Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
18 views
Daily Writeups
⤷ Title: Everything Is Input: SQL Injection Through Parameter Names
════════════════════════
𐀪 Author: Clark Voss
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:50:43 GMT
════════════════════════
⌗ Tags: #security #ethical_hacking #cybersecurity #bug_bounty #hacking
Medium
Everything Is Input: SQL Injection Through Parameter Names
How a 500 error, a hunch, and a lot of manual testing led me to a SQL injection I had never seen before and why I had to write my own…
15 views
Daily Writeups
⤷ Title: Guía Definitiva de Seguridad en APIs: OWASP Top 10, Bypasses y Mitigación
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #technology #api #bug_bounty #hacking #cybersecurity
11 views
Daily Writeups
⤷ Title: Muhsin Ali Shah — Cybersecurity Researcher, Cloud Security Engineering Student & AI Enthusiast
════════════════════════
𐀪 Author: Muhsin Ali Shah
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 00:14:12 GMT
════════════════════════
⌗ Tags: #pakistan #cybersecurity #careers #hacking #ethical_hacking
Medium
Muhsin Ali Shah — Cybersecurity Researcher, Cloud Security Engineering Student & AI Enthusiast
Cybersecurity Researcher, Cloud Security Engineering Student & AI Enthusiast
13 views
Daily Writeups
⤷ Title: Walkthrough: TryHackMe Room ValenFind
════════════════════════
𐀪 Author: LZR_404
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:36:45 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ethical_hacking #tryhackme #cybersecurity
Medium
Walkthrough: TryHackMe Room ValenFind
When building modern web applications, the phrase “your secrets are safe with us” is usually a comforting promise. In the case of…
21 views
Daily Writeups
⤷ Title: Telnet vs SSH: por qué una sesión puede verse completa en una captura de red
════════════════════════
𐀪 Author: Andrespistone
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:41:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #linux #ethical_hacking
22 views
Daily Writeups
⤷ Title: HTTP sin TLS: así quedan expuestas las credenciales en una captura de red
════════════════════════
𐀪 Author: Andrespistone
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:20:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #ethical_hacking #kali_linux
19 views
Daily Writeups
⤷ Title: Acoustic Keystroke Attack Decodes Typing Using Language Models
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:36:27 +0000
════════════════════════
⌗ Tags: #Information Security #Acoustic Attack #AI security #cybersecurity #Keystroke Eavesdropping #language models
Information Security News
Acoustic Keystroke Attack Decodes Typing Using Language Models
The acoustic reverberations of keyboard strokes can betray far more information than previously imagined. Recently, a novel side-channel attack demonstrated that a brief audio recording suffices t…
14 views
Daily Writeups
⤷ Title: MCP Protocol Embraces Stateless Architecture in Major Overhaul
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:55:50 +0000
════════════════════════
⌗ Tags: #Technology #API Updates #MCP Protocol #Software Engineering #Stateless Architecture #web development
Daily CyberSecurity
MCP Protocol Embraces Stateless Architecture in Major Overhaul
The Model Context Protocol (MCP), spearheaded by Anthropic, recently launched its highly anticipated 2026-07-28 specification. The defining transformation of this update is the complete migration …
8 views
Daily Writeups
⤷ Title: Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:48:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #backdoor #CVE_2026_18072 #cybersecurity #wordpress
Daily CyberSecurity
Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites
TL;DR Threat actors injected a critical backdoor into the Advanced Responsive Video Embedder plugin. This flaw tracks as CVE-2026-18072 (CVSS 9.8). Attackers can bypass authentication entirely. Th…
9 views
Daily Writeups
⤷ Title: Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:26:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Check Point #CVE_2026_16232 #Rapid7 #Security Management Server #SmartConsole #zero_day
Daily CyberSecurity
Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public
TL;DR Attackers are exploiting a SmartConsole authentication bypass in Check Point management servers. The flaw, CVE-2026-16232, lets an unauthenticated attacker gain full administrator access. Ch…
9 views
Daily Writeups
