Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: xss0r V7 Is Finally Released — Free 28-Day Golden Plan License for Everyone
════════════════════════
𐀪 Author: xss0r
════════════════════════
ⴵ Time: Sun, 31 May 2026 22:29:54 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #reflected_xss #xss0r #xss_attack
Medium
xss0r V7 Is Finally Released — Free 28-Day Golden Plan License for Everyone
Today, we are excited to officially announce that xss0r V7 has finally been released.
31 views
Daily Writeups
⤷ Title: Critical Eppendorf Bioreactor Security Flaw Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 00:28:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bioreactor Vulnerability #CVE_2026_7251 #Eppendorf BioFlo 320 #Hardcoded Password #ICS security #Laboratory Security
Daily CyberSecurity
Critical Eppendorf Bioreactor Security Flaw Disclosed
A critical Eppendorf bioreactor security flaw exposes systems via a hard-coded VNC password. Learn how to secure your BioFlo 320 device.
26 views
Daily Writeups
⤷ Title: You have been doing API threat modelling wrong — here’s how to fix it using 5 questions
════════════════════════
𐀪 Author: Cyberbali
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 00:43:27 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #software_engineering #system_design_concepts
Medium
You have been doing API threat modelling wrong — here’s how to fix it using 5 questions
A five-question framework that replaces generic threat taxonomies with structured, caller-driven API security decisions.
38 views
Daily Writeups
⤷ Title: How to get to rank 1 all-time on Tryhackme; my 240 day journey; lessons learnt from 1271 rooms…
════════════════════════
𐀪 Author: CloudRabbit
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 00:38:55 GMT
════════════════════════
⌗ Tags: #career_development #learning #cloud_security #cybersecurity #tryhackme
Medium
How to get to rank 1 all-time on Tryhackme; my 240 day journey; lessons learnt from 1271 rooms…
1/ Getting to rank 1 all-time on tryhackme :
27 views
Daily Writeups
⤷ Title: The Orchestration of Ubuntu 26.10: Stonking Stingray
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 02:42:49 +0000
════════════════════════
⌗ Tags: #Linux #Canonical development #Linux Roadmap #Stonking Stingray #Ubuntu 26.10 #Ubuntu snapshot ISO
Daily CyberSecurity
The Orchestration of Ubuntu 26.10: Stonking Stingray
Explore the Ubuntu 26.10 release schedule and features. Download the early snapshot ISO safely and track the Stonking Stingray development milestones.
30 views
Daily Writeups
⤷ Title: Liquidjs CVSS 10 RCE Threatens 7.3M Monthly Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 02:30:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVSS 10 #Liquidjs #Node.js #rce #security patch
Daily CyberSecurity
Liquidjs CVSS 10 RCE Threatens 7.3M Monthly Users
A maximum-severity Liquidjs remote code execution flaw impacts millions. Learn about this template engine vulnerability and update now.
19 views
Daily Writeups
⤷ Title: Netlogon RCE Vulnerability Under Active Attack in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 02:26:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41089 #Netlogon #Patch Tuesday #Remote Code Execution #Windows Server
Daily CyberSecurity
Netlogon RCE Vulnerability Under Active Attack in the Wild
A critical Netlogon RCE vulnerability is actively exploited in the wild. Learn how to secure your Windows domain controllers immediately.
20 views
Daily Writeups
⤷ Title: Critical Langroid Vulnerability Allows RCE via Prompt Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 02:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Langroid Framework #LLM Security #RCE Patch #Software Vulnerability #sql injection
Daily CyberSecurity
Critical Langroid Vulnerability Allows RCE via Prompt Injection
A critical Langroid vulnerability causes RCE via prompt injection. Learn how this LLM security flaw impacts database hosts and how to patch it.
18 views
Daily Writeups
⤷ Title: IBM Aspera Vulnerabilities Patched in New Security Bulletin
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 01:44:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #Data Security #IBM Aspera #Security Bulletin #vulnerability patch
Daily CyberSecurity
IBM Aspera Vulnerabilities Patched in New Security Bulletin
New IBM Aspera vulnerabilities could allow remote code execution and authentication bypass. Update your High-Speed Transfer applications today.
20 views
Daily Writeups
⤷ Title: Weekly Threat Intelligence: May 25 to May 31, 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 01:39:08 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #Sandboxing #supply chain attack #vulnerability management #Zero_Day Exploits
Daily CyberSecurity
Weekly Threat Intelligence: May 25 to May 31, 2026
Read our weekly threat intelligence briefing. Our active vulnerability report reveals new zero-day exploits and CISA KEV additions for May 2026.
22 views
Daily Writeups
⤷ Title: Notepad++ Exploit Code and Flaws Publicly Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 01:11:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #notepad++ #Patch Update #proof_of_concept #Public Disclosure #Vulnerability
Daily CyberSecurity
Notepad++ Exploit Code and Flaws Publicly Disclosed
Learn about the new Notepad++ security flaws. Public Notepad++ exploit code triggers arbitrary code execution. Update to version v8.9.6.1 now.
29 views
Daily Writeups
⤷ Title: Critical FreeBSD Kernel Buffer Overflow Disclosed: Public Details & PoC Out
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 01:00:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #freebsd #kernel vulnerability #Local Privilege Escalation #Public PoC #security patch #Stack Buffer Overflow
Daily CyberSecurity
Critical FreeBSD Kernel Buffer Overflow Disclosed: Public Details & PoC Out
A critical FreeBSD kernel buffer overflow vulnerability is exposed. Learn more about this threat now that public exploit code released.
