Daily Writeups
@Daily_Writeups
3.58K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.58K subscribers
Daily Writeups
⤷ Title: WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:40:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_1498 #firewall #Fireware OS #LDAP injection #NCPVE_2025_0626 #network_security #Patch Alert #privilege escalation #VPN security #WatchGuard
Daily CyberSecurity
WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection
WatchGuard patches two flaws: a VPN privilege escalation (NCPVE-2025-0626) and Fireware LDAP injection (CVE-2026-1498). Update Firebox and VPN clients now.
15 views
Daily Writeups
⤷ Title: CVE-2026-23906: Authentication Bypass Flaw Hits Apache Druid Analytics Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:17:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Anonymous Bind #Apache Druid #Authentication Bypass #big data #CVE_2026_23906 #database security #LDAP Authentication #Patch Alert #Real_Time Analytics
Daily CyberSecurity
CVE-2026-23906: Authentication Bypass Flaw Hits Apache Druid Analytics Clusters
Critical Apache Druid flaw (CVE-2026-23906) allows login with no password via LDAP anonymous binds. Update to v36.0.0 or disable anonymous binds now.
16 views
Daily Writeups
⤷ Title: Triple Threat Patched: Zimbra 10.1.16 Fixes XSS, XXE & LDAP Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 00:33:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Collaboration Suite #CSRF #Email Security #LDAP injection #Patch Alert #security update #XSS #xxe #Zimbra #Zimbra 10.1.16
Daily CyberSecurity
Triple Threat Patched: Zimbra 10.1.16 Fixes XSS, XXE & LDAP Injection
Zimbra 10.1.16 patches critical XSS, XXE, and LDAP injection flaws. Update immediately to secure your email collaboration suite and restore PDF previews.
36 views
Daily Writeups
⤷ Title: Windows Privilege Escalation (LDAP)
════════════════════════
𐀪 Author: Sherman Davis
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 07:38:24 GMT
════════════════════════
⌗ Tags: #ldap #active_directory #windows_privilege_esc #penetration_testing #cybersecurity
Medium
Windows Privilege Escalation (LDAP)
Today, we’re diving into LDAP exploitation. Using the Vulnlab box ‘Baby,’ we’ll cover how to enumerate directory services, find hidden…
27 views
Daily Writeups
⤷ Title: Beyond the Perimeter: Auditing Active Directory Security with ADPulse’s 35-Point Automated Scan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:28:31 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #AD misconfiguration #AD security #ADPulse #Domain Controller #IT Administration #LDAP auditing #open source security #Penetration Testing #security reporting
Information Security News
Beyond the Perimeter: Auditing Active Directory Security with ADPulse’s 35-Point Automated Scan
ADPulse — Active Directory Security Scanner ADPulse is an open-source Active Directory security auditing tool that connects to a domain controller via LDAP(S), runs 35 automated security checks, a…
29 views
Daily Writeups
⤷ Title: OpenStack Keystone Flaw Grants Access to Disabled LDAP Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 01:57:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #Dalmatian #Epoxy #Flamingo #Gazpacho #Identity Management #Keystone #LDAP #OpenStack #Patch Alert
Daily CyberSecurity
OpenStack Keystone Flaw Grants Access to Disabled LDAP Users
OpenStack Keystone vulnerability allows disabled LDAP users to authenticate. Logic flaw in attribute mapping affects releases up to 2026.1. Patch now!
13 views
Daily Writeups
⤷ Title: Double Kill: Authentication Bypass in SuiteCRM via LDAP and SQL Injection
════════════════════════
𐀪 Author: Guilherme Mury
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 15:42:26 GMT
════════════════════════
⌗ Tags: #pentesting #sql_injection #research #cve #ldap_injection
Medium
Double Kill: Authentication Bypass in SuiteCRM via LDAP and SQL Injection
How an un-sanitized input led to a complete authentication bypass in one of the world’s most popular open-source CRMs.
35 views
Daily Writeups
⤷ Title: Gaining Domain Admin: A Journey through LDAP, Kerberos, and Delegation Abuse.
════════════════════════
𐀪 Author: Yoel Yosief [ Orit01 ]
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:28:09 GMT
════════════════════════
⌗ Tags: #ethical_hacking #windows_vulnerability #ldap #active_directory #kerberos_delegation
Medium
Gaining Domain Admin: A Journey through LDAP, Kerberos, and Delegation Abuse.
