Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 19:34:57 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 18:48:31 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:59:43 +0000
════════════════════════
⌗ Tags: #Security #CI/CD #Cybersecurity #Fig #Fig Security #SecOps
Hackread
Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
Learn how Fig adds testing, deployment, and continuous verification to SecOps, helping security teams keep detections reliable as infrastructure evolves. daily.
27 views
Daily Writeups
⤷ Title: Magnet Forensics Sues Over Stolen iPhone Zero-Day
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:15:30 +0000
════════════════════════
⌗ Tags: #Apple #Information Security #cybersecurity #iOS Exploits #iPhone Zero_Day #Magnet Forensics
Information Security News
Magnet Forensics Sues Over Stolen iPhone Zero-Day
The smartphone hacking market typically operates in absolute secrecy. However, a recent lawsuit has exposed the inner workings of a major firm. The Canadian firm Magnet Forensics recently sued a f…
12 views
Daily Writeups
⤷ Title: TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:57:42 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Elastic Security Labs #Infostealer #MaaS #TELEPUZ #Vidar #WebInject
Daily CyberSecurity
TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
At a glance Malware family TELEPUZ Threat actor Unnamed; suspected solo developer or small team running a MaaS Target / victims Windows users reached through compromised web pages Delivery vector …
17 views
Daily Writeups
⤷ Title: ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:16:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASUS #ASUSWRT #Driver Vulnerability #router security
Daily CyberSecurity
ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
TL;DR ASUS has published five security advisories covering seven vulnerabilities. They span router firmware, MyASUS driver components, Aura Wallpaper, and GameSDK. The most severe, CVE-2026-13385 …
14 views
Daily Writeups
⤷ Title: Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:20:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42980 #LPE #Microsoft #Patch Tuesday #proof_of_concept #Windows Kernel #Windows Privilege Escalation #WMI vulnerability
Daily CyberSecurity
Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
TL;DR A public proof-of-concept now targets CVE-2026-42980, a Windows privilege escalation flaw in the NT kernel. The bug lets a local, low-privileged user reach SYSTEM. Microsoft patched it in th…
12 views
Daily Writeups
⤷ Title: Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:15:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Fineract #Core Banking #sql injection
Daily CyberSecurity
Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
TL;DR Apache has patched three SQL injection flaws in Fineract, the open-source core banking platform. The Apache Fineract SQL injection bugs, CVE-2026-57821, CVE-2026-56287, and CVE-2026-35152, a…
12 views
Daily Writeups
⤷ Title: Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic Web Client #mail forwarding bypass #SNMP command injection #ssrf #XSS #ZCS #Zimbra #Zimbra 10.1.20 #Zimbra vulnerabilities
Daily CyberSecurity
Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
TL;DR Zimbra released Collaboration Suite 10.1.20 on July 20, 2026. The update fixes several Zimbra vulnerabilities, including a critical SNMP command injection flaw and multiple XSS bugs. Zimbra …
15 views
Daily Writeups
⤷ Title: CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:45:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_50522 #CVE_2026_58644 #Deserialization #DEVCORE #exploited in the wild #Microsoft #proof_of_concept #Remote Code Execution #Sharepoint #SharePoint RCE
Daily CyberSecurity
CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
TL;DR CVE-2026-50522 is a critical SharePoint RCE flaw rated CVSS 9.8. Researchers report active exploitation attempts, and a public proof-of-concept exploit is now available. Microsoft patched th…
16 views
Daily Writeups
⤷ Title: CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:25:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache OpenMeetings #Arbitrary File Read #Path Traversal
Daily CyberSecurity
CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
TL;DR Apache has patched a critical OpenMeetings vulnerability tracked as CVE-2026-49488. The path traversal flaw grants arbitrary file read to any user with moderator rights in a room. Version 9.…
17 views
Daily Writeups
⤷ Title: The File Is Lying to You: 10 Steganography Methods That Hide Secrets in Plain Sight
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:31:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #ethical_hacking #blog #cybersecurity
Medium
The File Is Lying to You: 10 Steganography Methods That Hide Secrets in Plain Sight
A normal photograph can contain a confidential document.
