Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: Iranian Seedworm Group Infiltrates South Korean Tech Titan in Global Espionage Surge
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:13:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ChromElevator #Credential Harvesting #DLL Sideloading #Industrial Espionage #Iranian MOIS #MuddyWater #Node.js Malware #Seedworm #South Korea Cyberattack #Symantec #threat intelligence
Penetration Testing Tools
Iranian Seedworm Group Infiltrates South Korean Tech Titan in Global Espionage Surge
The Iranian threat collective Seedworm maintained a clandestine presence within the infrastructure of a prominent South Korean electronics
24 views
Daily Writeups
⤷ Title: Stealth & Automation: Seedworm’s 2026 Global Campaign Hijacks Security Software to Deploy ChromElevator
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 08:05:04 +0000
════════════════════════
⌗ Tags: #Cyber Security #ChromElevator #cyber_espionage #data exfiltration #DLL Sideloading #Espionage #infosec #Iranian APT #MuddyWater #Node.js Malware #Seedworm #SentinelOne #threat intelligence
Daily CyberSecurity
Stealth & Automation: Seedworm’s 2026 Global Campaign Hijacks Security Software to Deploy ChromElevator
Iranian group Seedworm infiltrates global firms using automated Node.js scripts and DLL sideloading via trusted binaries. Protect your credentials now!
31 views
Daily Writeups
⤷ Title: Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 02:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_47137 #CVE_2026_47140 #CVE_2026_47210 #Cyber Security #infosec #JSPI Promise #Node.js Sandbox Escape #patch bypass #Prototype Hijacking #Remote Code Execution #vm2 sandbox
Daily CyberSecurity
Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
Five critical sandbox escape flaws in vm2 (CVE-2026-47140 & more) allow unauthenticated remote code execution on the host server. Update now!
15 views
Daily Writeups
⤷ Title: Popular npm Package shell-quote Patches Critical Command Injection Bug
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:32:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_9277 #Node.js Security #npm Package #Patch Update #shell_quote
Daily CyberSecurity
Popular npm Package shell-quote Patches Critical Command Injection Bug
Maintainers recently patched a critical flaw in a highly popular ecosystem component. Specifically, developers resolved a dangerous shell-quote command injection vulnerability tracking as CVE-2026…
17 views
Daily Writeups
⤷ Title: Liquidjs CVSS 10 RCE Threatens 7.3M Monthly Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 02:30:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVSS 10 #Liquidjs #Node.js #rce #security patch
Daily CyberSecurity
Liquidjs CVSS 10 RCE Threatens 7.3M Monthly Users
A maximum-severity Liquidjs remote code execution flaw impacts millions. Learn about this template engine vulnerability and update now.
19 views
Daily Writeups
⤷ Title: New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 01:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_44492 #CVE_2026_44494 #infosec #Node.js #Prototype Pollution #Proxy Bypass
Daily CyberSecurity
New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
New Axios proxy vulnerabilities expose apps. A critical prototype pollution gadget allows full traffic interception. Secure patches are now available.
16 views
Daily Writeups
⤷ Title: 53M Downloads At Risk: Critical 9.8 CVSS Vitest Remote Code Execution Vulnerabilities Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 01:30:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Browser Mode #CVE_2026_47428 #Node.js Security #Open Source Vulnerability #Test Framework Security #Vite #Vitest
Daily CyberSecurity
53M Downloads At Risk: Critical 9.8 CVSS Vitest Remote Code Execution Vulnerabilities Disclosed
Critical 9.8 CVSS flaws trigger Vitest remote code execution risks. Discover how to protect your testing environments and patch these bugs immediately.
7 views
Daily Writeups
⤷ Title: i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 01:00:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48713 #CVE_2026_48714 #i18next #i18next_fs_backend #Node.js Security #npm Vulnerability #Prototype Pollution
Daily CyberSecurity
i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads
CVE-2026-48713 exposes i18next prototype pollution in i18next-fs-backend, a CVSS 9.1 flaw threatening 1M+ weekly downloads. Update to 2.6.6 now.
18 views
Daily Writeups
⤷ Title: HackTheBox “Celestial” Walkthrough
════════════════════════
𐀪 Author: Abdullah Kareem
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 13:06:25 GMT
════════════════════════
⌗ Tags: #penetration_testing #privilege_escalation #deserialization #hackthebox #node_js_deserialization
Medium
HackTheBox “Celestial” Walkthrough
Celestial is a medium difficulty machine which focuses on deserialization exploits. It is not the most realistic, however it provides a…
18 views
Daily Writeups
⤷ Title: Meteor 3.0 Migration Helped Rocket.Chat Move Off End-of-Life Node.js Runtime
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 16:57:09 +0000
════════════════════════
⌗ Tags: #Technology #Meteor 3.0 #Node.js #Rocket.Chat
Hackread
Meteor 3.0 Migration Helped Rocket.Chat Move Off End-of-Life Node.js Runtime
Meteor 3.0 helped Rocket.Chat move from Node.js 14 to Node.js 20, cutting runtime debt after Fibers removal and reducing supply-chain risk across federal users.
