Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Naxclow IoT Vulnerabilities: 7 Flaws Let Attackers Hijack Doorbells and Cameras
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 01:45:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #CVE_2026_28742 #Device Takeover #Hard_Coded Key #IoT security #Naxclow #Smart Doorbell
Daily CyberSecurity
Naxclow IoT Vulnerabilities: 7 Flaws Let Attackers Hijack Doorbells and Cameras
CISA warns of 7 Naxclow IoT vulnerabilities, including a hard-coded key (CVE-2026-28742) enabling device takeover of doorbells and cameras.
15 views
Daily Writeups
⤷ Title: FreeSWITCH Heap Buffer Overflow Bugs Expose Servers to Pre-Auth Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 01:01:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_49840 #CVE_2026_49841 #FreeSWITCH #Heap Buffer Overflow #libesl #mod_verto
Daily CyberSecurity
FreeSWITCH Heap Buffer Overflow Bugs Expose Servers to Pre-Auth Attacks
Two pre-auth FreeSWITCH heap buffer overflow bugs (CVE-2026-49841, CVE-2026-49840) hit mod_verto and libesl. Update to v1.11.1 to stay safe.
12 views
Daily Writeups
⤷ Title: Thousands of phpBB Forums Exposed by Critical Authentication Bypass
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 00:27:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Authentication Bypass #CVE_2026_48611 #OAuth #phpBB #phpBB 3.3.17
Daily CyberSecurity
Thousands of phpBB Forums Exposed by Critical Authentication Bypass
A critical phpBB authentication bypass (CVE-2026-48611) lets attackers hijack any account on thousands of forums. Update to 3.3.17 now.
18 views
Daily Writeups
⤷ Title: LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 00:00:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CageFS #CloudLinux #CPanel #CVE_2026_54420 #LiteSpeed #privilege escalation #Shared Hosting
Daily CyberSecurity
LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
CVE-2026-54420, a LiteSpeed cPanel privilege escalation flaw, is exploited in the wild to gain root on shared hosting. Patch to plugin v2.4.8 now.
12 views
Daily Writeups
⤷ Title: MSRPM Internals: What the AMD APM Actually Means
════════════════════════
𐀪 Author: Matheus Santos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 01:43:48 GMT
════════════════════════
⌗ Tags: #amd #hacking #software_architecture #hypervisors #programming
Medium
MSRPM Internals: What the AMD APM Actually Means
Astaroth Development Notes — MSR Permission Map Implementation
17 views
Daily Writeups
⤷ Title: I Cleared the eWPT — Here’s Everything You Need to Know
════════════════════════
𐀪 Author: Divya
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 00:04:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #certification #security
Medium
I Cleared the eWPT — Here’s Everything You Need to Know
Divya Gupta
19 views
Daily Writeups
⤷ Title: Velvet Ant Hid in Air-Gapped Network for 10 Years
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:49:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #air_gapped network #China APT #cybersecurity #OpenSSH Compromise #Operation Highland #PAM Backdoor #Velvet Ant
Information Security News
Velvet Ant Hid in Air-Gapped Network for 10 Years
Sygnia exposes Operation Highland: China-linked Velvet Ant persisted for nearly 10 years in an air-gapped network by backdooring PAM and OpenSSH.
17 views
Daily Writeups
⤷ Title: CVE-2026-46316: KVM arm64 Guest Escapes to Host
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:47:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #ARM64 #cloud security #CVE_2026_46316 #KVM Escape #Linux Kernel #Virtual Machine Escape
Information Security News
CVE-2026-46316: KVM arm64 Guest Escapes to Host
CVE-2026-46316 is a critical Linux KVM arm64 flaw scoring 9.3 that lets a guest VM escape to the host kernel via a vGIC-ITS race condition.
15 views
Daily Writeups
⤷ Title: phpBB Authentication Bypass Fixed in Version 3.3.17
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:35:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Aikido Security #authentication bypass #Forum Security #phpBB #Session Hijacking #Web Vulnerability
Information Security News
phpBB Authentication Bypass Fixed in Version 3.3.17
A critical phpBB authentication bypass in 3.3.16 and earlier lets attackers hijack any user session with a single HTTP request. Update now.
11 views
Daily Writeups
⤷ Title: AMD Denied $10K Bounty After CVE-2026-40677 Fix
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:32:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #AMD #bug bounty #CVE_2026_40677 #MitM Attack #MrBruh #Vulnerability Disclosure
Information Security News
AMD Denied $10K Bounty After CVE-2026-40677 Fix
Researcher MrBruh found CVE-2026-40677 in AMD's update utility, reported it properly, and was denied a $10,000 bounty after AMD changed its own rules.
12 views
Daily Writeups
⤷ Title: 152 Chrome Wallpaper Extensions Hid Ad Tracking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:27:13 +0000
════════════════════════
⌗ Tags: #Malware #Ad Tracking #Browser Malware #Chrome extensions #Chrome Web Store #Live Wallpaper #Socket Security
Information Security News
152 Chrome Wallpaper Extensions Hid Ad Tracking
Socket found 152 Chrome live wallpaper extensions secretly faking Google search traffic and harvesting user data for ad networks.
