Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Dual Sandbox Bypasses Threaten PHP Applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:30:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_46633 #CVE_2026_46640 #PHP Security #Remote Code Execution #Sandbox Bypass #Twig Engine
Daily CyberSecurity
Dual Sandbox Bypasses Threaten PHP Applications
Twig project maintainers patched critical Twig RCE flaws allowing arbitrary code execution via sandbox bypasses. Update to 3.26.0.
8 views
Daily Writeups
⤷ Title: Windows Kernel Bug Exploits Browser Sandboxes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:01:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40369 #Kernel Exploit #Microsoft #Ori Nimron #Windows 11
Daily CyberSecurity
Windows Kernel Bug Exploits Browser Sandboxes
A dangerous Windows Kernel EoP vulnerability allows browser sandbox escapes. Public PoC exploit code is available on GitHub.
26 views
Daily Writeups
⤷ Title: BAC + CSRF
════════════════════════
𐀪 Author: Rajveer
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:00:03 GMT
════════════════════════
⌗ Tags: #vulnerability #bug_bounty #bug_bounty_writeup #broken_access_control #csrf
Medium
BAC + CSRF
It was a Self-Hosted program with limited scope, so I started exploring the main application
11 views
Daily Writeups
⤷ Title: The File Upload Check That 90% of Hunters Forget (And How I Got $1500 From a JPEG)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:27:45 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bugbounty_writeup #bug_bounty_tips #bug_hunting #bug_bounty
Medium
The File Upload Check That 90% of Hunters Forget (And How I Got $1500 From a JPEG)
Everyone checks extensions. Nobody checks what happens after.
17 views
Daily Writeups
⤷ Title: TryHackMe Operation Endgame Walkthrough
════════════════════════
𐀪 Author: Rich
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:25:02 GMT
════════════════════════
⌗ Tags: #active_directory_security #active_directory_attack #tryhackme_writeup #tryhackme #tryhackme_walkthrough
Medium
TryHackMe Operation Endgame Walkthrough
TL;DR Walkthrough of the TryHackMe Operation Endgame room.
16 views
Daily Writeups
⤷ Title: Why Premium Video Platforms Are Leading the Digital Entertainment Revolution in 2026
════════════════════════
𐀪 Author: Brennayoungdtp
════════════════════════
ⴵ Time: Wed, 27 May 2026 02:47:28 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #art #xs #writing #ai
Medium
Why Premium Video Platforms Are Leading the Digital Entertainment Revolution in 2026
The way people consume video content has changed dramatically over the past few years. With faster internet, smarter devices, and rising…
30 views
Daily Writeups
⤷ Title: The Underminr Paradigm: Subverting DNS Filters via CDN Networks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:46:33 +0000
════════════════════════
⌗ Tags: #Information Security #ADAMnetworks threat intelligence #cloud command and control traffic #cross tenant CDN routing exploit #Encrypted Client Hello ECH security #legacy domain fronting comparison #outminr network monitoring tool #Protective DNS bypass #Server Name Indication SNI spoofing #shared infrastructure website blacklisting #Underminr DNS evasion technique
Information Security News
Underminr DNS Evasion Technique Bypasses Protective DNS
ADAMnetworks uncovers Underminr, a critical DNS evasion technique impacting 88 million domains by weaponizing cross-tenant routing on shared CDNs.
32 views
Daily Writeups
⤷ Title: Critical Security Defect Exploits NTFS Processing Architecture Within 7-Zip
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:42:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #7_Zip 26.01 download #7_Zip CVE_2026_48095 patch #dynamic link library memory corruption #GitHub Security Lab GHSL_2026_140 #heap buffer write overflow #NTFS archive handler #remote code execution vulnerability #signature based fallback detection #vtable hijack exploit #Yaroslav Lobachevsky cyber security
Information Security News
7-Zip CVE-2026-48095 Patch: Fix Critical NTFS Code Execution
Update now to the 7-Zip CVE-2026-48095 patch. Discover how this critical heap overflow in the NTFS archive handler triggers remote code execution.
