Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: SAP November 2025 Patch Day Fixes 3 Critical Flaws (CVSS 10) — Including Code Injection and Insecure Key Management
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 08:14:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Patch Update #Deserialization #Hard_coded Credentials #NetWeaver #rce #SAP #Solution Manager
Daily CyberSecurity
SAP November 2025 Patch Day Fixes 3 Critical Flaws (CVSS 10) — Including Code Injection and Insecure Key Management
SAP released its Patch Day update fixing 18 flaws, including two Critical (CVSS 10.0) vulnerabilities: RMI-P4 RCE and Hard-Coded Credentials in SQL Anywhere Monitor, risking unauthenticated takeover.
16 views
Daily Writeups
⤷ Title: Apache Syncope Flaw (CVE-2025-65998) Exposes Encrypted User Passwords Due to Hard-Coded AES Key
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 02:52:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Syncope #Critical Flaw #CVE_2025_65998 #Hard_Coded Key #Identity Management #Password Encryption
Daily CyberSecurity
Apache Syncope Flaw (CVE-2025-65998) Exposes Encrypted User Passwords Due to Hard-Coded AES Key
Apache warned of a Critical flaw (CVE-2025-65998) in Syncope. When AES is enabled for password storage, a hard-coded key allows attackers with database access to decrypt all user passwords. Update immediately.
67 views
Daily Writeups
⤷ Title: Apache StreamPark Flaw Risks Data Decryption & Token Forgery via Hard-Coded Key and AES ECB Mode
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 00:16:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AES ECB #Apache StreamPark #Cryptographic Flaw #CVE_2025_54947 #Data Decryption #Hard_Coded Key #JWT Forgery
Daily CyberSecurity
Apache StreamPark Flaw Risks Data Decryption & Token Forgery via Hard-Coded Key and AES ECB Mode
A critical flaw in Apache StreamPark uses a hard-coded encryption key and the insecure AES ECB mode, risking data decryption and JWT authentication token forgery. Update to v2.1.7 immediately.
11 views
Daily Writeups
⤷ Title: The Hard-Coded Backdoor: Critical 9.8 Severity NVIDIA Flaws Grant Total Control of AI Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 01:37:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2025_33222 #CVE_2025_33223 #CVE_2025_33224 #Hard_coded Credentials #Isaac Launchable #nvidia #privilege escalation #Remote Code Execution #Robotics
Daily CyberSecurity
The Hard-Coded Backdoor: Critical 9.8 Severity NVIDIA Flaws Grant Total Control of AI Systems
NVIDIA has issued an urgent security update for its Isaac Launchable software, patching a trio of critical vulnerabilities that could allow attackers to seize total control of affected systems. Th…
15 views
Daily Writeups
⤷ Title: Critical 9.8 Alert: Hard-Coded Credentials in Dell ECS and ObjectScale Leave Filesystems Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 09:00:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CSV injection #CVE_2026_40636 #Data Security #Dell ECS #Dell Security Advisory #Enterprise Storage #Hard_coded Credentials #infosec #ObjectScale #Patch Alert #Privilege Elevation
Daily CyberSecurity
Critical 9.8 Alert: Hard-Coded Credentials in Dell ECS and ObjectScale Leave Filesystems Exposed
Urgent: Dell patches a 9.8 severity credential flaw (CVE-2026-40636) in ECS and ObjectScale. Secure your enterprise storage by upgrading to version 4.3.0.0.
18 views
Daily Writeups
⤷ Title: VoIP Backbone Exposed: Critical FreePBX Flaw (CVE-2026-46376) Allows Unauthenticated Access to User Portals
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:53:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_46376 #Cyber Security #FreePBX #Hard_coded Credentials #infosec #Patch Alert #Telecom Security #User Control Panel #User Management #VoIP Security
Daily CyberSecurity
VoIP Backbone Exposed: Critical FreePBX Flaw (CVE-2026-46376) Allows Unauthenticated Access to User Portals
FreePBX fixes critical 9.1 CVSS flaw (CVE-2026-46376) where hardcoded credentials grant unauthenticated portal access. Update your modules now!
27 views
Daily Writeups
⤷ Title: Critical Dell Container Storage Modules Vulnerability Exposes Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 01:48:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cloud Security #Cybersecurity Advisory #dell #Dell Container Storage Modules #Hard_coded Credentials
Daily CyberSecurity
Critical Dell Container Storage Modules Vulnerability Exposes Infrastructure
Fix the critical Dell Container Storage Modules vulnerability (CVE-2026-40710). Learn how hardcoded credentials expose systems and update now.
17 views
Daily Writeups
⤷ Title: Naxclow IoT Vulnerabilities: 7 Flaws Let Attackers Hijack Doorbells and Cameras
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 01:45:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #CVE_2026_28742 #Device Takeover #Hard_Coded Key #IoT security #Naxclow #Smart Doorbell
Daily CyberSecurity
Naxclow IoT Vulnerabilities: 7 Flaws Let Attackers Hijack Doorbells and Cameras
CISA warns of 7 Naxclow IoT vulnerabilities, including a hard-coded key (CVE-2026-28742) enabling device takeover of doorbells and cameras.
15 views
Daily Writeups
⤷ Title: Critical Yarbo Robot Vulnerability Exposes Global Fleet
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 02:02:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_10557 #CVE_2026_7368 #Hard_coded Credentials #IoT security #MQTT #Yarbo
Daily CyberSecurity
Critical Yarbo Robot Vulnerability Exposes Global Fleet
A critical Yarbo robot vulnerability lets attackers extract hard-coded MQTT credentials and command the global fleet via CVE-2026-10557.
9 views
Daily Writeups
⤷ Title: Gardyn IoT Hub Flaw CVE-2026-13768 (CVSS 10) Enables Unauthenticated Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 13:16:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA advisory #CVE_2026_13768 #CVE_2026_54477 #CVE_2026_55726 #Gardyn #Gardyn IoT Hub #Hard_coded Credentials #IoT security #Remote Code Execution
Daily CyberSecurity
Gardyn IoT Hub Flaw CVE-2026-13768 (CVSS 10) Enables Unauthenticated Remote Code Execution
TL;DR CISA published an advisory for three flaws in the Gardyn IoT Hub, the controller for Gardyn’s indoor smart gardens. The worst, CVE-2026-13768, earns a maximum CVSS score of 10 and allo…
15 views