Daily Writeups
@Daily_Writeups
3.89K subscribers
4 photos
135K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.89K subscribers
Daily Writeups
⤷ Title: LiteLLM Authentication Bypass via Host Header Injection (CVE-2026-49468)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:35:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Gateway #API security #Authentication Bypass #CVE_2026_49468 #CWE_290 #FastAPI #host header injection #LiteLLM #LLM Proxy #Starlette
Daily CyberSecurity
LiteLLM Authentication Bypass via Host Header Injection (CVE-2026-49468)
A critical LiteLLM authentication bypass (CVE-2026-49468) lets crafted Host Header Injection reach protected AI Gateway routes. Patch in 1.84.0.
21 views
Daily Writeups
⤷ Title: Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:00:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI workflow security #API security #CVE_2026_55450 #CWE_306 #CWE_400 #Denial of Service #File Upload Vulnerability #Information Disclosure #Langflow #unauthenticated upload
Daily CyberSecurity
Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)
A critical Langflow file upload flaw (CVE-2026-55450) is public with a PoC, enabling unauthenticated denial-of-service and path disclosure. Patch 1.9.1.
18 views
Daily Writeups
⤷ Title: Rockwell Automation patches multiple ICS flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 00:33:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #1794_AENTR #Authentication Bypass #AVEVA PI Data Archive #CVE_2026_0647 #Denial of Service #EtherNet/IP #FactoryTalk Historian #FLEX I/O #ICS security #Rockwell Automation
Daily CyberSecurity
Rockwell Automation patches multiple ICS flaws
Rockwell Automation vulnerabilities affect FactoryTalk Historian and FLEX I/O adapters, including a critical unauthenticated password-change flaw.
13 views
Daily Writeups
⤷ Title: How I Found a Server-Side Entitlement Issue That Allowed Free Users to Access Premium Features
════════════════════════
𐀪 Author: Thoristo
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:45:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackerone #bug_bounty #ethical_hacking #pentesting
Medium
How I Found a Server-Side Entitlement Issue That Allowed Free Users to Access Premium Features
While testing a SaaS platform through its VDP, I noticed that several features were locked behind higher subscription tiers. I wanted to see whether those restrictions were actually enforced by the backend.
14 views
Daily Writeups
⤷ Title: $900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:31:01 GMT
════════════════════════
⌗ Tags: #information_security #session_flaw #bug_bounty #programming #cybersecurity
Medium
$900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
Hi Everyone! Recently, while testing a SaaS platform (let’s call it ExampleCenter), I came across a very interesting access control issue…
19 views
Daily Writeups
⤷ Title: Complete Guide to Authentication Vulnerabilities
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #technology #cybersecurity #penetration_testing #hacking
Medium
Complete Guide to Authentication Vulnerabilities
Master authentication vulnerability exploitation and mitigation in Bug Bounty, featuring technical impact analysis and PoC examples.
18 views
Daily Writeups
⤷ Title: Why Cybersecurity Job Seekers With Certifications Still Can't Get Interviews - What Works in 2026!
════════════════════════
𐀪 Author: Chase
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:13:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #job_search #networking #career_advice
Medium
Why Cybersecurity Job Seekers With Certifications Still Can't Get Interviews - What Works in 2026!
The hiring game changed. Here's the version of it that's actually being played right now.
26 views
Daily Writeups
⤷ Title: How I Cut My AI Agent Costs by 90% for Bug Bounty Automation (Without Switching Tools)
════════════════════════
𐀪 Author: 0x-elfateh
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 00:17:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #bug_bounty_tips #claude #automation
Medium
How I Cut My AI Agent Costs by 90% for Bug Bounty Automation (Without Switching Tools)
Run Claude Code CLI on DeepSeek’s API using one environment variable — keep your subscription for daily use, burn cheap API tokens for VPS…
32 views
Daily Writeups
⤷ Title: Microsoft Discovers Crypto Clipper Utilizing Tor for Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Clipper #Microsoft Security #Tor Network #USB Malware
Information Security News
Microsoft Discovers Crypto Clipper Utilizing Tor for Control
Microsoft has detailed a sophisticated crypto clipper utilizing Tor for command and control, spreading via USB drives to hijack cryptocurrency transactions.
26 views
Daily Writeups
⤷ Title: Hackers Hijacking Roblox Games Through Fake Job Offers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:46:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Game Development #phishing #Roblox #Social Engineering
Information Security News
Hackers Hijacking Roblox Games Through Fake Job Offers
Cybercriminals are now hijacking entire Roblox games using fake job offers and malware. Discover how developers are losing their projects and income.
