Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 08:20:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_61511 #eval injection #preauth RCE #proof_of_concept #Remote Code Execution #runMaths #SSD Secure Disclosure #vBulletin #vBulletin RCE
Daily CyberSecurity
CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed
TL;DR: A public proof-of-concept now targets CVE-2026-61511, a vBulletin preauth RCE. The bug lets an unauthenticated attacker run PHP on the server through a math-parsing flaw. vBulletin fixed it…
24 views
Daily Writeups
⤷ Title: TELESHIM Malware Targets Middle East Governments Through Telegram
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 08:01:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BINDCLOAK #DLL Sideloading #malware #Middle East #MIXEDKEY #Telegram C2 #TELESHIM #Zscaler ThreatLabz
Daily CyberSecurity
TELESHIM Malware Targets Middle East Governments Through Telegram
At a glance Threat actor Unnamed group with links to East Asia (moderate-to-high confidence) Activity type Targeted intrusion and suspected espionage; DLL side-loading and Telegram C2 Targets / vi…
21 views
Daily Writeups
⤷ Title: Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints…
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #bug_bounty_writeup #wordpress #bug_bounty
Medium
Unauthenticated Disclosure of A/B Test Data in Convert Pro — How Two Forgotten AJAX Endpoints Leaked Every Split-Test on a Site
Author: Shikhali Jamalzade GitHub: alisalive LinkedIn: camalzads
17 views
Daily Writeups
⤷ Title: One Header Away from 10+ GB of Customer Documents (PII) — $6K Bounty
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:38:35 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bucketlist #bug_bounty #bug_bounty_tips #authentication
Medium
One Header Away from 10+ GB of Customer Documents (PII) — $6K Bounty
An anonymous attacker could fully enumerate, read, and overwrite the production customer-service attachment bucket of a major insurer’s…
17 views
Daily Writeups
⤷ Title: How I Found a Bug Worth $3,500 — In a Feature Nobody Was Watching.
════════════════════════
𐀪 Author: Vishw Bhatt
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:37:44 GMT
════════════════════════
⌗ Tags: #admin_panel #file_upload #bug_bounty
Medium
How I Found a Bug Worth $3,500 — In a Feature Nobody Was Watching.
A storage-exhaustion flaw. A stored XSS that waited for an admin. Both hiding in the same “boring” file upload form that hadn’t been…
20 views
Daily Writeups
⤷ Title: How I Found an Auth Flaw in a Government Site: From GraphQL Introspection to Unauthorized Access
════════════════════════
𐀪 Author: Aruvasaga chithan A
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:24:22 GMT
════════════════════════
⌗ Tags: #graphql #infosec #ethical_hacking #bug_bounty
Medium
How I Found an Auth Flaw in a Government Site: From GraphQL Introspection to Unauthorized Access
Disclaimer:This write-up describes a vulnerability that has been responsibly disclosed and fixed by the affected organization. All domains…
16 views
Daily Writeups
⤷ Title: How a Simple Profile Update Led to Cross-Tenant Data Exposure
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:23:41 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #api #appsec #owasp
Medium
How a Simple Profile Update Led to Cross-Tenant Data Exposure
Free Article Link: Click for free!
16 views
Daily Writeups
⤷ Title: The End of the Entry-Level Ladder: How AI Is Killing L1 SOC and Threat Intel Jobs in 2026
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:04:41 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #careers #hacking #ethical_hacking
Medium
The End of the Entry-Level Ladder: How AI Is Killing L1 SOC and Threat Intel Jobs in 2026
For years, the cybersecurity career path followed a clear ladder.
12 views
Daily Writeups
⤷ Title: Log4Shell: The Log Message That Broke the Internet
════════════════════════
𐀪 Author: The Skillpods
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 08:21:10 GMT
════════════════════════
⌗ Tags: #theskillpod #cybersecurity #vulnerability #cve_2021_44228 #hacking
Medium
Log4Shell: The Log Message That Broke the Internet
One line of code, millions of servers exposed. Here’s why CVE-2021–44228 still matters
16 views
Daily Writeups
⤷ Title: Best Ethical hacking course online with certificate in india
════════════════════════
𐀪 Author: cybersecuritycourse
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 08:00:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking_training #ai #cybersecurity #ethical_hacking #hacking
Medium
Best Ethical hacking course online with certificate in india
With cyber threats becoming more advanced every year, organizations are investing heavily in cybersecurity professionals who can identify…
25 views
Daily Writeups
⤷ Title: I Built My Own Local AI Tool for Penetration Testing
════════════════════════
𐀪 Author: Manikandan
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:17:20 GMT
════════════════════════
⌗ Tags: #privacy #artificial_intelligence #penetration_testing #kali_linux #cybersecurity
Medium
I Built a Local AI Pentesting Assistant So My Client Data Never Leaves My Laptop
I combined Ollama, OpenCode, and HexStrikeAI into one private, terminal-based security assistant.
