Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Critical Apache Doris Flaw (CVE-2026-58319) Exposes Admin APIs to Unauthenticated Attackers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 13:30:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Doris #CVE_2026_58319 #database security #improper authentication #Vulnerability
Daily CyberSecurity
Critical Apache Doris Flaw (CVE-2026-58319) Exposes Admin APIs to Unauthenticated Attackers
TL;DR The Apache Doris project has patched a critical Apache Doris vulnerability, tracked as CVE-2026-58319. Some Frontend (FE) HTTP REST admin APIs were reachable without authentication. As a res…
12 views
Daily Writeups
⤷ Title: CVE-2026-56451: CVSS 10 Siemens Opcenter X Flaw Grants Full Unauthorized Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 12:53:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #ICS #JWT #Opcenter X #Siemens
Daily CyberSecurity
CVE-2026-56451: CVSS 10 Siemens Opcenter X Flaw Grants Full Unauthorized Access
TL;DR Siemens has patched a maximum-severity Opcenter X authentication bypass, tracked as CVE-2026-56451. The flaw scores 10.0 on both CVSS 3.1 and CVSS 4.0 scales. An unauthenticated remote attac…
14 views
Daily Writeups
⤷ Title: The between-reports problem: why security teams miss what attackers see
════════════════════════
𐀪 Author: Greg Jenkins
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Business Insights
Intigriti
The between-reports problem: why security teams miss what attackers see
What you will learn Why faster discovery and higher volume can still leave teams blind between vulnerability reports. Why scanners and inventories are necessary, but not enough to explain attacker f...
15 views
Daily Writeups
⤷ Title: “Part I : BugBounty — Roadmap”
════════════════════════
𐀪 Author: Yassin Hamada
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 12:22:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #infosec
Medium
“Part I : BugBounty — Roadmap”
﷽
18 views
Daily Writeups
⤷ Title: 6 Critical SOC Phases Every Security Team Should Master
════════════════════════
𐀪 Author: Crest Data
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 12:21:34 GMT
════════════════════════
⌗ Tags: #security_operations #cybersecurity #infosec #siem #soc
Medium
6 Critical SOC Phases Every Security Team Should Master
A practical look at how modern Security Operations Centers detect, investigate, contain, and recover from cyber threats using a structured…
23 views
Daily Writeups
⤷ Title: Discover Lernaean: Exploiting Default Credentials & SSH Access
════════════════════════
𐀪 Author: ghosteye
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 13:36:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackviser #gobuster #hydra #penetration_testing
Medium
Discover Lernaean: Exploiting Default Credentials & SSH Access
A Hackviser Walkthrough on Web Enumeration, Exposed File Managers, and Password Auditing
25 views
Daily Writeups
⤷ Title: CVE-2026-10122: Third Stack Overflow Confirms Systemic Flaws in TRENDnet TEW-432BRP Firmware
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 13:01:02 GMT
════════════════════════
⌗ Tags: #stackoverflow #ethical_hacking #cve_2026_10122 #cwe_119 #cwe_121
Medium
CVE-2026-10122: Third Stack Overflow Confirms Systemic Flaws in TRENDnet TEW-432BRP Firmware
CVE-2026–10122: Third Stack Overflow Confirms Systemic Flaws in TRENDnet TEW-432BRP Firmware A third stack-based buffer overflow disclosed in the same batch confirms that the TRENDnet TEW-432BRP …
34 views
Daily Writeups
⤷ Title: CVE-2026–5029 (Unpatched)Case Study Unauthenticated Remote Code Execution (RCE)
════════════════════════
𐀪 Author: phantom_hat
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 11:50:52 GMT
════════════════════════
⌗ Tags: #cve #mcp_server #rce #vulnerability #exploit_development
Medium
CVE-2026–5029 (Unpatched)Case Study Unauthenticated Remote Code Execution (RCE)
﷽
39 views
Daily Writeups
⤷ Title: HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 20:03:43 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: LG Monitors Spotted Installing Adware-Like App on Windows PCs
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:47:57 +0000
════════════════════════
⌗ Tags: #Security #Malware #Privacy #Adware #Cybersecurity #LG #LG Monitors #mcafee #Microsoft #Windows
Hackread
LG Monitors Spotted Installing Adware-Like App on Windows PCs
Connecting certain LG monitors prompts Windows Update to install an LG app without consent, while the software runs at startup and displays McAfee trial adverts.
