Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: ColdFusion XSS Vulnerability in Form Input: Causes, Fixes & Best Practices
════════════════════════
𐀪 Author: Deepak Purohit
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 05:42:45 GMT
════════════════════════
⌗ Tags: #adobe_coldfusion #software_development #xss_vulnerability #web_development #coldfusion_development
Medium
ColdFusion XSS Vulnerability in Form Input: Causes, Fixes & Best Practices
Stop Cross-Site Scripting in ColdFusion Forms: A Developer’s Defense Guide
45 views
Daily Writeups
⤷ Title: Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 11:35:58 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 11:11:52 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: curl Project Pauses Vulnerability Reports for “Summer of Bliss”
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 07:55:33 +0000
════════════════════════
⌗ Tags: #Technology #curl #HackerOne #open_source #vulnerability management
Daily CyberSecurity
curl Project Pauses Vulnerability Reports for "Summer of Bliss"
curl will halt vulnerability reports throughout July 2026, dubbing it a "summer of bliss," and will delay its 8.22.0 release by two weeks.
29 views
Daily Writeups
⤷ Title: AMD Silently Removes TSME Support from Ryzen CPUs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 07:21:17 +0000
════════════════════════
⌗ Tags: #Technology #AMD #BIOS Update #Cyber Security #Memory Encryption #Ryzen CPUs #TSME
Daily CyberSecurity
AMD Silently Removes TSME Support from Ryzen CPUs
Discover why AMD silently removed Transparent Secure Memory Encryption (TSME) from consumer Ryzen processors and how users uncovered this hidden BIOS update.
20 views
Daily Writeups
⤷ Title: Novo Nordisk Breach Exposes AI Models and Patient Data
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 07:12:31 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Model Theft #Clinical Trial Data #Data Breach #Novo Nordisk #Pharmaceutical Security #Ransomware Extortion
Daily CyberSecurity
Novo Nordisk Breach Exposes AI Models and Patient Data
Hackers breached Novo Nordisk, stealing AI training data, model checkpoints, and pseudonymized clinical trial patient records, now held for ransom.
18 views
Daily Writeups
⤷ Title: Inside the Stealthy Agent Tesla Infection Chain
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 07:12:09 +0000
════════════════════════
⌗ Tags: #Malware #Agent Tesla #cybersecurity #malware #phishing
Daily CyberSecurity
Inside the Stealthy Agent Tesla Infection Chain
Discover how a simple phishing email triggers a complex Agent Tesla infection chain, using process injection and in-memory loading to steal sensitive data.
14 views
Daily Writeups
⤷ Title: Anthropic Claude Lawsuit: Users Sue Over Misleading Limits
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 07:10:25 +0000
════════════════════════
⌗ Tags: #Technology #AI Subscription #Anthropic #Claude Max #Lawsuit #Tech News
Daily CyberSecurity
Anthropic Claude Lawsuit: Users Sue Over Misleading Limits
Discover the details of the recent Anthropic Claude lawsuit. Users claim deceptive advertising regarding the expensive Claude Max subscription usage limits.
11 views
Daily Writeups
⤷ Title: MLTBackdoor Malware Family Fuels Ransomware Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:30:27 +0000
════════════════════════
⌗ Tags: #Malware
Daily CyberSecurity
MLTBackdoor Malware Family Fuels Ransomware Attacks
Discover how the new MLTBackdoor malware family uses the ClickFix infection chain to establish footholds for ransomware attacks and lateral movement.
11 views
Daily Writeups
⤷ Title: Bug Bounty Bootcamp #45: Token?