28 views
Daily Writeups
⤷ Title: Threat Intel Tools | TryHackMe — Notes [2026]
════════════════════════
𐀪 Author: Rahul
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 08:29:25 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #tryhackme_writeup
Medium
Threat Intel Tools | TryHackMe — Notes [2026]
Abuse.ch is a research project hosted by the Institue for Cybersecurity and Engineering at the Bern University of Applied Sciences in…
36 views
Daily Writeups
⤷ Title: Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 16:21:45 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: Insight Partners and Glilot Capital Co-Lead $20M Investment in Way Security
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 11:10:38 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Glilot Capital #Insight Partners #Way Security
Hackread
Insight Partners and Glilot Capital Co-Lead $20M Investment in Way Security
Way Security raises $20M from Insight Partners and Glilot Capital to automate costly IAM operations with AI and help enterprises get more from existing tools.
22 views
Daily Writeups
⤷ Title: Google Indexed Claude AI Shared Chats Before Results Were Removed
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 10:56:48 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Privacy #AI #Anthropic #Claude AI #Cybersecurity #Google
Hackread
Google Indexed Claude AI Shared Chats Before Results Were Removed
Google Search indexed public Claude AI chat links, letting people find shared conversations through the site query before those listings disappeared soon after.
13 views
Daily Writeups
⤷ Title: OWASP Top 10 Isn’t Enough: Security Tests Every Pentester Should Perform
════════════════════════
𐀪 Author: Dharrunkrish
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 11:40:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #application_security #web_penetration_testing #ethical_hacking
Medium
OWASP Top 10 Isn’t Enough: Security Tests Every Pentester Should Perform
A field guide to the vulnerability classes that separate a checklist tester from a professional penetration tester
18 views
Daily Writeups
⤷ Title: Certificate Transparency — The Recon Superpower
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #ethical_hacking #infosec #cybersecurity
Medium
Certificate Transparency — The Recon Superpower
Hey friends! Nitin here 👋
13 views
Daily Writeups
⤷ Title: Hashcat Blackbelt — Cracking WPA2 WiFi Like a Pro (Part 3)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 10:35:34 GMT
════════════════════════
⌗ Tags: #bug_bounty #security #hacking #password_cracking #cybersecurity
Medium
📡 Hashcat Blackbelt — Cracking WPA2 WiFi Like a Pro (Part 3)
By Ghostyjoe™
11 views
Daily Writeups
⤷ Title: Writeup for CyLab/picoCTF challenge “repetitions”
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #ctf_writeup #cylab #hacking
Medium
Writeup for CyLab/picoCTF challenge “repetitions”
Learn how CyLab’s “repetitions” challenge explores Base64 encoding, using the Linux shell to decode a flag that has been Base64-encoded…
7 views
Daily Writeups
⤷ Title: Rooting DC-7: OSINT, a Leaky GitHub Repo, and a Cron Job Waiting to Be Abused
════════════════════════
𐀪 Author: Sithum Ranasinghe
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 11:26:47 GMT
════════════════════════
⌗ Tags: #ctf #penetration_testing #vulnhub #ethical_hacking
Medium
Rooting DC-7: OSINT, a Leaky GitHub Repo, and a Cron Job Waiting to Be Abused
No CVE, no plugin exploit, no brute force. Just a username, a search engine, and a script that already runs as root.
9 views
Daily Writeups
⤷ Title: Gemini 3.5 Flash Cyber Explained: Google’s AI-Powered Code Security Model
════════════════════════
𐀪 Author: Parvez Mohammed @ Techlatest.net
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 11:24:35 GMT
════════════════════════
⌗ Tags: #google #google_gemini_3 #cybersecurity #penetration_testing #ai_model
Medium
Gemini 3.5 Flash Cyber Explained: Google’s AI-Powered Code Security Model
Software security is entering a new era.
9 views