Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: CVE-2026-10122: Third Stack Overflow Confirms Systemic Flaws in TRENDnet TEW-432BRP Firmware
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 13:01:02 GMT
════════════════════════
⌗ Tags: #stackoverflow #ethical_hacking #cve_2026_10122 #cwe_119 #cwe_121
Medium
CVE-2026-10122: Third Stack Overflow Confirms Systemic Flaws in TRENDnet TEW-432BRP Firmware
CVE-2026–10122: Third Stack Overflow Confirms Systemic Flaws in TRENDnet TEW-432BRP Firmware A third stack-based buffer overflow disclosed in the same batch confirms that the TRENDnet TEW-432BRP …
33 views
Daily Writeups
⤷ Title: CVE-2026–5029 (Unpatched)Case Study Unauthenticated Remote Code Execution (RCE)
════════════════════════
𐀪 Author: phantom_hat
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 11:50:52 GMT
════════════════════════
⌗ Tags: #cve #mcp_server #rce #vulnerability #exploit_development
Medium
CVE-2026–5029 (Unpatched)Case Study Unauthenticated Remote Code Execution (RCE)
﷽
38 views
Daily Writeups
⤷ Title: HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 20:03:43 +0530
════════════════════════
⌗ Tags: No_Tags
35 views
Daily Writeups
⤷ Title: LG Monitors Spotted Installing Adware-Like App on Windows PCs
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:47:57 +0000
════════════════════════
⌗ Tags: #Security #Malware #Privacy #Adware #Cybersecurity #LG #LG Monitors #mcafee #Microsoft #Windows
Hackread
LG Monitors Spotted Installing Adware-Like App on Windows PCs
Connecting certain LG monitors prompts Windows Update to install an LG app without consent, while the software runs at startup and displays McAfee trial adverts.
27 views
Daily Writeups
⤷ Title: CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 15:01:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #API Token #DevSecOps #Gitea
Daily CyberSecurity
CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed
TL;DR A critical Gitea vulnerability, CVE-2026-58443 (CVSS 9.6), lets a public-only token push commits into a private repository. Maintainers fixed it in v1.27.0. The security advisory publishes b…
11 views
Daily Writeups
⤷ Title: OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:02:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Enumeration #Cloud Security #Microsoft Entra ID #OAuth Client ID Spoofing #Proofpoint
Daily CyberSecurity
OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace
At a Glance Field Detail Actors UNK_pyreq2323 and UNK_OutFlareAZ (two independent, unattributed clusters) Activity Account enumeration and credential validation via OAuth client ID spoofing Target…
8 views
Daily Writeups
⤷ Title: 750 Days of Cybersecurity: The Uncomfortable Truths Nobody Talks About
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:48:20 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty #tryhackme #hacking #cybersecurity
Medium
750 Days of Cybersecurity: The Uncomfortable Truths Nobody Talks About
Two years of daily practice. Over 375 hours of focused hacking. Here is what 750 consecutive days on TryHackMe actually taught me about…
6 views
Daily Writeups
⤷ Title: The Teenager Who Hacked Apple, NASA and the Pentagon From His Bedroom
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 15:35:30 GMT
════════════════════════
⌗ Tags: #hacking #short_story #hacked #cybersecurity #nasa
Medium
The Teenager Who Hacked Apple, NASA and the Pentagon From His Bedroom
He was 15. He used a secondhand computer. The Pentagon did not notice for months. When they finally found him, what happened next surprised…
10 views
Daily Writeups
⤷ Title: That Time I Rooted A Router And Accidentally Bumped Into The Previous Owner’s Password
════════════════════════
𐀪 Author: ShadowForge
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:58:55 GMT
════════════════════════
⌗ Tags: #hardware #ethical_hacking #passwords #hacking #iot
Medium
That Time I Rooted A Router And Accidentally Bumped Into The Previous Owner’s Password
Router teardown, a UART port, a botched solder job, and a root shell later, I ended up with something I didn’t expect: a stranger’s real…
6 views
Daily Writeups
⤷ Title: Enterprise (THM) Tryhackme Hard Challenge
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:14:00 GMT
════════════════════════
⌗ Tags: #tryhackme #linux #cybersecurity #privilege_escalation #hacking
Medium
Enterprise (THM) Tryhackme Hard Challenge
Description : You just landed in an internal network. You scan the network and there’s only the Domain Controller…
9 views
Daily Writeups
⤷ Title: Vending Machine Security: What Flipper Zero Can Read (and Why You Can’t Hack Free Snacks)
════════════════════════
𐀪 Author: Md Mazharul Haque Adib
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 15:42:49 GMT
════════════════════════
⌗ Tags: #hardware_hacking #cybersecurity #nfc #penetration_testing #flipper_zero
Medium
Vending Machine Security: What Flipper Zero Can Read (and Why You Can’t Hack Free Snacks)
If you’ve spent any time on TikTok or YouTube, you’ve probably seen videos of people using a Flipper Zero to do seemingly magical things…
13 views
Daily Writeups
⤷ Title: Week 3 of My Thunder Cipher Cybersecurity Internship: From Enumeration to Web Application Security
════════════════════════
𐀪 Author: cyb3rPh03n1x
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:02:52 GMT
════════════════════════
⌗ Tags: #penetration_testing #burpsuite #ethical_hacking #cybersecurity #web_security
Medium
Week 3 of My Thunder Cipher Cybersecurity Internship: From Enumeration to Web Application Security
Introduction
28 views
Daily Writeups
⤷ Title: TryHackMe — The Game Walkthrough
════════════════════════
𐀪 Author: Fashil Rasool
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 15:10:08 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #the_game #tryhackme_walkthrough
Medium
TryHackMe — The Game Walkthrough
Welcome to this beginner-friendly walkthrough of the TryHackMe — The Game room.