In penetration testing, the path to domain administrator privileges often involves a complex chain of exploitation, requiring a deep…
39 views
Daily Writeups
⤷ Title: Apache CXF Framework Patches Three Severe Security Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 01:40:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache CXF #CVE_2026_44417 #CVE_2026_44618 #CVE_2026_44930 #LDAP injection #rce #xxe
Daily CyberSecurity
Apache CXF Framework Patches Three Severe Security Flaws
Discover the latest critical Apache CXF vulnerabilities, including RCE and XXE flaws, and learn how to secure your open source services framework.
13 views
Daily Writeups
⤷ Title: New Jenkins Security Advisory Highlights Severe Plugin Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 01:06:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48916 #Email Extension #Jenkins #LDAP Plugin #Path Traversal #Remote Code Execution #security advisory
Daily CyberSecurity
New Jenkins Security Advisory Highlights Severe Plugin Flaws
Discover the latest Jenkins plugin security flaws. Learn how unvalidated LDAP referrals and arbitrary file reads impact your controller servers.
20 views
Daily Writeups
⤷ Title: Critical Security Flaw Exposes Apache LDAP API Connections
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 04:09:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache Directory #CVE_2026_35563 #LDAP API #Security Advisory #Server Identity
25 views
Daily Writeups
⤷ Title: Discover printers during an internal penetration testing engagement using Nmap and other Recon…
════════════════════════
𐀪 Author: Muhammad Jubair Hossain
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 04:45:57 GMT
════════════════════════
⌗ Tags: #ldap #reconnaissance #recon #printers #pass_back_attack
Medium
Discover printers during an internal penetration testing engagement
Here is the comprehensive guide on how to discover printers during an internal penetration testing engagement using Nmap and other Recon…
29 views
Daily Writeups
⤷ Title: Discover printers during an internal penetration testing engagement
════════════════════════
𐀪 Author: Muhammad Jubair Hossain
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 04:45:57 GMT
════════════════════════
⌗ Tags: #ldap #reconnaissance #recon #printers #pass_back_attack
Medium
Discover printers during an internal penetration testing engagement
Here is the comprehensive guide on how to discover printers during an internal penetration testing engagement using Nmap and other Recon…
19 views
Daily Writeups
⤷ Title: HackTheBox “CTF” Walkthrough
════════════════════════
𐀪 Author: Abdullah Kareem
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 18:49:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #hackthebox #linux #ldap
Medium
HackTheBox “CTF” Walkthrough
CTF is an insane difficulty Linux box with a web application using LDAP based authentication. The application is vulnerable to LDAP…
26 views
Daily Writeups
⤷ Title: Critical Apache Shiro LDAP Injection Flaw Uncovered
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 16:36:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Shiro #Authentication Bypass #CVE_2026_49268 #LDAP injection #Vulnerability
Daily CyberSecurity
Critical Apache Shiro LDAP Injection Flaw Uncovered
A critical Apache Shiro LDAP Injection vulnerability in DefaultLdapRealm, CVE-2026-49268, allows authentication bypass. Update your framework immediately.
26 views
Daily Writeups
⤷ Title: OpenDJ Vulnerabilities: Authorization Bypass (CVSS 9.6) and Unauthenticated SSRF (CVSS 9.4)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 14:02:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_62373 #CVE_2026_62375 #Deserialization #LDAP #Open Identity Platform #OpenDJ #ssrf
Daily CyberSecurity
OpenDJ Vulnerabilities: Authorization Bypass (CVSS 9.6) and Unauthenticated SSRF (CVSS 9.4)
TL;DR OpenDJ 5.1.2 fixes four security flaws in the open-source LDAP directory server. The two most severe OpenDJ vulnerabilities are a CVSS 9.6 authorization bypass and a CVSS 9.4 unauthenticated…
9 views
Daily Writeups
⤷ Title: Roundcube Patches RCE and SSRF Flaws in 1.6.18 and 1.7.3
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 09:38:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Email Security #IMAP Command Injection #LDAP injection #Remote Code Execution #Roundcube #ssrf #Stored XSS #webmail
Daily CyberSecurity
Roundcube Patches RCE and SSRF Flaws in 1.6.18 and 1.7.3
Roundcube shipped two security updates this week. Also, versions 1.6.18 and 1.7.3 close eleven separate bugs. The worst Roundcube webmail RCE flaw sits in a spam-training plugin. Why It Matters We…
25 views