43 views
Daily Writeups
⤷ Title: The ChatGPhish Phenomenon: Indirect Prompt Injection via AI Summarization
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:13:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI summarization risk #ChatGPhish prompt injection #ChatGPT Markdown vulnerability #Indirect Prompt Injection #Permiso security research #web tracking pixel
Information Security News
ChatGPhish Prompt Injection: ChatGPT Phishing Risk
Discover the ChatGPhish prompt injection technique. Learn how malicious web summaries trick ChatGPT into rendering phishing links and tracking pixels.
33 views
Daily Writeups
⤷ Title: The Wikimedia Schism: Editors Revolt Over Community Tech Dissolution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:10:58 +0000
════════════════════════
⌗ Tags: #Technology #Community Tech team dissolved #volunteer contributor backlash #Wiki Workers United union #Wikimedia Foundation layoffs #Wikipedia editor strike #Wikipedia protest campaign
Information Security News
Wikipedia Editor Strike: Wikimedia Layoffs Backlash
Discover why a Wikipedia editor strike is looming. Learn how the dissolution of the Community Tech team sparked massive backlash and union allegations.
26 views
Daily Writeups
⤷ Title: The Rise of the Algorithmic Intruder: AI-Driven Exploitation of Marimo Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:07:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability #AI agent cyberattack #autonomous malware post_exploitation #database exfiltration vector #Marimo CVE_2026_39987 exploit #notebook pre_auth RCE #Sysdig threat intelligence
Information Security News
Marimo CVE-2026-39987 Exploit: AI Agent Cyberattack
Analyze the Marimo CVE-2026-39987 exploit. Learn how an autonomous AI agent weaponized this flaw to exfiltrate internal database credentials.
21 views
Daily Writeups
⤷ Title: Perimeter Peril: Bypassing Authentication via Palo Alto Networks GlobalProtect
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:03:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #cookie re_authentication flaw #CVE_2026_0257 authentication bypass #Palo Alto Networks exploit #PAN_OS GlobalProtect vulnerability #Rapid7 threat intelligence #VPN edge perimeter security
Information Security News
CVE-2026-0257 Authentication Bypass: VPN Exploit Guide
Learn about the active CVE-2026-0257 authentication bypass in PAN-OS. Discover how attackers exploit GlobalProtect VPNs and find key mitigations.
22 views
Daily Writeups
⤷ Title: The Horizon of Justice: The FBI’s Historic $8 Billion Cryptocurrency Seizure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:31:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chen Zhi Bitcoin indictment #cyber fraud compounds #FBI cryptocurrency enforcement #Operation Blackout crypto seizure #Prince Holding Group #Starlink geopolitical collaboration
Information Security News
Operation Blackout Crypto Seizure: FBI Historic Takedown
Explore the massive Operation Blackout crypto seizure. Learn how the FBI recovered billions from the Prince Holding Group and disabled illicit terminals.
20 views
Daily Writeups
⤷ Title: Weaponizing Management Consoles: The FortiClient EMS Exploitation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:25:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arctic Wolf Labs report #CVE_2026_35616 vulnerability #EKZ Infostealer analysis #endpoint security bypass #FortiClient EMS exploit #session cookie hijacking
Information Security News
FortiClient EMS Exploit: EKZ Infostealer Malware Guide
Analyze the recent FortiClient EMS exploit. Learn how attackers leverage CVE-2026-35616 to deliver EKZ Infostealer and bypass endpoint protection.
14 views
Daily Writeups
⤷ Title: The BlackToad Chronology: Masking Malware Through Network Severance
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:06:14 +0000
════════════════════════
⌗ Tags: #Malware #BlackToad malware analysis #cyber evasion tactics #JUMPSEC threat intelligence #network disruption technique #Nigerian cybercrime network #Remcos RAT payload
Information Security News
BlackToad Malware Analysis: Remcos RAT and Network Evasion
Read our BlackToad malware analysis. Learn how this Nigerian cybercrime group uses network disconnection to blind EDR tools and drop the Remcos RAT.
16 views
Daily Writeups
⤷ Title: Severe Plesk Privilege Escalation Flaw Patched in Linux Versions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Linux Security #Plesk #privilege escalation #Server Security #Xpath injection
Daily CyberSecurity
Severe Plesk Privilege Escalation Flaw Patched in Linux Versions
Secure your servers against a major Plesk privilege escalation flaw. Learn how the latest CVE-2026-44962 patch protects Linux infrastructure.
12 views
Daily Writeups
⤷ Title: The Windows 10 Sunset: HP’s Market Opportunity and the Consumer ESU Deadline
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:37:32 +0000
════════════════════════
⌗ Tags: #Technology #Windows #consumer ESU program #enterprise update costs #HP hardware refresh #IoT LTSC alternatives #Microsoft security lifecycle #Windows 10 extended support
Daily CyberSecurity
The Windows 10 Sunset: HP's Market Opportunity and the Consumer ESU Deadline
Learn about the Windows 10 extended support lifecycle. Discover consumer ESU details, enterprise update costs, and HP hardware trends.
14 views