⤷ Title: NVIDIA BlueField Flaw CVE-2026-65094 Allows Code Execution (CVSS 9.0)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:15:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #ConnectX #CVE_2026_65094 #DOCA #nvidia #NVIDIA BlueField #VIRTIO_Net
Daily CyberSecurity
NVIDIA BlueField Flaw CVE-2026-65094 Allows Code Execution (CVSS 9.0)
TL;DR NVIDIA patched a critical NVIDIA BlueField vulnerability tracked as CVE-2026-65094. The VIRTIO-Net flaw scores a CVSS of 9.0. A virtual machine user could trigger code execution in the affec…
11 views
Daily Writeups
⤷ Title: IBM Aspera Vulnerabilities Patched in Faspex 5 and Desktop App
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:03:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Aspera Faspex #CVE_2026_14958 #CVE_2026_14959 #CVE_2026_14973 #IBM Aspera #IBM Aspera Desktop #Path Traversal #Remote Code Execution
Daily CyberSecurity
IBM Aspera Vulnerabilities Patched in Faspex 5 and Desktop App
TL;DR IBM patched five IBM Aspera vulnerabilities across two products on July 20, 2026. They affect Aspera Faspex 5 and the Aspera Desktop App. The worst flaws reach a CVSS score of 9.3 and allow …
9 views
Daily Writeups
⤷ Title: How I Earned $[XXXX] By Breaking Into a Company’s “Employee-Only” Internal Platform
════════════════════════
𐀪 Author: Hemandhemanth
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:30:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #hacking #bug_bounty #ethical_hacking
Medium
How I Earned $[XXXX] By Breaking Into a Company’s “Employee-Only” Internal Platform
Sometimes the scariest vulnerabilities aren’t complex exploits — they’re one broken assumption in an otherwise “secure” flow. In this case…
10 views
Daily Writeups
⤷ Title: GTG-1002: how a Chinese hacking group got AI to run 90% of a cyberattack on its own
════════════════════════
𐀪 Author: Trends 24/7
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:31:01 GMT
════════════════════════
⌗ Tags: #hacking #ai #artificial_intelligence #cybersecurity #data_security
Medium
GTG-1002: how a Chinese hacking group got AI to run 90% of a cyberattack on its own
Hi everyone, I am Trends 24/7 and in this blog I want to walk you through something that changed how I think about AI security this year…
11 views
Daily Writeups
⤷ Title: Verbose
════════════════════════
𐀪 Author: Cardosoleo
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:15:42 GMT
════════════════════════
⌗ Tags: #hack_smarter #penetration_testing #verbose
Medium
Verbose
Objective / Scope
17 views
Daily Writeups
⤷ Title: There’s no such thing as fully autonomous in cybersecurity
════════════════════════
𐀪 Author: Timsux Wales
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:37:37 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #automation #ai #autonomous_agent
Medium
There’s no such thing as fully autonomous in cybersecurity
Regardless of how advanced AI becomes in automating tasks, marketing language and cybersecurity terminology are not always the same.
24 views
Daily Writeups
⤷ Title: Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 09:50:57 +0530
════════════════════════
⌗ Tags: No_Tags
22 views
Daily Writeups
⤷ Title: ⚙️ Hashcat Blackbelt — Automation, Pipelines & Full Recon-to-Crack Framework (Part 5)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 05:30:24 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #linux #security #cybersecurity
20 views
Daily Writeups
⤷ Title: Account Takeover Across Multiple Programs via Featurebase Integration
════════════════════════
𐀪 Author: JEETPAL
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 05:23:30 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #bugbounty_writeup #bug_bounty_tips #account_takeover
Medium
Account Takeover Across Multiple Programs via Featurebase Integration
In this blog, I am going to share an account takeover vulnerability in a third-party provider widely used by many bug bounty programs.
16 views
Daily Writeups
⤷ Title: 7 Vulnerabilities, 0 Rewards: What Bug Bounty Beginners Need to Know
════════════════════════
𐀪 Author: Ronak
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 05:17:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ethical_hacking #web_security #bug_bounty_writeup
Medium
7 Vulnerabilities, 0 Rewards: What Bug Bounty Beginners Need to Know
A real beginner’s experience uncovering 7 vulnerabilities in 3 hours — and the harsh lessons about duplicates, scope, and persistence in…
11 views