Daily Writeups
@Daily_Writeups
3.58K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.58K subscribers
Daily Writeups
⤷ Title: SYSTEM via WAC: How a Permissions Oversight in Windows Admin Center Leads to Full Host Compromise
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:50:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_64669 #cybersecurity #Cymulate #DLL hijacking #Microsoft #PowerShell #privilege escalation #TOCTOU #Windows Admin Center #Windows Server
Penetration Testing Tools
SYSTEM via WAC: How a Permissions Oversight in Windows Admin Center Leads to Full Host Compromise
Cymulate Research Labs has uncovered a local privilege escalation vulnerability in Microsoft Windows Admin Center (WAC) version 2.4.2.1,
18 views
Daily Writeups
⤷ Title: New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:06:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #accessibility #Apple #AppleScript #CVE_2025_43530 #macOS #macOS Sequoia #macOS Sonoma #macOS Tahoe #Mickey Jin #privacy #TCC Bypass #TOCTOU #Voiceover
Daily CyberSecurity
New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
Apple’s privacy fortress, the Transparency, Consent, and Control (TCC) framework, has been breached once again. Security researcher Mickey Jin (@patch1t) has disclosed a sophisticated new vulnerab…
24 views
Daily Writeups
⤷ Title: The invisible Splinter: How a Hidden Node.js Flaw Bypasses 160 Million Weekly Security Guards
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 07:18:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #ClientRequest #CVE_2018_12116 #HackerOne #HTTP request splitting #http_proxy_middleware #Node.js #r3verii #superagent #Tech News 2026 #TOCTOU #Vulnerability Research #web security
Penetration Testing Tools
The invisible Splinter: How a Hidden Node.js Flaw Bypasses 160 Million Weekly Security Guards
Within the Node.js ecosystem, a vulnerability has been unearthed pertaining to the foundational logic of the HTTP client,
20 views
Daily Writeups
⤷ Title: PoC Exploit Disclosed: Researcher Unveils Windows MS-EVEN RPC Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 12:37:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #active directory #EventLogin #infosec #MS_EVEN RPC #PoC Exploit #Remote Code Execution #SafeBreach Labs #TOCTOU Vulnerability #Windows Security
Daily CyberSecurity
PoC Exploit Disclosed: Researcher Unveils Windows MS-EVEN RPC Vulnerability
SafeBreach Labs releases PoC exploit code for EventLogin (CVE-2025-29969), a TOCTOU flaw in Windows MS-EVEN RPC allowing remote file writes. Patch now.
33 views
Daily Writeups
⤷ Title: Zero-Day Chaos: The “BlueHammer” Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:54:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #BlueHammer #Chaotic Eclipse #GitHub Leak #InfoSec 2026 #LPE #Microsoft Security #Nightmare_Eclipse #privilege escalation #SAM Database #TOCTOU #Windows Zero_Day
Penetration Testing Tools
Zero-Day Chaos: The "BlueHammer" Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
The unauthorized disclosure of functional code for a nascent Windows vulnerability has presented Microsoft with a formidable new
8 views
Daily Writeups
⤷ Title: BlueHammer: Researcher Drops Functional 0-Day Exploit Targeting Windows Defender
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:46:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #0_day #BlueHammer #BlueHammer Exploit #cybersecurity #infosec #LPE #Microsoft #NTFS Junctions #privilege escalation #RPC Hijacking #TOCTOU #Windows Defender
Daily CyberSecurity
BlueHammer: Researcher Drops Functional 0-Day Exploit Targeting Windows Defender
BlueHammer is a functional 0-day exploit targeting Windows Defender’s update engine to achieve SYSTEM privileges. Here is how the unpatched LPE works.
8 views
Daily Writeups
⤷ Title: 7 Critical Vulnerabilities Threaten Spring Security 7.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:54:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_22752 #infosec #Java security #JWT Security #Patch Alert #Spring Security #Spring Security 7.0 #ssrf #TOCTOU #X.509 Impersonation
Daily CyberSecurity
7 Critical Vulnerabilities Threaten Spring Security 7.0
The Spring Security team has issued a series of security advisories detailing seven distinct vulnerabilities impacting the widely used authentication and authorization framework. While several fla…
15 views
Daily Writeups
⤷ Title: Microsoft Defender Zero-Day “BlueHammer” Hits KEV Catalog Following Researcher’s Protest
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 01:53:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BlueHammer #CISA KEV #CVE_2026_33825 #Huntress Labs #infosec #Local Privilege Escalation #LPE #Microsoft Defender #Microsoft Security #RedSun #SAM Database #TOCTOU #UnDefend
Daily CyberSecurity
Microsoft Defender Zero-Day "BlueHammer" Hits KEV Catalog Following Researcher's Protest
CISA adds BlueHammer (CVE-2026-33825) to the KEV catalog. This Microsoft Defender LPE exploit uses TOCTOU to hijack SAM databases. Patch by May 6, 2026.
16 views
Daily Writeups
⤷ Title: Root Access Race: TOCTOU Vulnerability (CVE-2026-41702) Hits VMware Fusion
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 06:54:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Broadcom #CVE_2026_41702 #infosec #Patch Alert #privilege escalation #race condition #root access #TOCTOU #Virtualization Security #VMware Fusion
Daily CyberSecurity
Root Access Race: TOCTOU Vulnerability (CVE-2026-41702) Hits VMware Fusion
VMware Fusion CVE-2026-41702 allows local users to gain root access via a TOCTOU race condition. Secure your host and update to 26H1 immediately!
33 views
Daily Writeups
⤷ Title: Public Exploit Exposes Root Privilege Escalation Flaw in VMware Fusion
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 00:15:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cyber Security #infosec #macOS Root Escape #Patch Alert #PoC Exploit Code Released #privilege escalation #Symlink Attack #TOCTOU Exploit #VMware Fusion #vmware_rawdiskCreator
Daily CyberSecurity
Public Exploit Exposes Root Privilege Escalation Flaw in VMware Fusion
Technical details and a functional PoC exploit have been released for CVE-2026-41702, a VMware Fusion TOCTOU flaw granting instant root on macOS.
25 views
Daily Writeups
⤷ Title: ⚡ Double-Spending Dreams: How I Turned a Millisecond Race Into $3,000
════════════════════════
𐀪 Author: 0B1To_X_ucH!h4
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 18:30:07 GMT
════════════════════════
⌗ Tags: #bug_bounty #race_condition #fintech #toctou
Medium
⚡ Double-Spending Dreams: How I Turned a Millisecond Race Into $3,000🤑
The Aogiri-Tree fintech bug that made me believe in timing attacks again
28 views