Daily Writeups
@Daily_Writeups
3.47K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.47K subscribers
Daily Writeups
⤷ Title: Splunk Patches High-Severity Bugs Granting DoS and Internal Log Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:20:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #CVE_2026_20238 #CVE_2026_20239 #CVE_2026_20240 #Cyber Security #Denial of Service #infosec #Log Leak #Session Cookie Exposure #Splunk AI Toolkit #Splunk Enterprise
Daily CyberSecurity
Splunk Patches High-Severity Bugs Granting DoS and Internal Log Leaks
Splunk releases coordinated patches for CVE-2026-20240 and adjacent flaws exposing raw session cookies, data filters, and triggering server DoS.
18 views
Daily Writeups
⤷ Title: Critical Altium Enterprise Server Flaws Grant RCE and Database Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:01:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Altium Enterprise Server #ComparisonService #CVE_2026_9102 #CVE_2026_9129 #Cyber Security #Gerber File Upload #infosec #Path Traversal #PCB Design Security #rce #Remote Code Execution #StorageController
Daily CyberSecurity
Critical Altium Enterprise Server Flaws Grant RCE and Database Access
Altium patches dual critical 9.4 CVSS flaws (CVE-2026-9129 & CVE-2026-9102) allowing authenticated users to execute remote code and steal files.
16 views
Daily Writeups
⤷ Title: HackTheBox: Nibbles Write-up (Walkthrough)
════════════════════════
𐀪 Author: ankamcharanteja
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:10:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackthebox_writeup
Medium
HackTheBox: Nibbles Write-up (Walkthrough)
Nibbles is a short, Linux-based HackTheBox machine featuring a clean, realistic attack path. The initial foothold leverages a file upload…
29 views
Daily Writeups
⤷ Title: From a Simple Profile Endpoint to a 100k+ User IDOR on HackerRank
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:24:22 GMT
════════════════════════
⌗ Tags: #hackerrank #idor #bug_bounty_writeup
Medium
From a Simple Profile Endpoint to a 100k+ User IDOR on HackerRank
From a Simple Profile Endpoint to a 100k+ User IDOR on HackerRank Introduction This write-up was published with permission from HackerRank, with sensitive details properly redacted to keep users …
41 views
Daily Writeups
⤷ Title: New Apache Camel K Flaw (CVE-2026-45760) Enables Cross-Namespace Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 03:12:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel K #Authorization Bypass #Build Deputy Attack #Cloud Native Security #CVE_2026_45760 #Cyber Security #infosec #Kubernetes Namespace Bypass #Multi_Tenancy Defect #Patch Alert #Pod Generation Hijack
Daily CyberSecurity
New Apache Camel K Flaw (CVE-2026-45760) Enables Cross-Namespace Attacks
Apache Camel K fixes CVE-2026-45760, a critical cross-namespace "Build Deputy" flaw allowing authorized users to hijack pods in secure namespaces.
25 views
Daily Writeups
⤷ Title: Your VPN Might Not Be Protecting You on Android 16
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:31:00 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #android
Medium
Your VPN Might Not Be Protecting You on Android 16
Millions of users trust VPNs to hide their identity online. But what if Android itself is quietly bypassing the VPN tunnel?
17 views
Daily Writeups
⤷ Title: Flipper One Is an Open Linux Cyberdeck, Not a Flipper Zero Sequel
════════════════════════
𐀪 Author: 0xGosu
════════════════════════
ⴵ Time: Fri, 22 May 2026 00:00:52 GMT
════════════════════════
⌗ Tags: #linux #ai #software_engineering #gadgets #hacking
Medium
Flipper One Is an Open Linux Cyberdeck, Not a Flipper Zero Sequel
Flipper One is easy to misunderstand if you approach it as “the next Flipper Zero.”
15 views
Daily Writeups
⤷ Title: One place for my cybersecurity projects, guides, articles, labs, tools, and research workflows
════════════════════════
𐀪 Author: Andrey Pautov
════════════════════════
ⴵ Time: Fri, 22 May 2026 03:52:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #cyber_threat_intelligence #cybersecurity #information_security #artificial_intelligence
Medium
One place for my cybersecurity projects, guides, articles, labs, tools, and research workflows
From Scattered Research to a Structured Cybersecurity Knowledge Base
15 views
Daily Writeups
⤷ Title: Nmap in TryHackMe
════════════════════════
𐀪 Author: Gajera Prins
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:18:16 GMT
════════════════════════
⌗ Tags: #namp #tryhackme #tryhackme_walkthrough
Medium
Nmap in TryHackMe
Access The Lab https://tryhackme.com/room/furthernmap
21 views
Daily Writeups
⤷ Title: HackThisSite: Basic Challenges Solutions (Unofficial)
════════════════════════
𐀪 Author: Subhrajit Sain
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:14:36 GMT
════════════════════════
⌗ Tags: #hack_this_site #walkthrough #ctf #ctf_walkthrough #ethical_hacking
Medium
HackThisSite: Basic Challenges Solutions (Unofficial)
Solutions to the basic challenges on HackThisSite.org. Please note that this is not an official HTS post.
