a Flipper Zero Sequel
════════════════════════
𐀪 Author: 0xGosu
════════════════════════
ⴵ Time: Fri, 22 May 2026 00:00:52 GMT
════════════════════════
⌗ Tags: #linux #ai #software_engineering #gadgets #hacking
Medium
Flipper One Is an Open Linux Cyberdeck, Not a Flipper Zero Sequel
Flipper One is easy to misunderstand if you approach it as “the next Flipper Zero.”
15 views
Daily Writeups
⤷ Title: One place for my cybersecurity projects, guides, articles, labs, tools, and research workflows
════════════════════════
𐀪 Author: Andrey Pautov
════════════════════════
ⴵ Time: Fri, 22 May 2026 03:52:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #cyber_threat_intelligence #cybersecurity #information_security #artificial_intelligence
Medium
One place for my cybersecurity projects, guides, articles, labs, tools, and research workflows
From Scattered Research to a Structured Cybersecurity Knowledge Base
15 views
Daily Writeups
⤷ Title: Nmap in TryHackMe
════════════════════════
𐀪 Author: Gajera Prins
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:18:16 GMT
════════════════════════
⌗ Tags: #namp #tryhackme #tryhackme_walkthrough
Medium
Nmap in TryHackMe
Access The Lab https://tryhackme.com/room/furthernmap
21 views
Daily Writeups
⤷ Title: HackThisSite: Basic Challenges Solutions (Unofficial)
════════════════════════
𐀪 Author: Subhrajit Sain
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:14:36 GMT
════════════════════════
⌗ Tags: #hack_this_site #walkthrough #ctf #ctf_walkthrough #ethical_hacking
Medium
HackThisSite: Basic Challenges Solutions (Unofficial)
Solutions to the basic challenges on HackThisSite.org. Please note that this is not an official HTS post.
25 views
Daily Writeups
⤷ Title: CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 22 May 2026 11:17:33 +0530
════════════════════════
⌗ Tags: No_Tags
18 views