Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CVE-2025-68926: Critical Hardcoded Credential Flaw Exposes RustFS Storage Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 00:05:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #CVE_2025_68926 #Cyber Security #data destruction #gRPC Security #hardcoded credentials #Object Storage #Rust Programming #RustFS
Daily CyberSecurity
CVE-2025-68926: Critical Hardcoded Credential Flaw Exposes RustFS Storage Clusters
RustFS, a distributed object storage system celebrated for leveraging the memory safety and performance of the Rust programming language, has stumbled over a decidedly old-school security hurdle. …
31 views
Daily Writeups
⤷ Title: Double Critical: Hardcoded Secrets Expose Ruckus IoT Controllers to Root RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 00:16:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_69425 #CVE_2025_69426 #Docker escape #hardcoded credentials #IoT security #Root Privilege Escalation #Ruckus Networks #vRIoT Controller
Daily CyberSecurity
Double Critical: Hardcoded Secrets Expose Ruckus IoT Controllers to Root RCE
Two CVSS 10 flaws (CVE-2025-69425 & CVE-2025-69426) hit Ruckus vRIoT. Hardcoded secrets allow attackers to seize root access. Update to v3.0.0.0 now.
11 views
Daily Writeups
⤷ Title: Signage Hijack: Samsung MagicInfo9 Flaws (CVSS 9.8) Expose Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:16:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25200 #CVE_2026_25201 #CVE_2026_25202 #Digital Signage #hardcoded credentials #MagicInfo9 #Patch Alert #rce #samsung #Stored XSS
Daily CyberSecurity
Signage Hijack: Samsung MagicInfo9 Flaws (CVSS 9.8) Expose Servers
Samsung MagicInfo9 has critical flaws (CVSS 9.8) including hardcoded passwords and RCE. Update to v21.1090.1 immediately to secure your digital signage.
16 views
Daily Writeups
⤷ Title: Factory Flaw: Critical WAGO Switch Vulnerabilities (CVSS 9.8) Allow Remote Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CERT@VDE #CVE_2026_22904 #CVE_2026_22906 #Hardcoded Encryption Key #ICS security #Industrial Managed Switch #OT Security #SCADA #WAGO 852 Series
Daily CyberSecurity
Factory Flaw: Critical WAGO Switch Vulnerabilities (CVSS 9.8) Allow Remote Takeover
Critical flaws in WAGO 852 switches (CVSS 9.8) allow remote takeover via hardcoded keys & buffer overflows. Update firmware 2.64 immediately.
11 views
Daily Writeups
⤷ Title: Critical Hardcoded Credential Bug Hits Nexus Repository 3
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:05:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_5189 #DevSecOps #hardcoded credentials #OrientDB #Patch Alert #rce #Repository Management #Sonatype Nexus #Supply Chain Security #Vulnerability
Daily CyberSecurity
Critical Hardcoded Credential Bug Hits Nexus Repository 3
Sonatype Nexus Repository (CVE-2026-5189) faces a critical 9.2 CVSS flaw. A hardcoded database credential grants full host access. Patch to v3.71.0 now!
16 views
Daily Writeups
⤷ Title: Mass Exploitation Alert: Hardcoded Credentials in Four-Faith Industrial Routers (CVE-2024-9643) Hijacked for Botnets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 02:49:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Botnet Takeover #Crowdsec #CVE_2024_9643 #F3x36 #Four_Faith #hardcoded credentials #Industrial Cellular Router #infosec #IoT security #Mass Exploitation #Nuclei Template
Daily CyberSecurity
Mass Exploitation Alert: Hardcoded Credentials in Four-Faith Industrial Routers (CVE-2024-9643) Hijacked for Botnets
Urgent: CrowdSec warns CVE-2024-9643 in Four-Faith routers has hit mass exploitation phase. Attackers abuse hardcoded logins to build botnets. Patch now!
11 views
Daily Writeups
⤷ Title: Critical Eppendorf Bioreactor Security Flaw Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 00:28:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bioreactor Vulnerability #CVE_2026_7251 #Eppendorf BioFlo 320 #Hardcoded Password #ICS security #Laboratory Security
Daily CyberSecurity
Critical Eppendorf Bioreactor Security Flaw Disclosed
A critical Eppendorf bioreactor security flaw exposes systems via a hard-coded VNC password. Learn how to secure your BioFlo 320 device.
26 views
Daily Writeups
⤷ Title: Acer Router Security Flaws Earn Maximum 10.0 CVSS Scores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 09:38:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #Acer Wave 7 #CVE_2026_49200 #CVE_2026_49201 #Firmware Patch #Hardcoded Key #Router Vulnerabilities
Daily CyberSecurity
Acer Router Security Flaws Earn Maximum 10.0 CVSS Scores
Acer router security flaws expose cleartext credentials. Learn how these critical firmware bugs threaten home networks and how to update.
16 views
Daily Writeups
⤷ Title: UltraVNC Repeater Vulnerabilities Allow Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 02:20:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #buffer overflow #CVE_2026_7839 #CVE_2026_7840 #Hardcoded Password #Remote Access #UltraVNC #UltraVNC repeater
Daily CyberSecurity
UltraVNC Repeater Vulnerabilities Allow Remote Code Execution
TL;DR Researchers disclosed two UltraVNC repeater vulnerabilities in the tool’s HTTP admin server. One allows arbitrary code execution without any login. The other exposes a hardcoded admin …
8 views
Daily Writeups
⤷ Title: StoneFly Storage Concentrator Flaws Allow Unauthenticated Root Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 00:55:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA ICS advisory #Command Injection #CVE_2026_55721 #CVE_2026_56413 #CVE_2026_56415 #hardcoded credentials #sql injection #Stonefly #StoneFly Storage Concentrator
Daily CyberSecurity
StoneFly Storage Concentrator Flaws Allow Unauthenticated Root Access
TL;DR CISA published an advisory for five StoneFly Storage Concentrator vulnerabilities on 30 June 2026. Two rate a maximum CVSS score of 10.0. Both let an unauthenticated attacker run commands as…
13 views