34 views
Daily Writeups
⤷ Title: United States Seizes More Than 1,000 Domains Streaming World Cup 2026 Matches
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 16:32:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #digital piracy #DOJ #illegal World Cup streaming #Los Ciberinfiltrados #Operation Offsides #Operation Red Card #streaming domain seizures #World Cup 2026
Daily CyberSecurity
United States Seizes More Than 1,000 Domains Streaming World Cup 2026 Matches
At a glance Actor / group Piracy site operators. Four alleged members of “Los Ciberinfiltrados” arrested in Colombia Activity type Illegal streaming of World Cup 2026 matches and count…
17 views
Daily Writeups
⤷ Title: How a Failed CSRF Escalated to an Unauthenticated Mass Assignment (7.3 Severity)
════════════════════════
𐀪 Author: Rootxsecurity
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 17:38:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #csrf #bug_hunting #cybersecurity
Medium
How a Failed CSRF Escalated to an Unauthenticated Mass Assignment (7.3 Severity)
Introduction: The Target Scope
13 views
Daily Writeups
⤷ Title: Account Lockout Abuse: How a Login Protection Mechanism Became a Potential DoS Vector
════════════════════════
𐀪 Author: Mazen Rady
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 16:40:59 GMT
════════════════════════
⌗ Tags: #account_locked #bug_bounty #bug_bounty_writeup #web_penetration_testing #dos_attack
Medium
Account Lockout Abuse: How a Login Protection Mechanism Became a Potential DoS Vector
.اللهم انفعنا بما علَّمتنا، وعلِّمنا ما ينفعنا، وزِدنا علمًا وفقهًا وفهمًا يا رب العالمين
14 views
Daily Writeups
⤷ Title: XXE Vulnerability Explained | Understanding XML External Entity Attacks in Modern Applications…
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 16:33:42 GMT
════════════════════════
⌗ Tags: #hacking #artificial_intelligence #cybersecurity #bug_bounty #web_development
Medium
🚀 XXE Vulnerability Explained | Understanding XML External Entity Attacks in Modern Applications…
A Practical Guide for Developers, Security Engineers, and Bug Bounty Hunters
10 views
Daily Writeups
⤷ Title: A “Well-Protected” Webhook That Read Any HTTPS Response For Me
════════════════════════
𐀪 Author: Afi0pchik
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 16:16:05 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #cybersecurity #web_security #bug_bounty
Medium
A “Well-Protected” Webhook That Read Any HTTPS Response For Me
Most SSRF write-ups end at 169.254.169.254 — hit cloud metadata, dump credentials, done. That path is patched almost everywhere now, so…
9 views
Daily Writeups
⤷ Title: Redirt.sys, safezone04.sys, LallaMon.sys & WinRing0.sys: Four Drivers, One Token
════════════════════════
𐀪 Author: Haidermustafa
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 17:51:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #windows #programming #kernel
Medium
Redirt.sys, safezone04.sys, LallaMon.sys & WinRing0.sys: Four Drivers, One Token
Hello Guys back with another exploit :
11 views
Daily Writeups
⤷ Title: COL — Walkthrough [Pwnable.kr]
════════════════════════
𐀪 Author: Nitish ram
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 17:32:35 GMT
════════════════════════
⌗ Tags: #pwnablekr_writeup #ctf_writeup #hashing #ctf #hacking
Medium
COL — Walkthrough [Pwnable.kr]
Welcome back! 😉
15 views
Daily Writeups
⤷ Title: Why There is Only One True Leader in the CS2 Cheat Market?
════════════════════════
𐀪 Author: Aurelivoines
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 17:23:10 GMT
════════════════════════
⌗ Tags: #hacking #gamehacking #cheats #cs2
Medium
Why There is Only One True Leader in the CS2 Cheat Market?
I recently read a Medium article titled “Top cheats for CS2: The best hack”. After carefully reading the material and analyzing the options…
9 views