Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The Single-Primitive Write: WriteProcessMemory’s Hidden Page Flip
════════════════════════
𐀪 Author: Tom O'Neill
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 22:15:43 GMT
════════════════════════
⌗ Tags: #malware #windows_internals #ethical_hacking #cybersecurity #windows
Medium
The Single-Primitive Write: WriteProcessMemory’s Hidden Page Flip
Documenting Undocumented WriteProcessMemory Behavior
27 views
Daily Writeups
⤷ Title: The Fallacy of the Valid Signature: Why Critical Transaction Flows Need More Than Cryptographic…
════════════════════════
𐀪 Author: Declerus Yves Kerbens
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 21:56:55 GMT
════════════════════════
⌗ Tags: #pki #cryptography #appsec #certificate_pinning #api_security
Medium
The Fallacy of the Valid Signature: Why Critical Transaction Flows Need More Than Cryptographic…
Abstract
18 views
Daily Writeups
⤷ Title: ErrTraffic Malware Spreads ClickFix Lures via Hacked WordPress Sites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 01:26:58 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #CVE_2020_25213 #ErrTraffic #EtherHiding #Malware_as_a_Service #TDS #Vidar #wordpress
Daily CyberSecurity
ErrTraffic Malware Spreads ClickFix Lures via Hacked WordPress Sites
ErrTraffic malware powers ClickFix attacks on hacked WordPress sites, using EtherHiding on the blockchain to hide its C2 and spread infostealers.
26 views
Daily Writeups
⤷ Title: Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 01:11:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #admin panel #Authorization Bypass #Avo #CVE_2026_55518 #Missing Authorization #privilege escalation #Rails Security #ruby on rails
Daily CyberSecurity
Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps
CVE-2026-55518 is a critical Avo authorization bypass flaw enabling privilege escalation in Ruby on Rails admin panels. Update to Avo 3.32.1 now.
23 views
Daily Writeups
⤷ Title: Three Critical pgAdmin 4 Vulnerabilities Patched: XSS, Auth Bypass, and AI Assistant SQLi
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 00:30:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_12045 #CVE_2026_12046 #CVE_2026_12048 #pgAdmin #pgAdmin 4 vulnerabilities #PostgreSQL #Prompt injection #Stored XSS
Daily CyberSecurity
Three Critical pgAdmin 4 Vulnerabilities Patched: XSS, Auth Bypass, and AI Assistant SQLi
Three critical pgAdmin 4 vulnerabilities (CVE-2026-12046, CVE-2026-12048, CVE-2026-12045) risk XSS and RCE. Update to pgAdmin 4 9.16 now.
23 views
Daily Writeups
⤷ Title: Public Exploit Released for FreeBSD kTLS Local Root Flaw CVE-2026-45257
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 00:00:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_45257 #freebsd #Kernel TLS #kTLS #Local Privilege Escalation #Local Root #proof_of_concept #sendfile
Daily CyberSecurity
Public Exploit Released for FreeBSD kTLS Local Root Flaw CVE-2026-45257
A public PoC exploit for the FreeBSD kTLS vulnerability (CVE-2026-45257) enables local privilege escalation to root. Patch your FreeBSD systems now.
22 views
Daily Writeups
⤷ Title: DragonForce Hides Backdoor C2 Inside Microsoft Teams TURN Relays
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 03:30:15 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor.Turn #BYOVD #DragonForce #Hackledorb #Microsoft Teams #QUIC #ransomware #TURN Relay
Daily CyberSecurity
DragonForce Hides Backdoor C2 Inside Microsoft Teams TURN Relays
At a glance Malware family Backdoor.Turn (Go-based RAT) Threat actor DragonForce ransomware, developed by Hackledorb (Symantec attribution) Target / victims A major U.S. services firm; attackers d…
16 views
Daily Writeups
⤷ Title: 2,060 New CVEs and 4 Actively Exploited Flaws (June 15-21, 2026)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 03:13:03 +0000
════════════════════════
⌗ Tags: #Weekly Recap #Actively Exploited #CISA KEV #CVE #LiteSpeed #Oracle #Splunk #Vulnerability Roundup #Weekly CVE Report
Daily CyberSecurity
2,060 New CVEs and 4 Actively Exploited Flaws (June 15-21, 2026)
This weekly CVE report covers 2,060 new vulnerabilities from June 15-21, including 358 critical flaws and 4 actively exploited CVEs now in CISA KEV.
19 views
Daily Writeups
⤷ Title: Four undici Vulnerabilities Affect a Package With 133M Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 02:00:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_6734 #CVE_2026_9697 #nodejs #npm #SOCKS5 #TLS Bypass #undici #WebSocket
Daily CyberSecurity
Four undici Vulnerabilities Affect a Package With 133M Weekly Downloads
Four undici vulnerabilities (CVE-2026-6734, CVE-2026-9697) affect the Node.js HTTP client, which sees 133M weekly downloads. Update undici now.
