Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 00:37:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CISA KEV #Control Web Panel #CVE_2025_11371 #Gladinet #local file inclusion #rce #Triofox
Daily CyberSecurity
CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover
CISA added two critical, actively exploited flaws to its KEV Catalog: Gladinet LFI (CVE-2025-11371) risks RCE via machine key theft, and CWP RCE (CVE-2025-48703) allows unauthenticated admin takeover.
17 views
Daily Writeups
⤷ Title: China’s APT24 Launches Stealth BADAUDIO Malware, Hitting 1,000+ Domains via Taiwanese Supply Chain Hack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 00:36:57 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT24 #BADAUDIO #China APT #Control Flow Flattening #cyber_espionage #supply chain attack #Taiwan
Daily CyberSecurity
China’s APT24 Launches Stealth BADAUDIO Malware, Hitting 1,000+ Domains via Taiwanese Supply Chain Hack
Google exposed APT24's stealth BADAUDIO C++ downloader. The three-year campaign includes a supply chain hack hitting 1,000+ domains, using control flow flattening and AES-encrypted cookies for C2.
32 views
Daily Writeups
⤷ Title: Control Drift: Why Your SOC 2 Compliance Can’t Keep Up With AI Written Code
════════════════════════
𐀪 Author: Jost Faganel
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:43:18 GMT
════════════════════════
⌗ Tags: #ai_generated_code #control_drift #application_security #sast #soc_2_compliance
Medium
Control Drift: Why Your SOC 2 Compliance Can’t Keep Up With AI Written Code
I’ve been thinking about compliance lately. A lot. Not in the way most people think about it — not the annual audit, not the checklist, not…
18 views
Daily Writeups
⤷ Title: One Username to Rule Them All: The Persistent RCE Shadow Haunting Control Web Panel
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:19:49 +0000
════════════════════════
⌗ Tags: #Vulnerability #AlmaLinux #centos #Control Web Panel #CVE_2025_48703 #CVE_2025_70951 #CWP #Fenrisk #Linux Hosting #RCE #remote code execution #Rocky Linux #Server Security
Penetration Testing Tools
One Username to Rule Them All: The Persistent RCE Shadow Haunting Control Web Panel
A profound architectural frailty has been unearthed within a ubiquitous server management console, permitting an adversary to usurp
21 views
Daily Writeups
⤷ Title: Exploit Code Live: Full Technical Details and PoC Disclosed for Critical CWP RCE Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:42:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #CentOS Web Panel #Command Injection #Control Web Panel #CWP #Exploit Disclosed #infosec #Linux Security #PoC #rce #Web Panel Security
Daily CyberSecurity
Exploit Code Live: Full Technical Details and PoC Disclosed for Critical CWP RCE Vulnerability
Fenrisk releases full PoC exploit for CVE-2025-48703, a critical CWP RCE flaw. Learn how unauthenticated attackers hijack non-root users. Patch now!
11 views
Daily Writeups
⤷ Title: Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:35 +0000
════════════════════════
⌗ Tags: #Malware #Chromium Browsers #Clipboard Hijacker #Control Flow Flattening #Cyber Security #Discord Token Stealer #Gremlin Stealer #infosec #Infostealer #MFA Bypass #Session Hijacking #Unit 42
Daily CyberSecurity
Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
Unit 42 exposes the new Gremlin stealer. It uses memory-resident techniques to hijack active browser session tokens and completely bypass MFA.
16 views
Daily Writeups
⤷ Title: Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:01:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Cloud Security #Cloud Egress #Control Plane Attack #Cyber Security #Identity Hijacking #infosec #Key Vault Exploit #Microsoft Threat Intelligence #RBAC Manipulation #SSPR Abuse #Storm_2949
Daily CyberSecurity
Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
Microsoft exposes Storm-2949, a cloud-native threat group abusing Azure management features and SSPR to hijack Key Vaults, App Services, and SQL databases.
14 views
Daily Writeups
⤷ Title: Public PoC Code Exposes CVSS 9.8 Control Web Panel SQL Injection CVE-2026-57517
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 03:47:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Control Web Panel #CVE_2026_57517 #sql injection #Vulnerability
Daily CyberSecurity
Public PoC Code Exposes CVSS 9.8 Control Web Panel SQL Injection CVE-2026-57517
Security researchers publicly disclosed a critical vulnerability in Control Web Panel alongside proof-of-concept exploit code. This flaw, identified as CVE-2026-57517, carries a maximum CVSS score…
10 views
Daily Writeups
⤷ Title: Control-M CVE-2026-10539: Unauthenticated Remote Command Injection (CVSS 9.5)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 15:21:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BMC #Command Injection #Control_M #CVE_2026_10539 #Vulnerability
Daily CyberSecurity
Control-M CVE-2026-10539: Unauthenticated Remote Command Injection (CVSS 9.5)
TL;DR BMC disclosed a critical flaw in Control-M/Server tracked as CVE-2026-10539. The Control-M command injection bug scores 9.5 on CVSSv4. It lets an unauthenticated attacker run commands on the…
29 views
Daily Writeups
⤷ Title: Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 13:15:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #control_plane traffic #CVE_2026_16242 #hosted control planes #Konnectivity vulnerability #Kubernetes Security #mitm #proxy server
Daily CyberSecurity
Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic
A critical Konnectivity vulnerability lets a remote attacker slip into a cluster without any credentials. Tracked as CVE-2026-16242, it carries a CVSS score of 9.4. The flaw sits in the Konnectivi…
20 views
Daily Writeups
⤷ Title: Windows Control Panel Migration: Why Legacy Code Persists
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 03:28:17 +0000
════════════════════════
⌗ Tags: #Windows #Control Panel #Legacy Code #Microsoft #Windows 11 #Windows Settings
Daily CyberSecurity
Windows Control Panel Migration: Why Legacy Code Persists
For many years, Microsoft has strived to migrate traditional Control Panel applets into the modern Settings application across Windows 10 and Windows 11. Nevertheless, numerous legacy applets rema…
21 views