27 views
Daily Writeups
⤷ Title: FreeBSD 15.1-RELEASE Launches with Network and Kernel Upgrades
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:43:42 +0000
════════════════════════
⌗ Tags: #Linux #FreeBSD #open source #operating system #Sysadmin
Information Security News
FreeBSD 15.1-RELEASE Launches with Network and Kernel Upgrades
FreeBSD 15.1-RELEASE introduces major updates to network drivers, ZFS, and virtualization. Discover the latest enhancements in this robust operating system.
14 views
Daily Writeups
⤷ Title: GrapheneOS Achieves Early Port to Android 17
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:40:50 +0000
════════════════════════
⌗ Tags: #Android #Technology #Android 17 #GrapheneOS #mobile security #Privacy Firmware
Information Security News
GrapheneOS Achieves Early Port to Android 17
GrapheneOS successfully ported its secure firmware to Android 17. Discover how early code access accelerated this highly anticipated privacy-focused release.
15 views
Daily Writeups
⤷ Title: RoguePlanet: Unpatched Defender Flaw Grants SYSTEM-Level Access (CVE-2026-50656)
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:37:05 +0000
════════════════════════
⌗ Tags: #Vulnerability
Information Security News
RoguePlanet: Unpatched Defender SYSTEM Exploit
RoguePlanet (CVE-2026-50656) is an unpatched Defender flaw letting local attackers gain SYSTEM access via a race condition.
19 views
Daily Writeups
⤷ Title: FortiBleed Campaign Exploits Tens of Thousands of Fortinet Firewalls
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:31:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #credential stuffing #data breach #Firewall Security #FortiBleed #Fortinet
Information Security News
FortiBleed Campaign Exploits Thousands of Fortinet Firewalls
The massive FortiBleed campaign has compromised tens of thousands of Fortinet firewalls worldwide, exposing global enterprises to credential theft.
16 views
Daily Writeups
⤷ Title: INTERPOL Warns of Industrialized Cybercrime Across Asia and the Pacific
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:29:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #Interpol
Information Security News
INTERPOL Warns of Surging Asia Cyber Threats
INTERPOL's Asia cyber threat report finds scam centers, deepfakes, and ransomware driving a $40B regional cybercrime surge.
14 views
Daily Writeups
⤷ Title: Apple Opens iOS to Third-Party App Stores in Brazil Under CADE Settlement
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:17:21 +0000
════════════════════════
⌗ Tags: #Technology
Daily CyberSecurity
Apple Opens iOS to Third-Party App Stores in Brazil Under CADE Settlement
Apple now allows iOS third-party app stores in Brazil under a CADE settlement, alongside new fees and a Notarization review process.
15 views
Daily Writeups
⤷ Title: F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:23:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_42055 #CVE_2026_42530 #F5 #HTTP/3 #nginx #NGINX vulnerabilities #use after free
Daily CyberSecurity
F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
Two critical NGINX vulnerabilities, CVE-2026-42530 and CVE-2026-42055, let remote attackers crash workers and possibly run code. Patch NGINX now.
11 views
Daily Writeups
⤷ Title: Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:13:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET BinaryFormatter #CVE_2026_8024 #CWE_502 #Deserialization #iba #ibaDatCoordinator #ibaPDA #ICS security #OT Security #Remote Code Execution
Daily CyberSecurity
Critical iba Deserialization Vulnerability Exposes ibaPDA and ibaDatCoordinator to RCE (CVE-2026-8024)
A critical iba deserialization vulnerability (CVE-2026-8024) lets unauthenticated attackers gain remote code execution on ibaPDA and ibaDatCoordinator.
13 views
Daily Writeups
⤷ Title: 27-Year-Old OpenBSD Authentication Bypass: Details and PoC Exploit Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:02:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_55706 #Heap Over_read #kernel vulnerability #OpenBSD #PAP #PPP stack #PPPoE #proof_of_concept #sppp
Daily CyberSecurity
27-Year-Old OpenBSD Authentication Bypass: Details and PoC Exploit Publicly Disclosed
A 27-year-old OpenBSD authentication bypass (CVE-2026-55706) is now public, with full details and a working PoC exploit for the PPP PAP flaw.
16 views
Daily Writeups
⤷ Title: The One Thing Nobody Checks in Password Reset (And Why It Pays)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:46:54 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #bug_hunting #bug_bounty #bug_bounty_tips #bug_bounty_writeup
Medium
The One Thing Nobody Checks in Password Reset (And Why It Pays)
Everyone tests the token. Nobody tests the after.
31 views
Daily Writeups
⤷ Title: Mr Robot CTF Writeup
════════════════════════
𐀪 Author: Spoofey
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 03:37:14 GMT
════════════════════════
⌗ Tags: #mr_robot #thm_writeup #tryhackme #tryhackme_walkthrough #tryhackme_writeup
28 views