Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Website Exploitation: Information Gathering & Vulnerability Scanning on Web and CMS
════════════════════════
𐀪 Author: Habibi
════════════════════════
ⴵ Time: Sun, 08 Feb 2026 10:52:29 GMT
════════════════════════
⌗ Tags: #web #vulnerability_scanning #cms #ethical_hacking #website
Medium
Website Exploitation: Information Gathering & Vulnerability Scanning on Web and CMS
“Before attacking, first know the target.” This phrase is almost always a key principle in the world of web security. The most important…
53 views
Daily Writeups
⤷ Title: The ‘Must-Patch’ Release: WordPress 6.9.2 Scrambles to Fix 10 Critical Flaws from XSS to SSRF
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 03:58:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CMS Security #cybersecurity #infosec #Patch Alert #Path Traversal #ssrf #vulnerability management #WordPress 6.9.2 #wordpress security #XSS Vulnerability
Daily CyberSecurity
The 'Must-Patch' Release: WordPress 6.9.2 Scrambles to Fix 10 Critical Flaws from XSS to SSRF
Urgent: WordPress 6.9.2 patches 10 critical security flaws, including XSS, SSRF, and path traversal. Update your site immediately to prevent exploitation.
25 views
Daily Writeups
⤷ Title: Winter CMS Urgently Patches Critical 10.0 CVSS Privilege Escalation Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:24:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #CMS Security #CVE_2026_27591 #CVSS 10 #cybersecurity #infosec #Patch Alert #privilege escalation #vulnerability management #Winter CMS
Daily CyberSecurity
Winter CMS Urgently Patches Critical 10.0 CVSS Privilege Escalation Flaw
Winter CMS urgently patches a critical 10.0 CVSS privilege escalation flaw (CVE-2026-27591) allowing low-level backend users to gain full system control.
32 views
Daily Writeups
⤷ Title: The WordPress Killer? Cloudflare Unveils EmDash, the AI-Native CMS Built for the Serverless Epoch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 09:15:52 +0000
════════════════════════
⌗ Tags: #Technology #AI_native #Astro 6.0 #cloudflare #cms #Cybersecurity 2026 #EmDash #open_source #serverless #TypeScript #V8 Isolate #WordPress Alternative
Daily CyberSecurity
The WordPress Killer? Cloudflare Unveils EmDash, the AI-Native CMS Built for the Serverless Epoch
Cloudflare debuts EmDash, an AI-native, serverless CMS built on Astro 6.0. Say goodbye to WordPress plugin hacks with V8 isolate sandboxing and passkey security.
6 views
Daily Writeups
⤷ Title: Cloudflare Targets WordPress With New AI-Powered EmDash CMS
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 14:26:07 +0000
════════════════════════
⌗ Tags: #Security #Technology #AI #AI Bot #Artificial Intelligence #CloudFlare #CMS #Cybersecurity #EmDash #Matt Mullenweg #Wordpress
Hackread
Cloudflare Targets WordPress With New AI-Powered EmDash CMS
Cloudflare launches EmDash CMS, an AI-powered platform built to fix WordPress security flaws with sandboxed plugins, serverless scaling and passkey auth.
43 views
Daily Writeups
⤷ Title: Total CMS Takeover: Movable Type Patches Critical 9.8 CVSS Perl RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 02:12:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Panel Security #CMS Security #CVE_2026_25776 #CVE_2026_33088 #cybersecurity #infosec #Movable Type #Perl RCE #rce #Six Apart #sql injection
Daily CyberSecurity
Total CMS Takeover: Movable Type Patches Critical 9.8 CVSS Perl RCE
Movable Type patches a critical 9.8 CVSS RCE vulnerability in its Listing Framework. Secure your CMS against Perl code execution and SQLi—update today!
