Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Critical Apache Solr Security Flaw Exposes Clusters to Remote Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:40:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Solr #Authentication Bypass #CVE_2026_44825 #default credentials #Enterprise Search Security
Daily CyberSecurity
Critical Apache Solr Security Flaw Exposes Clusters to Remote Takeover
A high-severity Apache Solr default credentials vulnerability is exposed. Learn the critical CVE-2026-44825 workaround to secure your clusters.
18 views
Daily Writeups
⤷ Title: Critical GitHub Token Stealing Bug Exploits Web-Based Code Editors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:18:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Ammar Askar #Browser Sandbox #github.dev #token exfiltration #VSCode vulnerability
Daily CyberSecurity
Critical GitHub Token Stealing Bug Exploits Web-Based Code Editors
A critical GitHub token stealing bug targets github.dev web spaces. Learn how it exploits the VSCode webview security model to hijack private repositories.
13 views
Daily Writeups
⤷ Title: InHand Router Flaws: Command Injection Patches Released
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:15:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_38702 #firmware update #Industrial Router #InHand Networks #Router Patch #VPN security
Daily CyberSecurity
InHand Router Flaws: Command Injection Patches Released
Severe InHand router flaws expose industrial networks to command injection vulnerabilities. Update your industrial firmware immediately to patch these bugs.
19 views
Daily Writeups
⤷ Title: Actively Exploited Vulnerabilities Added to CISA KEV Catalog
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:07:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android Framework #CISA KEV #CVE_2022_0492 #CVE_2025_48595 #Linux Kernel
Daily CyberSecurity
Actively Exploited Vulnerabilities Added to CISA KEV Catalog
CISA added new actively exploited vulnerabilities to its catalog. Learn how the Android privilege escalation flaw impacts corporate environments.
17 views
Daily Writeups
⤷ Title: Critical Security Flaw Exposes Industrial IoT Converters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 01:45:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_7786 #Firmware Flaw #IoT security #PUSR #USR_W610
Daily CyberSecurity
Critical Security Flaw Exposes Industrial IoT Converters
A critical USR-W610 vulnerability exposes hardcoded administrative credentials. Learn how to secure your PUSR IoT converters from exploitation.
13 views
Daily Writeups
⤷ Title: Critical Langflow RCE Vulnerability Exposes AI Workflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 01:01:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48519 #Langflow #Patch Update #Public Flows #Remote Code Execution
Daily CyberSecurity
Critical Langflow RCE Vulnerability Exposes AI Workflows
A critical Langflow RCE vulnerability impacts the Shareable Playground feature. Learn about the new security patches available.
18 views
Daily Writeups
⤷ Title: Laravel CRLF Injection Vulnerability Threatens Web Applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 00:30:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CRLF Injection #Laravel Framework #Outbound Email Security #Software Remediation #Symfony Mailer
Daily CyberSecurity
Laravel CRLF Injection Vulnerability Threatens Web Applications
A severe Laravel CRLF injection vulnerability exposes web apps to mail relay abuse. Apply the latest CVE-2026-48019 patch to protect your infrastructure.
17 views
Daily Writeups
⤷ Title: Smart Contract Lifecycle Deploy se Exploit Tak
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:31:02 GMT
════════════════════════
⌗ Tags: #smart_contracts #bug_bounty #web3 #penetration_testing #infosec
Medium
Smart Contract Lifecycle Deploy se Exploit Tak
Series: Web3 Security Zero se Advance 🛡️ | Article #8 By HackerMD | 28 min read
16 views
Daily Writeups
⤷ Title: Salah Pilih Jurusan IT: Masalah yang Lebih Umum dari yang Dibayangkan
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:11:19 GMT
════════════════════════
⌗ Tags: #technology #education #information_security #hacking #cybersecurity
Medium
Salah Pilih Jurusan IT: Masalah yang Lebih Umum dari yang Dibayangkan
Banyak siswa tertarik masuk ke SMA IT atau SMK IT karena melihat perkembangan teknologi yang begitu pesat.
15 views
Daily Writeups
⤷ Title: Finding and exploiting an unused API endpoint
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:27:35 GMT
════════════════════════
⌗ Tags: #api #cybernerddd #cybersecurity #portswigger #hacking
Medium
Finding and exploiting an unused API endpoint
Overview
15 views
Daily Writeups
⤷ Title: Telegram: The Internet’s Most Overlooked OSINT Goldmine
════════════════════════
𐀪 Author: Neion Chowdhury
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:21:00 GMT
════════════════════════
⌗ Tags: #telegram #hacking #hacking_tools #osint_investigation #osint
Medium
Telegram: The Internet’s Most Overlooked OSINT Goldmine
Why every threat hunter, cyber researcher, and OSINT analyst should be paying closer attention.