43 views
Daily Writeups
⤷ Title: Icinga 2 Vulnerabilities Allow Unauthenticated Node Takeover
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 01:12:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #DSL injection #GHSA_vj39_ww8j_vvx5 #Icinga #Icinga 2 #Monitoring #network monitoring #node takeover #stack overflow
Daily CyberSecurity
Icinga 2 Vulnerabilities Allow Unauthenticated Node Takeover
TL;DR Icinga patched three Icinga 2 vulnerabilities on 29 June 2026. Two let an unauthenticated attacker take over or crash the monitoring server. The third affects authenticated API users only. C…
13 views
Daily Writeups
⤷ Title: decompress npm Vulnerability CVE-2026-53486 (CVSS 9.1) Threatens 2.8 Million Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 13:00:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #CVE_2026_53486 #decompress #Node.js Security #npm Security #Path Traversal #Supply Chain Security
Daily CyberSecurity
decompress npm Vulnerability CVE-2026-53486 (CVSS 9.1) Threatens 2.8 Million Weekly Downloads
TL;DR A high-severity decompress npm vulnerability lets crafted archives write files outside the extraction folder. Tracked as CVE-2026-53486, the flaw carries a CVSS score of 9.1. It sits in a li…
42 views
Daily Writeups
⤷ Title: Node.js Patches 11 Vulnerabilities in July 2026 Security Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 15:29:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_56846 #CVE_2026_56848 #CVE_2026_58043 #HTTP/2 #Node.js Security #nodejs #use after free
Daily CyberSecurity
Node.js Patches 11 Vulnerabilities in July 2026 Security Release
TL;DR Node.js shipped fixes for 11 vulnerabilities on 29 July 2026. Three are rated high severity, and the rest are medium or low. The updates cover the 26.x, 24.x, and 22.x release lines. No in-t…
33 views
Daily Writeups
⤷ Title: macOS ClickFix EtherHiding: DPRK Backdoor Hides C2 in Ethereum Smart Contracts
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 13:11:00 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Contagious Interview #Crypto_Stealer #DPRK #EtherHiding #macOS Malware #Node.js Backdoor #UNC5342
Information Security News
macOS ClickFix EtherHiding: DPRK Backdoor Hides C2 in Ethereum Smart Contracts
A routine internet search can culminate in a full macOS compromise – one in which a counterfeit system update prompt manipulates the user into executing a malicious command themselves, and t…
8 views
Daily Writeups
⤷ Title: CVE-2026-58115: CVSS 10 Node-RED RCE Hits SIMATIC IoT2050
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 07:32:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_58115 #ICS security #Node_RED #Remote Code Execution #Siemens #SIMATIC IoT2050
Daily CyberSecurity
CVE-2026-58115: CVSS 10 Node-RED RCE Hits SIMATIC IoT2050
TL;DR Siemens has disclosed CVE-2026-58115, a maximum-severity flaw in SIMATIC IoT2050 Advanced devices. The bug scores a perfect CVSS 10.0 and enables remote code execution through Node-RED. An u…
22 views
Daily Writeups
⤷ Title: Node.js Malware Attacks Target Tech and Finance Sectors
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 01:33:51 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #EtherHiding #malware #Node.js #ransomware
Daily CyberSecurity
Node.js Malware Attacks Target Tech and Finance Sectors
At a Glance Malware family: Multiple families including ModeloRAT, EtherRAT, AsukaStealer, and C2Looper Threat actor: Suspected initial access broker Woodgnat (KongTuke) and unnamed cybercrime gro…
19 views
Daily Writeups
⤷ Title: Microsoft Teams IT Support Impersonation Leads to Domain Takeover
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 07:12:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #IT support impersonation #Microsoft Teams #Microsoft Threat Intelligence #Node.js implant #Quick Assist #social engineering #WinRM lateral movement
Daily CyberSecurity
Microsoft Teams IT Support Impersonation Leads to Domain Takeover
At a glance Actor or group Unattributed; Microsoft tracks it as a campaign, no named actor Activity type Social engineering, remote-access abuse, hands-on-keyboard intrusion Targets Enterprise use…
26 views
Daily Writeups
⤷ Title: 364M Users Exposed to CVE-2026-90711: 9.1 CVSS proxy-addr IP Spoofing Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 01:16:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_90711 #IP spoofing #Node.js #proxy_addr #Vulnerability
Daily CyberSecurity
364M Users Exposed to CVE-2026-90711: 9.1 CVSS proxy-addr IP Spoofing Flaw
Security researchers have disclosed a severe proxy-addr IP spoofing flaw affecting popular Node.js applications. This misconfiguration vulnerability, tracked as CVE-2026-90711, allows unauthentica…
16 views
Daily Writeups
⤷ Title: Node VM — VulnHub Walkthrough
════════════════════════
𐀪 Author: Eric Thimi Alappatt
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 13:57:16 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #node #vulnhub #pentesting
Medium
Node VM — VulnHub Walkthrough
From Kernel Level Privilege Escalation To Gain Root Access
50 views
Daily Writeups
⤷ Title: Axios Security Vulnerabilities Expose Node.js Apps
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 02:39:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #cybersecurity #Node.js #patch #Vulnerability
Daily CyberSecurity
Axios Security Vulnerabilities Expose Node.js Apps
TL;DR Axios released updates to patch ten Axios security vulnerabilities. Specifically, these bugs include prototype pollution and denial-of-service risks. Therefore, you should update to version …
26 views