22 views
Daily Writeups
⤷ Title: EspoCRM v9.3.4: From Extension Upload to Remote Code Execution (RCE)
════════════════════════
𐀪 Author: Ali İltizar
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:28:55 GMT
════════════════════════
⌗ Tags: #cms #rce
Medium
EspoCRM v9.3.4: From Extension Upload to Remote Code Execution (RCE)
In this article, I will detail an Authenticated Remote Code Execution (RCE) vulnerability I discovered in EspoCRM (<= v9.3.4). This flaw…
30 views
Daily Writeups
⤷ Title: Stored XSS to Privilege Escalation in Azuriom CMS — When “Trusted Users” Become a Security…
════════════════════════
𐀪 Author: CradS
════════════════════════
ⴵ Time: Fri, 01 May 2026 15:14:40 GMT
════════════════════════
⌗ Tags: #cms #cybersecurity #penetration_testing #appsec #cross_site_scripting
Medium
Stored XSS to Privilege Escalation in Azuriom CMS — When “Trusted Users” Become a Security Assumption
During a recent review of the Azuriom CMS, I identified a behavior involving SVG file uploads that can lead to privilege escalation through…
23 views
Daily Writeups
⤷ Title: Zero-Day Surge: The MetInfo CMS Flaw That Grants Unauthenticated Root Access to Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:24:08 +0000
════════════════════════
⌗ Tags: #Vulnerability #Automated Scanning #China Cyber Security #CMS Security #CVE_2026_29014 #Cyber attack 2026 #MetInfo #PHP Code Injection #RCE #remote code execution #VulnCheck #zero_day
Penetration Testing Tools
Zero-Day Surge: The MetInfo CMS Flaw That Grants Unauthenticated Root Access to Servers
A zero-day vulnerability residing within the Chinese content management system MetInfo has entered a phase of active exploitation
6 views
Daily Writeups
⤷ Title: Critical Strapi Flaws Enable Unauthenticated Admin Takeover and Server RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 02:02:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Takeover #cms #CVE_2026_22599 #CVE_2026_27886 #Cyber Security #Headless CMS #infosec #Patch Alert #rce #sql injection #Strapi
Daily CyberSecurity
Critical Strapi Flaws Enable Unauthenticated Admin Takeover and Server RCE
Two critical flaws in Strapi CMS (CVE-2026-27886 & CVE-2026-22599) allow unauthenticated admin takeover and SQL injection. Update your nodes now!
21 views
Daily Writeups
⤷ Title: What Businesses Should Know Before Migrating Their CMS
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 15:42:16 +0000
════════════════════════
⌗ Tags: #Technology #Business #CMS #Migrating
Hackread
What Businesses Should Know Before Migrating Their CMS
Plan your CMS migration with clean content audits, SEO safeguards, tested data transfer, integrations, staff training, and a safe launch rollback plan with care.
18 views
Daily Writeups
⤷ Title: TryHackme — Lazy Admin Writeup
════════════════════════
𐀪 Author: Fakhri Rahadi
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 05:40:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #ctf #web_penetration_testing #cms
Medium
TryHackme — Lazy Admin Writeup
From Directory Listing to Root Privilege
30 views
Daily Writeups
⤷ Title: Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 00:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic portlet #CMS Security #CVE_2026_57149 #Plone #Plone RCE vulnerability #plone.app.portlets #ssrf #TALES injection
Daily CyberSecurity
Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs
TL;DR Plone patched three critical flaws across two add-on packages. The worst is a Plone RCE vulnerability scoring 9.9 on CVSS. Two more bugs enable denial of service, SSRF, and stored XSS. Why I…
17 views
Daily Writeups
⤷ Title: CMS Exploitation Campaign Plants Webshells on Business Websites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:50:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ACSC #CMS Exploitation #CMS Vulnerabilities #Web Security #webshell #wordpress
Daily CyberSecurity
CMS Exploitation Campaign Plants Webshells on Business Websites
At a glance Actor / group Unattributed malicious cyber actors Activity Mass exploitation of CMS flaws to deploy webshells Targets / victims WordPress and other CMS sites; many Australian SMBs Scal…
11 views
Daily Writeups
⤷ Title: ACSC Warns: CMS Campaign Installs Web Shells via 17 CVEs
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 15:30:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ACSC Advisory #CMS Security #Craft CMS #joomla #Mass Exploitation #Web Shell #WordPress Vulnerability
Information Security News
ACSC Warns: CMS Campaign Installs Web Shells via 17 CVEs
Attackers are compromising websites at scale and installing hidden tools on servers to maintain remote control. The campaign has hit numerous small and medium-sized organizations in Australia. How…
34 views
Daily Writeups
⤷ Title: Back From Vacation & Launching Open Beta: Help Us Test NextBlock CMS (and Get a $500/yr Lifetime…
════════════════════════
𐀪 Author: NextBlock CMS
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 19:19:21 GMT
════════════════════════
⌗ Tags: #cms #supabase #bug_bounty #nextjs #bounty_program
Medium
Back From Vacation & Launching Open Beta: Help Us Test NextBlock CMS (and Get a $500/yr Lifetime…
We’re opening the doors to our Next.js 16 + Supabase full-stack CMS and giving away lifetime premium licenses to everyone who helps us…
24 views