28 views
Daily Writeups
⤷ Title: CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 15:01:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #API Token #DevSecOps #Gitea
Daily CyberSecurity
CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed
TL;DR A critical Gitea vulnerability, CVE-2026-58443 (CVSS 9.6), lets a public-only token push commits into a private repository. Maintainers fixed it in v1.27.0. The security advisory publishes b…
13 views
Daily Writeups
⤷ Title: OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:02:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Enumeration #Cloud Security #Microsoft Entra ID #OAuth Client ID Spoofing #Proofpoint
Daily CyberSecurity
OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace
At a Glance Field Detail Actors UNK_pyreq2323 and UNK_OutFlareAZ (two independent, unattributed clusters) Activity Account enumeration and credential validation via OAuth client ID spoofing Target…
9 views
Daily Writeups
⤷ Title: 750 Days of Cybersecurity: The Uncomfortable Truths Nobody Talks About
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:48:20 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty #tryhackme #hacking #cybersecurity
Medium
750 Days of Cybersecurity: The Uncomfortable Truths Nobody Talks About
Two years of daily practice. Over 375 hours of focused hacking. Here is what 750 consecutive days on TryHackMe actually taught me about…
7 views
Daily Writeups
⤷ Title: The Teenager Who Hacked Apple, NASA and the Pentagon From His Bedroom
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 15:35:30 GMT
════════════════════════
⌗ Tags: #hacking #short_story #hacked #cybersecurity #nasa
Medium
The Teenager Who Hacked Apple, NASA and the Pentagon From His Bedroom
He was 15. He used a secondhand computer. The Pentagon did not notice for months. When they finally found him, what happened next surprised…
11 views
Daily Writeups
⤷ Title: That Time I Rooted A Router And Accidentally Bumped Into The Previous Owner’s Password
════════════════════════
𐀪 Author: ShadowForge
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:58:55 GMT
════════════════════════
⌗ Tags: #hardware #ethical_hacking #passwords #hacking #iot
Medium
That Time I Rooted A Router And Accidentally Bumped Into The Previous Owner’s Password
Router teardown, a UART port, a botched solder job, and a root shell later, I ended up with something I didn’t expect: a stranger’s real…
7 views
Daily Writeups
⤷ Title: Enterprise (THM) Tryhackme Hard Challenge
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:14:00 GMT
════════════════════════
⌗ Tags: #tryhackme #linux #cybersecurity #privilege_escalation #hacking
Medium
Enterprise (THM) Tryhackme Hard Challenge
Description : You just landed in an internal network. You scan the network and there’s only the Domain Controller…
10 views
Daily Writeups
⤷ Title: Vending Machine Security: What Flipper Zero Can Read (and Why You Can’t Hack Free Snacks)
════════════════════════
𐀪 Author: Md Mazharul Haque Adib
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 15:42:49 GMT
════════════════════════
⌗ Tags: #hardware_hacking #cybersecurity #nfc #penetration_testing #flipper_zero
Medium
Vending Machine Security: What Flipper Zero Can Read (and Why You Can’t Hack Free Snacks)
If you’ve spent any time on TikTok or YouTube, you’ve probably seen videos of people using a Flipper Zero to do seemingly magical things…
14 views
Daily Writeups
⤷ Title: Week 3 of My Thunder Cipher Cybersecurity Internship: From Enumeration to Web Application Security
════════════════════════
𐀪 Author: cyb3rPh03n1x
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:02:52 GMT
════════════════════════
⌗ Tags: #penetration_testing #burpsuite #ethical_hacking #cybersecurity #web_security
Medium
Week 3 of My Thunder Cipher Cybersecurity Internship: From Enumeration to Web Application Security
Introduction
29 views
Daily Writeups
⤷ Title: TryHackMe — The Game Walkthrough
════════════════════════
𐀪 Author: Fashil Rasool
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 15:10:08 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #the_game #tryhackme_walkthrough
Medium
TryHackMe — The Game Walkthrough
Welcome to this beginner-friendly walkthrough of the TryHackMe — The Game room.
35 views
Daily Writeups
⤷ Title: United States Seizes More Than 1,000 Domains Streaming World Cup 2026 Matches
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 16:32:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #digital piracy #DOJ #illegal World Cup streaming #Los Ciberinfiltrados #Operation Offsides #Operation Red Card #streaming domain seizures #World Cup 2026
Daily CyberSecurity
United States Seizes More Than 1,000 Domains Streaming World Cup 2026 Matches
At a glance Actor / group Piracy site operators. Four alleged members of “Los Ciberinfiltrados” arrested in Colombia Activity type Illegal streaming of World Cup 2026 matches and count…
18 views
Daily Writeups
⤷ Title: How a Failed CSRF Escalated to an Unauthenticated Mass Assignment (7.3 Severity)
════════════════════════
𐀪 Author: Rootxsecurity
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 17:38:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #csrf #bug_hunting #cybersecurity
Medium
How a Failed CSRF Escalated to an Unauthenticated Mass Assignment (7.3 Severity)
Introduction: The Target Scope
14 views