14 views
Daily Writeups
⤷ Title: Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:37:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #cpanel_jsonapi_func=redisAble log grep #CVE_2026_48172 root access #David Strydom security researcher #LiteSpeed cPanel plugin exploit #LiteSpeed WHM Plugin 5.3.1.0 update #lsws.redisAble logic error #remove LiteSpeed cPanel plugin #shared hosting privilege escalation #shared hosting sandbox escape #WebPros ecosystem defense
Information Security News
Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
Perimeter Compromise and Systemic Risk LiteSpeed recently resolved a critical privilege escalation vulnerability within its user-facing cPanel plugin. This severe security defect is tracked global…
12 views
Daily Writeups
⤷ Title: Architectural Rectification of the FatGid Flaw: Securing the FreeBSD Kernel Against Privilege Escalation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:34:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_45250 kernel panic #FatGid local privilege escalation #FreeBSD setcred root exploit #FreeBSD_SA_26:18.setcred advisory #kern_setcred_copyin_supp_groups flaw #kernel stack buffer overflow #memory corruption gid_t mismatch #Supervisor Mode Access Prevention SMAP #Supervisor Mode Execution Prevention SMEP #zfs.ko gadget exploitation
Information Security News
Architectural Rectification of the FatGid Flaw: Securing the FreeBSD Kernel Against Privilege Escalation
The FreeBSD security apparatus has successfully resolved a high-severity vulnerability, cataloged as CVE-2026-45250, within the setcred(2) system call architecture. This fundamental defect resided…
11 views
Daily Writeups
⤷ Title: Windows 11 Secure Boot: 2026 Expiration Warning
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:30:16 +0000
════════════════════════
⌗ Tags: #Windows #BitLocker encryption #Bootkit malware protection #Cybersecurity 2026 #Microsoft certificate update #UEFI firmware upgrade #Windows 11 26H2 update #Windows 11 Secure Boot #Windows Server secure boot
Information Security News
Windows 11 Secure Boot: 2026 Expiration Warning - Information Security News
Microsoft warns that Windows 11 Secure Boot certificates expire in June 2026. Update your system now to prevent degraded pre-boot security defenses.
7 views
Daily Writeups
⤷ Title: Verus Recovers the Majority of Exploited Bridge Assets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:26:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #blockchain security funding #cryptocurrency exploit #Decentralized Finance #DeFi security breach #ETH bounty agreement #smart contract bugs #Verus bridge exploit #Verus crypto hack #Verus infrastructure restoration
Information Security News
Verus Bridge Exploit: 75% of Stolen Crypto Funds Returned
Following the Verus bridge exploit, the attacker returned 4,052 ETH while keeping a bounty. Discover the root causes behind this major security breach.
7 views
Daily Writeups
⤷ Title: The Institutional Metamorphosis of Google: Sustaining Digital Hegemony in the Shadow of the Singularity
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:59:25 +0000
════════════════════════
⌗ Tags: #Technology #AI Overviews search traffic #Antigravity autonomous workflow #content creator traffic filter #Demis Hassabis AGI timeline #Gemini Spark agent platform #Google Agentic AI search #Google I/O 2026 recap #Google Zero click paradigm #Sundar Pichai interview #web automation engine
Daily CyberSecurity
The Institutional Metamorphosis of Google: Sustaining Digital Hegemony in the Shadow of the Singularity
Google CEO Sundar Pichai reveals how Gemini-powered Agentic AI search will shift the web from traditional link clicks to autonomous background task execution.
10 views
Daily Writeups
⤷ Title: The Attrition of Computational Allocation: Systemic Volatility and Quota Depreciation Within the Google Gemini Interface
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:56:40 +0000
════════════════════════
⌗ Tags: #Technology #artificial intelligence compute allocation #developer token tracking telemetry #Gemini Advanced subscription bug #Gemini resource quotas error #Gemini usage limit reset #Google AI token drain glitch #OpenAI vs Google quota management #site reliability engineering update #video generation resource failure #video transformation sequence crash
Daily CyberSecurity
The Attrition of Computational Allocation: Systemic Volatility and Quota Depreciation Within the Google Gemini Interface
A major Gemini resource quotas error is rapidly draining developers' weekly usage limits in minutes. Learn about the token tracking bug and Google's resets.