25 views
Daily Writeups
⤷ Title: How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:28:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #application_security #java #spring_boot
Medium
How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
BOLA/IDOR is the #1 API vulnerability on OWASP’s list. Most backend developers ship it constantly without knowing its name.
18 views
Daily Writeups
⤷ Title: Crocc Crew (THM) Tryhackme Hard Challenge
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:45:21 GMT
════════════════════════
⌗ Tags: #linux #tryhackme #privilege_escalation #cybersecurity #hacking
Medium
Crocc Crew (THM) Tryhackme Hard Challenge
Description : Crocc Crew has created a backdoor on a Cooctus Corp Domain Controller. We’re calling in the experts to find the real back…
15 views
Daily Writeups
⤷ Title: How Hackers Hack Your Android Phone Using BTMOB 4.5.2 — And How to Protect Yourself
════════════════════════
𐀪 Author: Hackers Things
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:13:26 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #android #penetration_testing
Medium
How Hackers Hack Your Android Phone Using BTMOB 4.5.2 — And How to Protect Yourself
A complete walkthrough of BTMOB 4.5.2 server setup from a cybersecurity perspective. Learn how remote Android attacks work so you can…
15 views
Daily Writeups
⤷ Title: Linux Shells: Terminal Interfaces, Shell Environments, and Automation
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:38:50 GMT
════════════════════════
⌗ Tags: #linux #infosec #cybersecurity #tryhackme #bash
Medium
Linux Shells: Terminal Interfaces, Shell Environments, and Automation
Introduction
14 views
Daily Writeups
⤷ Title: The Lockout That Wasn’t: How a Stateless Brute-Force Test Broke My Own Login Throttle
════════════════════════
𐀪 Author: Pratyay Mukherjee
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:04:45 GMT
════════════════════════
⌗ Tags: #hydra #kali_linux #ethical_hacking #penetration_testing #cybersecurity
Medium
The Lockout That Wasn’t: How a Stateless Brute-Force Test Broke My Own Login Throttle
A real finding from an authorized penetration test against my own production app — and what it taught me about the difference between a…
26 views
Daily Writeups
⤷ Title: Parsing the Payload: A Playbook Walkthrough of Web Server Log Forensics
════════════════════════
𐀪 Author: Pop123
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:08:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #logs #tutorial #tryhackme
Medium
Parsing the Payload: A Playbook Walkthrough of Web Server Log Forensics
Log Forensics: Unmasking SQL Injections, Path Traversals, and RCE Artifacts in Web Infrastructure
25 views
Daily Writeups
⤷ Title: “screenshot” | CyberTalents | Bypass SSRF filters using PHP wrappers | Web Exploitation : Hard
════════════════════════
𐀪 Author: Dr_ro0t
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 21:08:54 GMT
════════════════════════
⌗ Tags: #web_security #ctf_writeup #ssrf #cyber_talents
Medium
“screenshot” | CyberTalents | Bypass SSRF filters using PHP wrappers| Web Exploitation : Hard
Exploiting SSRF vulnerability, bypassing hostname filters, and leaking source code using PHP wrappers to capture the flag.
35 views
Daily Writeups
⤷ Title: The Subdomain Subfinder Missed: How a German Wordlist Led Me to a Hidden Bug (and a CHF 100…
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:34:08 GMT
════════════════════════
⌗ Tags: #subdomains_enumeration #bug_bounty_writeup #subfinder #gobuster #germany
Medium
The Subdomain Subfinder Missed: How a German Wordlist Led Me to a Hidden Bug (and a CHF 100 Surprise)
“Sometimes bug bounty isn’t about finding the biggest vulnerability. Sometimes it’s about finding the application everyone else missed.”
54 views
Daily Writeups
⤷ Title: AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 21:36:12 +0530
════════════════════════
⌗ Tags: No_Tags
34 views