Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: Python Web Penetration Testing — Day 3
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:20:47 GMT
════════════════════════
⌗ Tags: #bug_bounty #programming #technology #hacking #cybersecurity
Medium
Python Web Penetration Testing — Day 3
Web Crawling with Scrapy — Mapping the Application Like a Digital Cartographer
16 views
Daily Writeups
⤷ Title: Web Cache Deception: Exploiting Path Mapping for Walkthrough (Apprentice)
════════════════════════
𐀪 Author: Rahul M S
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:10:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #vapt #bug_bounty_writeup #portswigger #hacking
Medium
Web Cache Deception: Exploiting Path Mapping for Walkthrough (Apprentice)
Learn how attackers exploit discrepancies between origin servers and cache servers to steal sensitive user data like API keys using Web…
21 views
Daily Writeups
⤷ Title: The 8 Beginner Guide(s) for New Hackers
════════════════════════
𐀪 Author: Antonius W1sdom
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:07:17 GMT
════════════════════════
⌗ Tags: #life_hacking #hacking #hacker
Medium
The 8 Beginner Guide(s) for New Hackers
written by : w1sdom (Antonius)
22 views
Daily Writeups
⤷ Title: Looking Glass — TryHackMe WriteUp with Flags
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:37:02 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #ctf_writeup #ctf #tryhackme
Medium
Looking Glass — TryHackMe WriteUp with Flags
Looking Glass — TryHackMe WriteUp with Flags Date: 17/07/2026 Room Link: https://tryhackme.com/room/lookingglass My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This lab chains a …
34 views
Daily Writeups
⤷ Title: CVE-2026-10123: Fourth Stack Overflow in a Week Confirms Widespread Firmware Failure in TRENDnet…
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:01:04 GMT
════════════════════════
⌗ Tags: #stackoverflow #cwe_119 #ethical_hacking #cwe_121 #cve_2026_10123
Medium
CVE-2026-10123: Fourth Stack Overflow in a Week Confirms Widespread Firmware Failure in TRENDnet Router
A fourth stack-based buffer overflow disclosed in this same week-long wave targets the domain filtering feature of the TRENDnet TEW-432BRP…
39 views
Daily Writeups
⤷ Title: Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 20:27:51 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 19:34:57 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 18:48:31 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:59:43 +0000
════════════════════════
⌗ Tags: #Security #CI/CD #Cybersecurity #Fig #Fig Security #SecOps
Hackread
Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
Learn how Fig adds testing, deployment, and continuous verification to SecOps, helping security teams keep detections reliable as infrastructure evolves. daily.
26 views
Daily Writeups
⤷ Title: Magnet Forensics Sues Over Stolen iPhone Zero-Day
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:15:30 +0000
════════════════════════
⌗ Tags: #Apple #Information Security #cybersecurity #iOS Exploits #iPhone Zero_Day #Magnet Forensics
Information Security News
Magnet Forensics Sues Over Stolen iPhone Zero-Day
The smartphone hacking market typically operates in absolute secrecy. However, a recent lawsuit has exposed the inner workings of a major firm. The Canadian firm Magnet Forensics recently sued a f…
12 views
Daily Writeups
⤷ Title: TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:57:42 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Elastic Security Labs #Infostealer #MaaS #TELEPUZ #Vidar #WebInject
Daily CyberSecurity
TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
At a glance Malware family TELEPUZ Threat actor Unnamed; suspected solo developer or small team running a MaaS Target / victims Windows users reached through compromised web pages Delivery vector …
17 views
Daily Writeups
⤷ Title: ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:16:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASUS #ASUSWRT #Driver Vulnerability #router security
Daily CyberSecurity
ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
TL;DR ASUS has published five security advisories covering seven vulnerabilities. They span router firmware, MyASUS driver components, Aura Wallpaper, and GameSDK. The most severe, CVE-2026-13385 …
13 views
Daily Writeups
⤷ Title: Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:20:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42980 #LPE #Microsoft #Patch Tuesday #proof_of_concept #Windows Kernel #Windows Privilege Escalation #WMI vulnerability
Daily CyberSecurity
Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
TL;DR A public proof-of-concept now targets CVE-2026-42980, a Windows privilege escalation flaw in the NT kernel. The bug lets a local, low-privileged user reach SYSTEM. Microsoft patched it in th…
12 views
Daily Writeups
⤷ Title: Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:15:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Fineract #Core Banking #sql injection
Daily CyberSecurity
Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
TL;DR Apache has patched three SQL injection flaws in Fineract, the open-source core banking platform. The Apache Fineract SQL injection bugs, CVE-2026-57821, CVE-2026-56287, and CVE-2026-35152, a…
12 views
Daily Writeups
⤷ Title: Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic Web Client #mail forwarding bypass #SNMP command injection #ssrf #XSS #ZCS #Zimbra #Zimbra 10.1.20 #Zimbra vulnerabilities
Daily CyberSecurity
Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
TL;DR Zimbra released Collaboration Suite 10.1.20 on July 20, 2026. The update fixes several Zimbra vulnerabilities, including a critical SNMP command injection flaw and multiple XSS bugs. Zimbra …
15 views
Daily Writeups
⤷ Title: CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:45:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_50522 #CVE_2026_58644 #Deserialization #DEVCORE #exploited in the wild #Microsoft #proof_of_concept #Remote Code Execution #Sharepoint #SharePoint RCE
Daily CyberSecurity
CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
TL;DR CVE-2026-50522 is a critical SharePoint RCE flaw rated CVSS 9.8. Researchers report active exploitation attempts, and a public proof-of-concept exploit is now available. Microsoft patched th…
15 views
Daily Writeups
⤷ Title: CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:25:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache OpenMeetings #Arbitrary File Read #Path Traversal
Daily CyberSecurity
CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
TL;DR Apache has patched a critical OpenMeetings vulnerability tracked as CVE-2026-49488. The path traversal flaw grants arbitrary file read to any user with moderator rights in a room. Version 9.…
17 views
Daily Writeups
⤷ Title: The File Is Lying to You: 10 Steganography Methods That Hide Secrets in Plain Sight
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:31:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #ethical_hacking #blog #cybersecurity
Medium
The File Is Lying to You: 10 Steganography Methods That Hide Secrets in Plain Sight
A normal photograph can contain a confidential document.
25 views
Daily Writeups
⤷ Title: How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:28:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #application_security #java #spring_boot
Medium
How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
BOLA/IDOR is the #1 API vulnerability on OWASP’s list. Most backend developers ship it constantly without knowing its name.
18 views
Daily Writeups
⤷ Title: Crocc Crew (THM) Tryhackme Hard Challenge
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:45:21 GMT
════════════════════════
⌗ Tags: #linux #tryhackme #privilege_escalation #cybersecurity #hacking
Medium
Crocc Crew (THM) Tryhackme Hard Challenge
Description : Crocc Crew has created a backdoor on a Cooctus Corp Domain Controller. We’re calling in the experts to find the real back…
15 views
Daily Writeups
⤷ Title: How Hackers Hack Your Android Phone Using BTMOB 4.5.2 — And How to Protect Yourself
════════════════════════
𐀪 Author: Hackers Things
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:13:26 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #android #penetration_testing
Medium
How Hackers Hack Your Android Phone Using BTMOB 4.5.2 — And How to Protect Yourself
A complete walkthrough of BTMOB 4.5.2 server setup from a cybersecurity perspective. Learn how remote Android attacks work so you can…
14 views