11 views
Daily Writeups
⤷ Title: Intro to Detection Engineering (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:33:13 GMT
════════════════════════
⌗ Tags: #blue_team #cybersecurity #tryhackme #hacking #detection_engineering
Medium
Intro to Detection Engineering (THM) Tryhackme Walkthrough
Description : Learn what Detection Engineering is, how it works in a SOC, and the mindset required to build effective detections.
9 views
Daily Writeups
⤷ Title: Hidden Authentication Flaws That Lead to Account Takeover — A Pentester’s Guide
════════════════════════
𐀪 Author: 0xAbhiSec
════════════════════════
ⴵ Time: Wed, 27 May 2026 03:56:03 GMT
════════════════════════
⌗ Tags: #infosec #ethical_hacking #cybersecurity #red_team #web_penetration_testing
Medium
Hidden Authentication Flaws That Lead to Account Takeover — A Pentester’s Guide
Most apps look secure until you start pulling at the right threads. Here’s what authentication testing actually looks like.
16 views
Daily Writeups
⤷ Title: Aakil Mirza — A Dedicated Name in Cyber Security Research
════════════════════════
𐀪 Author: mirza ilham
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:54:26 GMT
════════════════════════
⌗ Tags: #cyber_awareness #cybersecurity #ethical_hacking
Medium
Aakil Mirza — A Dedicated Name in Cyber Security Research
In the modern digital era, cybersecurity has become one of the most important sectors in the technology industry. From banking systems to…
30 views
Daily Writeups
⤷ Title: Exploiting vsftpd 2.3.4 Backdoor on Metasploitable 2 Complete Walkthrough
════════════════════════
𐀪 Author: Pranav Verma
════════════════════════
ⴵ Time: Tue, 26 May 2026 15:52:19 GMT
════════════════════════
⌗ Tags: #mr_robot #solarwinds_hack #vsftpd234 #cybersecurity #ethical_hacking
Medium
Exploiting vsftpd2.3.4 Backdoor on Metasploitable 2 Complete Walkthrough
Lab Setup
35 views
Daily Writeups
⤷ Title: Intel Architects High-Velocity Point-to-Point Interconnect Paradigm for Linux
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:37:39 +0000
════════════════════════
⌗ Tags: #Linux #/dev/tbstreamX character device #cable based host to host streaming #ConfigFS USB4 tunnel configuration #device to device file sharing #hardware peripheral virtualization #Intel thunderbolt_stream kernel patch #Linux USB4STREAM driver protocol #low dependency disaster recovery backup #Mika Westerberg Linux 7.2 merge #raw packet transfer over Thunderbolt
Information Security News
Intel USB4STREAM Driver Bypasses Network Stack in Linux 7.2
Intel's new USB4STREAM driver protocol lets Linux hosts transfer raw data and share hardware peripherals via USB4/Thunderbolt without a network stack.
36 views
Daily Writeups
⤷ Title: Architectural Refinements and Feature Modernization in the Latest Windows 11 Preview Deployment
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:47:02 +0000
════════════════════════
⌗ Tags: #Windows #Dev Drive GB provisioning #dual Bluetooth audio streaming #Microsoft Update Catalog download #parallel camera video ingestion #Start Menu performance fix #USB3 protocol stack hardening #Windows 11 24H2 patches #Windows 11 build 26100.8524 #Windows 11 KB5089573 update #Windows 11 May C preview
Information Security News
Windows 11 KB5089573 Update Adds Dual Bluetooth Audio
Microsoft releases Windows 11 KB5089573 update preview. Discover how it enables dual Bluetooth audio streaming, parallel camera ingestion, and speed fixes.
29 views
Daily Writeups
⤷ Title: Global Malicious AI Installer Campaign Targets Developer Workstations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 06:37:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Claude Code #developer security #EclecticIQ #Fileless Malware #Gemini CLI #Infostealer Campaign #SEO Poisoning
16 views