Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: TryHackMe: Ledger Write-up
════════════════════════
𐀪 Author: edbert sumicad
════════════════════════
ⴵ Time: Tue, 26 May 2026 23:57:08 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #penetration_testing #active_directory_attack #network_penetration_test
Medium
TryHackMe: Ledger Write-up
Introduction
17 views
Daily Writeups
⤷ Title: TryHackMe: Boogeyman 2 | Write-Up
════════════════════════
𐀪 Author: Ash T
════════════════════════
ⴵ Time: Wed, 27 May 2026 00:26:59 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #information_security #cybersecurity #tryhackme
Medium
TryHackMe: Boogeyman 2 | Write-Up
This is a write-up and walkthrough for the Boogeyman 2 room.
24 views
Daily Writeups
⤷ Title: Guided Pentest: Web | TryHackMe Room Write-up
════════════════════════
𐀪 Author: 0x7ipher
════════════════════════
ⴵ Time: Tue, 26 May 2026 23:20:20 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #the_red_raffle #jr_penetration_tester
Medium
Guided Pentest: Web | TryHackMe Room Write-up
Learn web app pentesting by chaining vulnerabilities from recon to full server compromise.
24 views
Daily Writeups
⤷ Title: Critical Defect Exposed: Flaw In Apache Fory Bypasses Deserialization Protections
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:44:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fory #CVE_2026_48207 #Deserialization Bypass #Pyfory #Python Security #Remote Code Execution
Daily CyberSecurity
Critical Defect Exposed: Flaw In Apache Fory Bypasses Deserialization Protections
Discover how CVE-2026-48207, a critical PyFory deserialization policy bypass flaw, lets attackers execute remote code, and learn how to patch it now.
21 views
Daily Writeups
⤷ Title: Overhaul Your Site Defense: Concrete CMS Security Fixes Arrive in Version 9.5.1
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:22:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Concrete CMS #CSRF Protection #CVE_2026_8134 #Remote Code Execution #vulnerability patch #Web Security
Daily CyberSecurity
Overhaul Your Site Defense: Concrete CMS Security Fixes Arrive in Version 9.5.1
Concrete CMS dropped critical Concrete CMS security fixes in version 9.5.1 to eliminate remote code execution vulnerabilities. Update now.
18 views
Daily Writeups
⤷ Title: Unauthenticated Execution Threatens Kubernetes Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:03:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Security #CVE_2026_46614 #Fission Router #Kubernetes Security #Serverless Framework
Daily CyberSecurity
Unauthenticated Execution Threatens Kubernetes Clusters
A critical Fission router vulnerability (CVE-2026-46614) allows unauthenticated function invocation in Kubernetes. Learn how to patch it now.
17 views
Daily Writeups
⤷ Title: GitHub Patches Critical Flaws in Enterprise Server Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:59:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8606 #CVE_2026_9312 #GHES #github #GPG Key Rotation #security patch #ssrf
Daily CyberSecurity
GitHub Patches Critical Flaws in Enterprise Server Update
GitHub patches critical GitHub Enterprise Server vulnerabilities (CVE-2026-9312). Learn about key rotation and critical SSRF fixes.
12 views
Daily Writeups
⤷ Title: Dual Sandbox Bypasses Threaten PHP Applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:30:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_46633 #CVE_2026_46640 #PHP Security #Remote Code Execution #Sandbox Bypass #Twig Engine
Daily CyberSecurity
Dual Sandbox Bypasses Threaten PHP Applications
Twig project maintainers patched critical Twig RCE flaws allowing arbitrary code execution via sandbox bypasses. Update to 3.26.0.
8 views
Daily Writeups
⤷ Title: Windows Kernel Bug Exploits Browser Sandboxes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:01:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40369 #Kernel Exploit #Microsoft #Ori Nimron #Windows 11
Daily CyberSecurity
Windows Kernel Bug Exploits Browser Sandboxes
A dangerous Windows Kernel EoP vulnerability allows browser sandbox escapes. Public PoC exploit code is available on GitHub.
26 views
Daily Writeups
⤷ Title: BAC + CSRF
════════════════════════
𐀪 Author: Rajveer
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:00:03 GMT
════════════════════════
⌗ Tags: #vulnerability #bug_bounty #bug_bounty_writeup #broken_access_control #csrf
Medium
BAC + CSRF
It was a Self-Hosted program with limited scope, so I started exploring the main application
12 views
Daily Writeups
⤷ Title: The File Upload Check That 90% of Hunters Forget (And How I Got $1500 From a JPEG)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:27:45 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bugbounty_writeup #bug_bounty_tips #bug_hunting #bug_bounty
Medium
The File Upload Check That 90% of Hunters Forget (And How I Got $1500 From a JPEG)
Everyone checks extensions. Nobody checks what happens after.
17 views
Daily Writeups
⤷ Title: TryHackMe Operation Endgame Walkthrough
════════════════════════
𐀪 Author: Rich
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:25:02 GMT
════════════════════════
⌗ Tags: #active_directory_security #active_directory_attack #tryhackme_writeup #tryhackme #tryhackme_walkthrough
Medium
TryHackMe Operation Endgame Walkthrough
TL;DR Walkthrough of the TryHackMe Operation Endgame room.
