Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: QNAP Patches QuMagie Flaws Exposing Private Media Files
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 09:29:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_26236 #Information Disclosure #License Center #NAS #QNAP #QSA_26_35 #QuMagie #Vulnerability
Daily CyberSecurity
QNAP Patches QuMagie Flaws Exposing Private Media Files
QNAP QuMagie vulnerabilities let unauthenticated attackers access media files, causing information disclosure. Patch QuMagie and License Center now.
8 views
Daily Writeups
⤷ Title: Malicious Steam Wallpapers Spread Malware to Gamers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 09:01:45 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #malware #Steam Workshop #Wallpaper Engine
Daily CyberSecurity
Malicious Steam Wallpapers Spread Malware to Gamers
Hackers are hiding malware inside malicious Steam wallpapers. Learn how the Wallpaper Engine app exposes gamers to account hijacking and crypto miners.
12 views
Daily Writeups
⤷ Title: Apache Doris SQL Injection Vulnerability CVE-2025-66336
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 08:01:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Doris #CVE_2025_66336 #cybersecurity #database security #sql injection
Daily CyberSecurity
Apache Doris SQL Injection Vulnerability CVE-2025-66336
A critical Apache Doris SQL injection vulnerability identified as CVE-2025-66336 allows attackers to bypass authentication. Upgrade your servers now.
8 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #52: Shodan — The Internet’s Search Engine”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 13:34:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #penetration_testing #technology
Medium
“Bug Bounty Bootcamp #52: Shodan — The Internet’s Search Engine”
That Shows You What Your Target Forgot to Hide
13 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #51: Certificate Transparency ”
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 13:08:52 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #technology #hacking #cybersecurity
Medium
“Bug Bounty Bootcamp #51: Certificate Transparency ”
The Subdomain Goldmine That Everyone Forgets
11 views
Daily Writeups
⤷ Title: Verbose | HackSmarter | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 13:06:38 GMT
════════════════════════
⌗ Tags: #infosec #ctf #bug_bounty #technology #hacking
Medium
Verbose | HackSmarter | OSCP Preparation
Box: Verbose
Difficulty: Easy
11 views
Daily Writeups
⤷ Title: The Zero Trust Stack: Application Allowlisting
════════════════════════
𐀪 Author: Diego Rodriguez | Console to Copy
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 12:01:02 GMT
════════════════════════
⌗ Tags: #allowlisting #application_security #zero_trust #infosec #cybersecurity
Medium
The Zero Trust Stack: Application Allowlisting
Most security tools are built to answer one question. Is this malicious?
11 views
Daily Writeups
⤷ Title: Stuxnet: The Malware That Secretly Destroyed Machines Without Anyone Noticing
════════════════════════
𐀪 Author: Sanchit
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 13:29:43 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #stuxnet #malware #iran_nuclear_program
Medium
Stuxnet: The Malware That Secretly Destroyed Machines Without Anyone Noticing
Imagine this.
10 views
Daily Writeups
⤷ Title: CISSP Chapter 5 — Part 2: Handling Rules Matter Most When Data Tries to Leave.
════════════════════════
𐀪 Author: Atakan ATAK
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 12:26:20 GMT
════════════════════════
⌗ Tags: #cissp #information_security #cybersecurity #cyber_security_awareness #infosec
Medium
CISSP Chapter 5 — Part 2: Handling Rules Matter Most When Data Tries to Leave.