28 views
Daily Writeups
⤷ Title: XSS, CSRF, SQL Injection, and SSRF Explained with Real Stories
════════════════════════
𐀪 Author: Wanuja Ranasinghe
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 02:31:00 GMT
════════════════════════
⌗ Tags: #sql_injection #xss_attack #web_security #software_architecture #software_security
Medium
XSS, CSRF, SQL Injection, and SSRF Explained with Real Stories
Beginner-friendly attack explanations and how developers prevent them
36 views
Daily Writeups
⤷ Title: Microsoft Details Support Lifecycle for Windows 11 Version 26H2
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:36:55 +0000
════════════════════════
⌗ Tags: #Windows #IT Administration #Microsoft #OS Update #Windows 11 #Windows 11 version 26H2
Daily CyberSecurity
Microsoft Details Support Lifecycle for Windows 11 Version 26H2
Microsoft outlines the official support lifecycle and deployment guidelines for Windows 11 version 26H2, urging IT admins to prepare.
27 views
Daily Writeups
⤷ Title: Gemini CLI Deprecation: Google Moves Developers to Antigravity CLI
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 04:36:44 +0000
════════════════════════
⌗ Tags: #Technology #Antigravity CLI #Developer Tools #Gemini CLI #Gemini Code Assist #google
Daily CyberSecurity
Gemini CLI Deprecation: Google Moves Developers to Antigravity CLI
Google's Gemini CLI deprecation took effect on June 18, 2026. Personal accounts must now migrate to Antigravity CLI. See who's affected and why.
22 views
Daily Writeups
⤷ Title: Windows Recycle Bin Bug Surfaces After the June 2026 Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 04:34:11 +0000
════════════════════════
⌗ Tags: #Windows #June 2026 Update #KB5094126 #Patch Tuesday #Recycle Bin bug #Windows 11
Daily CyberSecurity
Windows Recycle Bin Bug Surfaces After the June 2026 Update
Microsoft confirms a Windows Recycle Bin bug in the June 2026 update that shows internal $R filenames when you delete a single file.
18 views
Daily Writeups
⤷ Title: Unlimited Coupon Abuse → A Critical Business Logic Flaw
════════════════════════
𐀪 Author: Mian Hammad
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:57:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #pentesting #bussines_logic #api
Medium
🚨 Unlimited Coupon Abuse → A Critical Business Logic Flaw
Hello Everyone , My Name is Mian Hammad, And today I’m sharing Unlimited Coupon Abuse.
15 views
Daily Writeups
⤷ Title: File Size Restriction Bypass via MAX_FILE_SIZE Parameter Manipulation
════════════════════════
𐀪 Author: Pranav
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:52:02 GMT
════════════════════════
⌗ Tags: #bypass_file_kb #bug_bounty #penetration_testing #vapt
Medium
File Size Restriction Bypass via MAX_FILE_SIZE Parameter Manipulation
SPYxPG
14 views
Daily Writeups
⤷ Title: Recon & OSINT: The Skill That Separates Beginners from Professional Hackers
════════════════════════
𐀪 Author: Erkan Kavas
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:41:12 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity
Medium
Recon & OSINT: The Skill That Separates Beginners from Professional Hackers
When people think about cybersecurity, they often imagine exploitation, malware analysis, or advanced hacking techniques. But experienced…
13 views
Daily Writeups
⤷ Title: How I Automated My Bug Bounty Recon Pipeline Using Nmap + Nuclei + FFUF
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:30:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #infosec #bug_bounty #penetration_testing
Medium
How I Automated My Bug Bounty Recon Pipeline Using Nmap + Nuclei + FFUF
Friendly Link:
21 views
Daily Writeups
⤷ Title: Bypassing Rate Limits: Known Techniques
════════════════════════
𐀪 Author: Pranav
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:26:04 GMT
════════════════════════
⌗ Tags: #web_application_security #vapt #rate_limiting #penetration_testing #bug_bounty
Medium
Bypassing Rate Limits: Known Techniques
SPYxPG
10 views
Daily Writeups
⤷ Title: 15 Linux Misconfigurations Attackers Check Before Running LinPEAS
════════════════════════
𐀪 Author: Mahidinesh
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:09:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #ethical_hacking #penetration_testing
Medium
15 Linux Misconfigurations Attackers Check Before Running LinPEAS
Most beginners land a shell on a Linux system and immediately run LinPEAS.
12 views
Daily Writeups
⤷ Title: DeFi Protocol Types Part 2: Yield, Bridges & Governance
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 04:31:06 GMT
════════════════════════
⌗ Tags: #governance #bug_bounty #yield_farming #infosec #web3
Medium
DeFi Protocol Types Part 2: Yield, Bridges & Governance
Series: Web3 Security Zero se Advance 🛡️ | Article #18 By HackerMD | 30 min read
13 views
Daily Writeups
⤷ Title: Subdomain Takeover: A Complete Guide from Beginner to Advanced
════════════════════════
𐀪 Author: cyber security
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 04:22:38 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #information_security #bug_bounty #subdomain_takeover #cybersecurity
Medium
Subdomain Takeover: A Complete Guide from Beginner to Advanced
A comprehensive deep-dive for bug bounty hunters, penetration testers, and security researchers
11 views