19 views
Daily Writeups
⤷ Title: 150,000 Infections and No Malicious Domains: Inside the ClearFake Upgrade
════════════════════════
𐀪 Author: Ravi Sankar
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 02:59:35 GMT
════════════════════════
⌗ Tags: #hacking #infosec #javascript #malware #cybersecurity
Medium
150,000 Infections and No Malicious Domains: Inside the ClearFake Upgrade
The alert never fired. No malicious domain. No suspicious binary. No PowerShell in your logs — just a trusted Windows script, a legitimate…
16 views
Daily Writeups
⤷ Title: Inside a Nemesys Ransomware Deployment
════════════════════════
𐀪 Author: Shahzeb M
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:50:39 GMT
════════════════════════
⌗ Tags: #incident_response #threat_intelligence #cybersecurity #infosec #blue_team
Medium
Inside a Nemesys Ransomware Deployment
Ransomware-as-a-Service, so hot right now. This incident bears the hallmarks of Dharma and Phobos affiliated campaigns, groups that have…
13 views
Daily Writeups
⤷ Title: Kali Linux VMware Lab Setup: Critical Fixes, Essential Commands and Snapshot Strategy
════════════════════════
𐀪 Author: Muhammad Jubair Hossain
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:15:57 GMT
════════════════════════
⌗ Tags: #configuration #penetration_testing #troubleshooting #kali_linux #problem_solving
Medium
Kali Linux VMware Lab Setup: Critical Fixes, Essential Commands and Snapshot Strategy
You may already know how to download the pre-built Kali Linux image for VMware. There are plenty of resources available for installation…
21 views
Daily Writeups
⤷ Title: How I Hacked a Live Chatbot and Earned My First $$$$ (4-Digit) Bounty
════════════════════════
𐀪 Author: Mahbubur Rahman Soraf
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:52:33 GMT
════════════════════════
⌗ Tags: #security_research #ethical_hacking #information_security #cybersecurity #bug_bounty
Medium
How I Hacked a Live Chatbot and Earned My First $$$$ (4-Digit) Bounty
Assalamu Alaikum. I’m Mahbubur Rahman Soraf, a part-time bug bounty hunter from Bangladesh.
33 views
Daily Writeups
⤷ Title: Nmap: The Foundation of Network Reconnaissance
════════════════════════
𐀪 Author: Hathical Ecker
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:33:15 GMT
════════════════════════
⌗ Tags: #reconnaissance #ethical_hacking #cybersecurity #kali_linux #linux
Medium
Nmap: The Foundation of Network Reconnaissance
Network reconnaissance is the first phase of any structured security assessment. Before testing for vulnerabilities, a practitioner must…
33 views
Daily Writeups
⤷ Title: No FA(medium): CyLab Writeup
════════════════════════
𐀪 Author: Vyom Modi
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:11:59 GMT
════════════════════════
⌗ Tags: #cylab #ctf #picoctf #cybersecurity #ethical_hacking
Medium
No FA(medium): CyLab Writeup
In this challenge, we have a website, website backend code and leaked data.
44 views
Daily Writeups
⤷ Title: Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 11:46:54 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: Kimsuky HttpSpy Malware Campaign Exploits Networks via Deceptive Overlays
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:15:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #ENKI Research #HttpSpy #JSONPing #Kimsuky #South Korea Threats
Daily CyberSecurity
Kimsuky HttpSpy Malware Campaign Exploits Networks via Deceptive Overlays
Learn how the Kimsuky HttpSpy malware campaign leverages a novel JSONPing execution check to target South Korean networks and evade modern security.
27 views
Daily Writeups
⤷ Title: What I Learned While Testing a Ride-Sharing Application
════════════════════════
𐀪 Author: Williams K A
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 06:01:12 GMT
════════════════════════
⌗ Tags: #pentester #bug_bounty #ethical_hacking #bugs
Medium
What I Learned While Testing a Ride-Sharing Application
As a developer and cybersecurity enthusiast, I enjoy exploring applications not just from a user’s perspective, but also from a quality and…
17 views
Daily Writeups
⤷ Title: SpyAI Explained | Passive Reconnaissance for AI Systems
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 05:39:11 GMT
════════════════════════
⌗ Tags: #web_development #bug_bounty #cybersecurity #hacking #artificial_intelligence
Medium
SpyAI Explained | Passive Reconnaissance for AI Systems 🔥
Artificial Intelligence is rapidly becoming part of modern infrastructure.
113 views