16 views
Daily Writeups
⤷ Title: Why Premium Video Platforms Are Leading the Digital Entertainment Revolution in 2026
════════════════════════
𐀪 Author: Brennayoungdtp
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:47:28 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #art #xs #writing #ai
Medium
Why Premium Video Platforms Are Leading the Digital Entertainment Revolution in 2026
The way people consume video content has changed dramatically over the past few years. With faster internet, smarter devices, and rising…
30 views
Daily Writeups
⤷ Title: The Underminr Paradigm: Subverting DNS Filters via CDN Networks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:46:33 +0000
════════════════════════
⌗ Tags: #Information Security #ADAMnetworks threat intelligence #cloud command and control traffic #cross tenant CDN routing exploit #Encrypted Client Hello ECH security #legacy domain fronting comparison #outminr network monitoring tool #Protective DNS bypass #Server Name Indication SNI spoofing #shared infrastructure website blacklisting #Underminr DNS evasion technique
Information Security News
Underminr DNS Evasion Technique Bypasses Protective DNS
ADAMnetworks uncovers Underminr, a critical DNS evasion technique impacting 88 million domains by weaponizing cross-tenant routing on shared CDNs.
32 views
Daily Writeups
⤷ Title: Critical Security Defect Exploits NTFS Processing Architecture Within 7-Zip
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:42:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #7_Zip 26.01 download #7_Zip CVE_2026_48095 patch #dynamic link library memory corruption #GitHub Security Lab GHSL_2026_140 #heap buffer write overflow #NTFS archive handler #remote code execution vulnerability #signature based fallback detection #vtable hijack exploit #Yaroslav Lobachevsky cyber security
Information Security News
7-Zip CVE-2026-48095 Patch: Fix Critical NTFS Code Execution
Update now to the 7-Zip CVE-2026-48095 patch. Discover how this critical heap overflow in the NTFS archive handler triggers remote code execution.
14 views
Daily Writeups
⤷ Title: Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:37:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #cpanel_jsonapi_func=redisAble log grep #CVE_2026_48172 root access #David Strydom security researcher #LiteSpeed cPanel plugin exploit #LiteSpeed WHM Plugin 5.3.1.0 update #lsws.redisAble logic error #remove LiteSpeed cPanel plugin #shared hosting privilege escalation #shared hosting sandbox escape #WebPros ecosystem defense
Information Security News
Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
Perimeter Compromise and Systemic Risk LiteSpeed recently resolved a critical privilege escalation vulnerability within its user-facing cPanel plugin. This severe security defect is tracked global…
12 views
Daily Writeups
⤷ Title: Architectural Rectification of the FatGid Flaw: Securing the FreeBSD Kernel Against Privilege Escalation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:34:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_45250 kernel panic #FatGid local privilege escalation #FreeBSD setcred root exploit #FreeBSD_SA_26:18.setcred advisory #kern_setcred_copyin_supp_groups flaw #kernel stack buffer overflow #memory corruption gid_t mismatch #Supervisor Mode Access Prevention SMAP #Supervisor Mode Execution Prevention SMEP #zfs.ko gadget exploitation
Information Security News
Architectural Rectification of the FatGid Flaw: Securing the FreeBSD Kernel Against Privilege Escalation
The FreeBSD security apparatus has successfully resolved a high-severity vulnerability, cataloged as CVE-2026-45250, within the setcred(2) system call architecture. This fundamental defect resided…
11 views
Daily Writeups
⤷ Title: Windows 11 Secure Boot: 2026 Expiration Warning
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:30:16 +0000
════════════════════════
⌗ Tags: #Windows #BitLocker encryption #Bootkit malware protection #Cybersecurity 2026 #Microsoft certificate update #UEFI firmware upgrade #Windows 11 26H2 update #Windows 11 Secure Boot #Windows Server secure boot
Information Security News
Windows 11 Secure Boot: 2026 Expiration Warning - Information Security News
Microsoft warns that Windows 11 Secure Boot certificates expire in June 2026. Update your system now to prevent degraded pre-boot security defenses.
7 views
Daily Writeups
⤷ Title: Verus Recovers the Majority of Exploited Bridge Assets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:26:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #blockchain security funding #cryptocurrency exploit #Decentralized Finance #DeFi security breach #ETH bounty agreement #smart contract bugs #Verus bridge exploit #Verus crypto hack #Verus infrastructure restoration
Information Security News
Verus Bridge Exploit: 75% of Stolen Crypto Funds Returned
Following the Verus bridge exploit, the attacker returned 4,052 ETH while keeping a bounty. Discover the root causes behind this major security breach.
7 views
Daily Writeups
⤷ Title: The Institutional Metamorphosis of Google: Sustaining Digital Hegemony in the Shadow of the Singularity
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:59:25 +0000
════════════════════════
⌗ Tags: #Technology #AI Overviews search traffic #Antigravity autonomous workflow #content creator traffic filter #Demis Hassabis AGI timeline #Gemini Spark agent platform #Google Agentic AI search #Google I/O 2026 recap #Google Zero click paradigm #Sundar Pichai interview #web automation engine
Daily CyberSecurity
The Institutional Metamorphosis of Google: Sustaining Digital Hegemony in the Shadow of the Singularity
Google CEO Sundar Pichai reveals how Gemini-powered Agentic AI search will shift the web from traditional link clicks to autonomous background task execution.
10 views
Daily Writeups
⤷ Title: The Attrition of Computational Allocation: Systemic Volatility and Quota Depreciation Within the Google Gemini Interface
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:56:40 +0000
════════════════════════
⌗ Tags: #Technology #artificial intelligence compute allocation #developer token tracking telemetry #Gemini Advanced subscription bug #Gemini resource quotas error #Gemini usage limit reset #Google AI token drain glitch #OpenAI vs Google quota management #site reliability engineering update #video generation resource failure #video transformation sequence crash
Daily CyberSecurity
The Attrition of Computational Allocation: Systemic Volatility and Quota Depreciation Within the Google Gemini Interface
A major Gemini resource quotas error is rapidly draining developers' weekly usage limits in minutes. Learn about the token tracking bug and Google's resets.
11 views