12 views
Daily Writeups
⤷ Title: Anthropic Mythos Restrictions: White House AI Security Concerns
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:24:18 +0000
════════════════════════
⌗ Tags: #Technology #AI security #Anthropic #export controls #Fable 5 #Mythos 5
Information Security News
Anthropic Mythos Restrictions: White House AI Security
The White House enacted Anthropic Mythos restrictions following national security concerns regarding potential Chinese cyber-espionage access to the AI.
11 views
Daily Writeups
⤷ Title: Three Tornado Security Vulnerabilities Patched in Version 6.5.6
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 02:31:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Credential Leak #CVE_2026_49853 #CVE_2026_49854 #CVE_2026_49855 #gzip bomb #Python #SimpleAsyncHTTPClient #tornado
Daily CyberSecurity
Three Tornado Security Vulnerabilities Patched in Version 6.5.6
Three Tornado security vulnerabilities (CVE-2026-49853, CVE-2026-49855, CVE-2026-49854) risk credential leaks and DoS. Update to Tornado 6.5.6 now.
16 views
Daily Writeups
⤷ Title: Vitest RCE Vulnerability (CVSS 9.8): Public PoC Disclosed for Testing Tool With 57M Weekly Downloads (CVE-2026-53633)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 02:12:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Browser Mode #CDP #CVE_2026_53633 #npm #rce #Supply Chain #Vite #Vitest
Daily CyberSecurity
Vitest RCE Vulnerability (CVSS 9.8): Public PoC Disclosed for Testing Tool With 57M Weekly Downloads (CVE-2026-53633)
A critical Vitest RCE vulnerability (CVE-2026-53633, CVSS 9.8) has public PoC code. Browser Mode flaw enables config overwrite and remote code execution.
12 views
Daily Writeups
⤷ Title: Haskell TLS Vulnerability Lets Attackers Forge Trusted Certificates (CVE-2026-9648)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 02:01:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CERT/CC #Certificate Validation #crypton_x509_validation #CVE_2026_9648 #Haskell #tls #X.509 NameConstraints
Daily CyberSecurity
Haskell TLS Vulnerability Lets Attackers Forge Trusted Certificates (CVE-2026-9648)
A Haskell TLS vulnerability (CVE-2026-9648) lets attackers bypass X.509 NameConstraints to impersonate domains. Update crypton-x509-validation to 1.9.1.
10 views
Daily Writeups
⤷ Title: How to Find More Subdomains Than Everyone Else
════════════════════════
𐀪 Author: Masood Nfc
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 02:05:28 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #hacking #bug_bounty #recon
Medium
How to Find More Subdomains Than Everyone Else
Recon is a numbers game. Here is how to win it.
9 views
Daily Writeups
⤷ Title: 5 Beginner Mistakes That Get Your Bug Bounty Reports Rejected
════════════════════════
𐀪 Author: Masood Nfc
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 02:02:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #programming #cybersecurity #hacking
Medium
5 Beginner Mistakes That Get Your Bug Bounty Reports Rejected
Avoid these and your acceptance rate jumps overnight.
9 views
Daily Writeups
⤷ Title: Hack The Forge
════════════════════════
𐀪 Author: Tải Roblox
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:51:41 GMT
════════════════════════
⌗ Tags: #hacking #android_mod_game #apk_mod #fighting_game_mode
Medium
Hack The Forge
The Forge là một trong những tựa game Roblox hấp dẫn nhờ lối chơi rèn vũ khí, thu thập nguyên liệu và chiến đấu với boss. Tuy nhiên, quá…
13 views
Daily Writeups
⤷ Title: I Mapped an Entire Building’s RF Footprint Without Walking Inside. Here’s How.
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:51:07 GMT
════════════════════════
⌗ Tags: #information_technology #hacking #cybersecurity #network_security #drones
Medium
I Mapped an Entire Building’s RF Footprint Without Walking Inside. Here’s How.
A 200$ drone, a 25$ SDR dongle, and an afternoon. That’s all it took.
18 views
Daily Writeups
⤷ Title: 7 Types of Malware Every Beginner Should Know
════════════════════════
𐀪 Author: UnSaLt3D
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 02:01:56 GMT
════════════════════════
⌗ Tags: #information_security #infosec #cybersecurity #malware #cybersecurityforbeginners
Medium
7 Types of Malware Every Beginner Should Know
“Malware” is one of those words everyone uses but almost nobody can actually explain. It is not one thing. It is a whole family, and each…
14 views
Daily Writeups
⤷ Title: Tryhackme | Incident Response Process |WhiteUp | Por Kinho0woned
════════════════════════
𐀪 Author: Kinho0Woned
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 02:54:10 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #incident_response #tryhackme #cybersecurity
Medium
Tryhackme | Incident Response Process |WhiteUp | Por Kinho0woned
Br | Pt “ Processo de Resposta a Incidentes “
13 views