25 views
Daily Writeups
⤷ Title: CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 22 May 2026 11:17:33 +0530
════════════════════════
⌗ Tags: No_Tags
18 views
Daily Writeups
⤷ Title: Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 22 May 2026 11:06:18 +0530
════════════════════════
⌗ Tags: No_Tags
17 views
Daily Writeups
⤷ Title: ️ Tracking Phishing Websites Safely — Inside The Scam Industry (Part 3)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:19:54 GMT
════════════════════════
⌗ Tags: #cryptocurrency #cybercrime #hacking #cybersecurity #true_crime
Medium
🕵️ Tracking Phishing Websites Safely — Inside The Scam Industry (Part 3)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
15 views
Daily Writeups
⤷ Title: Adversarial Mind — Crackmes Writeup
════════════════════════
𐀪 Author: CHANDRA KANT BAURI
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:24:18 GMT
════════════════════════
⌗ Tags: #infosec #reverse_engineering #cybersecurity #ctf_writeup #crackme
Medium
Adversarial Mind — Crackmes Writeup
When overthinking is your worst enemy in reverse engineering.
16 views
Daily Writeups
⤷ Title: TryHackMe CTF: W1seGuy Writeup Python approach
════════════════════════
𐀪 Author: Arsha Ranjith
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:34:36 GMT
════════════════════════
⌗ Tags: #w1seguy #tryhackme #cybersecurity #tryhackme_walkthrough #cryptography
Medium
TryHackMe CTF: W1seGuy Writeup Python approach
TryHackMe: W1seGuy Writeup Hello, fellow reader! I recently completed the W1seGuy challenge on TryHackMe, and I have to say it’s very beginner-friendly, although having some basic programming …
15 views
Daily Writeups
⤷ Title: The .env Goldmine: How a Simple GET Request to attacker.com/.env Can Own Your Infrastructure
════════════════════════
𐀪 Author: Pankaj Kumar Yadav
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:29:32 GMT
════════════════════════
⌗ Tags: #social_media #business #ethical_hacking #cybersecurity #society
Medium
The .env Goldmine: How a Simple GET Request to attacker.com/.env Can Own Your Infrastructure
Every day, thousands of web applications leak their most sensitive secrets through a single file. What starts as a simple fuzzing request…
13 views
Daily Writeups
⤷ Title: TryHackMe: Ignite Walkthrough (An Elegant Path to Root)
════════════════════════
𐀪 Author: Fsociety
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:14:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #wapt #tryhackme_walkthrough #ethical_hacking
Medium
TryHackMe: Ignite Walkthrough (An Elegant Path to Root)
Recently, I completed the Ignite room on TryHackMe. This room is beginner-friendly but provides excellent hands-on exposure to real-world…
20 views
Daily Writeups
⤷ Title: Inside the Influence Network of Iran’s Diplomatic Missions on X
════════════════════════
𐀪 Author: Sourena
════════════════════════
ⴵ Time: Fri, 22 May 2026 05:04:49 GMT
════════════════════════
⌗ Tags: #twitter #xs #iran #info_ops #embassy
Medium
Inside the Influence Network of Iran’s Diplomatic Missions on X
A Data-Driven Look at How Iran’s Embassies Weaponized Social Media to Drive Wartime Propaganda and Amplify State Narratives
25 views
Daily Writeups
⤷ Title: Bypassing Terminal Protections: New SHub “Reaper” Variant Abuses AppleScript to Loot macOS Endpoints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:03:04 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript Exploit #crypto wallet theft #Cyber Security #Filegrabber #infosec #LaunchAgent Persistence #macOS Infostealer #Reaper Build #SentinelOne #SHub Stealer #Tahoe 26.4 Bypass
Daily CyberSecurity
Bypassing Terminal Protections: New SHub "Reaper" Variant Abuses AppleScript to Loot macOS Endpoints
SentinelOne exposes the SHub Stealer "Reaper" variant. It bypasses Apple's latest Terminal paste mitigations to hijack crypto wallets and corporate documents.
20 views
Daily Writeups
⤷ Title: Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:01:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Cloud Security #Cloud Egress #Control Plane Attack #Cyber Security #Identity Hijacking #infosec #Key Vault Exploit #Microsoft Threat Intelligence #RBAC Manipulation #SSPR Abuse #Storm_2949
Daily CyberSecurity
Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
Microsoft exposes Storm-2949, a cloud-native threat group abusing Azure management features and SSPR to hijack Key Vaults, App Services, and SQL databases.
14 views
Daily Writeups
⤷ Title: CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:46:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Execution Safety #cPanel Vulnerability #CVE_2026_48172 #Cyber Security #infosec #LiteSpeed Plugin #privilege escalation #redisAble Exploit #Root Server Access #Web Hosting Security #WHM Patch
Daily CyberSecurity
CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
Urgent: Active attacks target the LiteSpeed User-End cPanel Plugin (CVE-2026-48172). Learn how to detect the exploit and secure your server root today.
13 views