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:50:03 GMT
════════════════════════
⌗ Tags: #technology #hacking #cybersecurity #bug_bounty #penetration_testing
Medium
Bug Bounty Bootcamp #45: Token? What Token? — How Leaky APIs and Reset Flows Hand You Admin on a Silver Platter
You found a password reset that leaks the magic token in the API response. Or worse — the devs left an endpoint that just gives you…
14 views
Daily Writeups
⤷ Title: I Found 3 Critical Vulnerabilities in an AI-Powered SOC Platform — Full Attack Chain
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:48:56 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #penetration_testing #cybersecurity #bug_bounty #bug_bounty_writeup
Medium
I Compromised Every Tenant on an AI-Powered SOC Platform — Full Attack Chain
Author: Shikhali Jamalzade Github: github.com/alisalive Linkedin: linkedin.com/in/camalzads
16 views
Daily Writeups
⤷ Title: The Last Frontier: Hardware Hacking Is the Future of Cybersecurity — And Almost Nobody Is Ready For…
════════════════════════
𐀪 Author: Akifkhan
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:53:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #hardware #cybersecurity #information_security
Medium
The Last Frontier: Hardware Hacking Is the Future of Cybersecurity — And Almost Nobody Is Ready For It
Tags: hardware-hacking iot-security embedded-systems cybersecurity ethical-hacking firmware-analysis side-channel-attacks bug-bounty…
11 views
Daily Writeups
⤷ Title: The Silent Token Leak: The Hidden Danger of WebView.loadUrl() in Android
════════════════════════
𐀪 Author: Hirad
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:15:16 GMT
════════════════════════
⌗ Tags: #pentesting #android #bug_bounty #hacks
Medium
The Silent Token Leak: The Hidden Danger of WebView.loadUrl() in Android
Introduction
10 views
Daily Writeups
⤷ Title: Why Software Composition Analysis Is Now a Core Pillar of Application Security
════════════════════════
𐀪 Author: Gargiben
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 07:14:22 GMT
════════════════════════
⌗ Tags: #software_supply_chain #opensource_security #application_security #composition_software
Medium
Why Software Composition Analysis Is Now a Core Pillar of Application Security
QKS Group’s Software Composition Analysis (SCA) market delivers an in-depth assessment of the global landscape, covering emerging…
14 views
Daily Writeups
⤷ Title: API Attacks 104: Rate Limit Yoksa, API Kötüye Kullanılabilir
════════════════════════
𐀪 Author: İlkan Aydoğan
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:42:00 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #web_security #application_security #cybersecurity #api_security
Medium
API Attacks 104: Rate Limit Yoksa, API Kötüye Kullanılabilir
Bir API endpoint’i doğru çalışıyor olabilir, kullanıcı giriş yapıyor olabilir, yetki kontrolü de belirli ölçüde uygulanıyor olabilir…
12 views
Daily Writeups
⤷ Title: TryHackMe : Ignite Writeup
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:30:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #tryhackme
Medium
TryHackMe : Ignite Writeup
Solution:
13 views
Daily Writeups
⤷ Title: Advanced Scam Intelligence — Part 1 : Thinking Like A Threat Intelligence Analyst
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:16:26 GMT
════════════════════════
⌗ Tags: #hacking #data_analysis #cybersecurity #ai #security
Medium
🧠 Advanced Scam Intelligence — Part 1 : Thinking Like A Threat Intelligence Analyst
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
13 views
Daily Writeups
⤷ Title: I Wasn’t an Admin — Until I Played with One API
════════════════════════
𐀪 Author: Naveen
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 07:02:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #vapt #penetration_testing
Medium
I Wasn’t an Admin — Until I Played with One API
Introduction
13 views
Daily Writeups
⤷ Title: Top 5 VAPT Mistakes Bengaluru Startups Make
(And How to Fix Them)
════════════════════════
𐀪 Author: Shrutiwrites
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:06:23 GMT
════════════════════════
⌗ Tags: #penetration_testing #vapt #cybersecurity #security_startup #information_security
Medium
Top 5 VAPT Mistakes Bengaluru Startups Make
(And How to Fix Them)
Introduction
13 views
Daily Writeups
⤷ Title: TryHackMe Injectus IX | Model Extraction | Model Leakage Event | Task 2
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 06:01:32 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme
Medium
TryHackMe Injectus IX | Model Extraction | Model Leakage Event | Task 2
Room link: https://tryhackme.com/room/injectusix
9 views
Daily Writeups
⤷ Title: I Found a Real Vulnerability in a YC-Backed Startup. They Replied With Two AI-Generated Words.
════════════════════════
𐀪 Author: T Dhanushit
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 07:23:48 GMT
════════════════════════
⌗ Tags: #ycombinator #founders #ethical_hacking #ai #cybersecurity
Medium
I Found a Real Vulnerability in a YC-Backed Startup. They Replied With Two AI-Generated Words.
A lesson on responsible disclosure, ethical research, and why AI tools don’t belong in professional conversations.
9 views