Marking, DLP, minimization, storage, retention, sanitization, and the operational discipline required to keep sensitive data from lingering…
14 views
Daily Writeups
⤷ Title: HTB CPTS Track Labs: Fluffy
════════════════════════
𐀪 Author: Caton
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 13:26:03 GMT
════════════════════════
⌗ Tags: #cpt #penetration_testing #ethical_hacking #active_directory #hackthebox_walkthrough
Medium
HTB CPTS Track Labs: Fluffy
catoncaton
17 views
Daily Writeups
⤷ Title: Windows Basics: Navigating the Enterprise Workspace Architecture
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 13:40:09 GMT
════════════════════════
⌗ Tags: #task_manager_diagnostics #operating_systems_basics #windows_basic #windows_security_scan #tryhackme
Medium
Windows Basics: Navigating the Enterprise Workspace Architecture
Introduction
17 views
Daily Writeups
⤷ Title: TryHackMe: Operation Coldstart Walkthrough — From SSRF to Tar Wildcard Injection
════════════════════════
𐀪 Author: Puspendu sana
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 12:44:46 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme #operation_coldstart
Medium
TryHackMe: Operation Coldstart Walkthrough — From SSRF to Tar Wildcard Injection
Introduction
9 views
Daily Writeups
⤷ Title: TryHackMe Pre Security (SEC0) & Cyber Security 101 (SEC1) — Exam Preparation & Experience
════════════════════════
𐀪 Author: N3NU
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #tryhackme #ethical_hacking #information_security #career_development #cybersecurity
Medium
TryHackMe Pre Security (SEC0) & Cyber Security 101 (SEC1) — Exam Preparation & Experience
Table of Contents
12 views
Daily Writeups
⤷ Title: The Guide to Hiring an Ethical Hacker
════════════════════════
𐀪 Author: Darksynthhacker
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 12:55:29 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
The Guide to Hiring an Ethical Hacker
In today’s digital age, cybersecurity has become a paramount concern for individuals and businesses alike. With the increasing number of…
18 views
Daily Writeups
⤷ Title: Finding and Exploiting an unused API endpoint
════════════════════════
𐀪 Author: Dalila
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:00:05 GMT
════════════════════════
⌗ Tags: #rest_api_security #api_security #owasp_api #owasp_api_security_top_10 #api_endpoint_monitoring
Medium
Finding and Exploiting an unused API endpoint
This lab demonstrates how an unused API endpoint can be exploited. By analyzing HTTP requests and taking advantage of gaps revealed in…
35 views
Daily Writeups
⤷ Title: The Forgotten Backdoor: Why IDOR Remains the Silent Killer of Web Security
════════════════════════
𐀪 Author: Cinchana S
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 13:59:21 GMT
════════════════════════
⌗ Tags: #owasp #web_security #cybersecurity #api_security #bug_bounty
Medium
The Forgotten Backdoor: Why IDOR Remains the Silent Killer of Web Security
“The most dangerous vulnerabilities aren’t always the flashiest. Sometimes, all it takes is changing one number in a URL.”
51 views
Daily Writeups
⤷ Title: 29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 19:59:46 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Texas Parks and Wildlife Data Breach Affects Over 3M License Customers
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 15:20:13 +0000
════════════════════════
⌗ Tags: #Data Breaches #Security #Cyber Attack #Cybersecurity #data breach #Privacy #security #Texas #Vulnerability
Hackread
Texas Parks and Wildlife Data Breach Affects Over 3M License Customers
Around 3 million Texas licence holders face a data breach after hackers targeted a third-party vendor, exposing driver's licences and passport numbers.
32 views
Daily Writeups
⤷ Title: Threat Hunting Beyond Alerts: Finding the Activity Detection Misses
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:20:08 +0000
════════════════════════
⌗ Tags: #Security #ANY RUN #Cybersecurity #Malware #Phishing #Sandbox #Threat Analysis #Threat Detection #Threat Hunting #Threat Intelligence #Threat Mitigation
Hackread
Threat Hunting Beyond Alerts: Finding the Activity Detection Misses
Learn how threat hunting uses behavioral context, malware analysis and threat intelligence to find attacks that alerts and detection rules miss.
14 views
Daily Writeups
⤷ Title: SOP vs CORS vs Preflight vs SameSite Cookies — A Guide for Bug Bounty Hunters
════════════════════════
𐀪 Author: Md Maruf Hosan (0xMaruf)
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:21:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #cors #browser_security #cybersecurity
Medium
SOP vs CORS vs Preflight vs SameSite Cookies — A Guide for Bug Bounty Hunters
Hey this is Maruf Hosan aka 0xmaruf . lets jump on our topic
11 views
Daily Writeups
⤷ Title: Introduction to Heap Overflow: Theory and Practice [part 1]
════════════════════════
𐀪 Author: Kerkroups
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:08:17 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #cybersecurity #binary_security
Medium
Introduction to Heap Overflow: Theory and Practice [part 1]
SOME THEORY
11 views