Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Critical Redis Lua Flaw (CVE-2025-49844) Rated CVSS 10.0 Allows Remote Code Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Oct 2025 02:39:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #Critical Vulnerability #CVE_2025_49844 #Database Security #Lua #RCE #redis #UAF #use_after_free
Penetration Testing Tools
Critical Redis Lua Flaw (CVE-2025-49844) Rated CVSS 10.0 Allows Remote Code Execution
A Critical (CVSS 10.0) Use-After-Free flaw (CVE-2025-49844) in Redis's Lua parser allows authenticated attackers to achieve Remote Code Execution. Update immediately to v8.2.2.
17 views
Daily Writeups
⤷ Title: CERT/CC Warns of Code Execution Flaws in Lite XL Text Editor (CVE-2025-12120, CVE-2025-12121)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 00:05:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.lite_project.lua #Arbitrary Code Execution #CVE_2025_12120 #Lite XL #Lua #rce #Supply Chain #text editor
Daily CyberSecurity
CERT/CC Warns of Code Execution Flaws in Lite XL Text Editor (CVE-2025-12120, CVE-2025-12121)
A Critical flaw in Lite XL (CVE-2025-12120) allows RCE when opening a project: the editor automatically executes malicious .lite_project.lua files, risking developer compromise.
11 views
Daily Writeups
⤷ Title: Breaking the Input: Sandbox Escape Hits libinput, Exposing Leading Linux Desktops
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 13:02:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_35093 #CVE_2026_35094 #Fedora #gnome #infosec #kde #KWin #libinput #Linux Security #Lua Vulnerability #Mutter #Patch Alert #Sandbox Escape
Daily CyberSecurity
Breaking the Input: Sandbox Escape Hits libinput, Exposing Leading Linux Desktops
Critical 8.8 CVSS flaw in libinput allows sandbox escape via malicious Lua plugins. Affects GNOME, KDE, and Fedora. Update to 1.31.1 or 1.30.3 now!
5 views
Daily Writeups
⤷ Title: LucidRook: Sophisticated Spear-Phishing Campaign Targets Taiwan with Custom Malware Stack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 06:13:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #Cisco Talos #Gmail Exfiltration #infosec #Lua Malware #LucidKnight #LucidPawn #LucidRook #Rust malware #Taiwan Cyber Attack #threat intelligence #UAT_10362
Daily CyberSecurity
LucidRook: Sophisticated Spear-Phishing Campaign Targets Taiwan with Custom Malware Stack
Cisco Talos reveals UAT-10362’s "Lucid" malware family targeting Taiwan. Using Lua, Rust, and regional locks, this threat prioritizes extreme stealth.
18 views
Daily Writeups
⤷ Title: Beyond Stuxnet: Uncovering fast16, the Apex Saboteur That Rewrites Mathematical Reality
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 08:27:58 +0000
════════════════════════
⌗ Tags: #Malware #Advanced Persistent Threats #APT #Cyber Sabotage #fast16 #High_Precision Computing #infosec #Lua VM #Malware History #SentinelLABS #Shadow Brokers #Stuxnet
Daily CyberSecurity
Beyond Stuxnet: Uncovering fast16, the Apex Saboteur That Rewrites Mathematical Reality
SentinelLABS reveals fast16, a 2005 framework that predates Stuxnet. It sabotages high-precision calculations in nuclear research by patching math in memory.
32 views
Daily Writeups
⤷ Title: Writing Your First NSE Script
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Wed, 06 May 2026 17:03:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ethical_hacking #lua #nmap
Medium
Writing Your First NSE Script
You don’t need to be a developer to write your own Nmap scripts. You just need 30 lines of Lua and something to automate.
12 views
Daily Writeups
⤷ Title: Critical Redis Patches Fix RCE and Memory Corruption Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:25:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25243 #cybersecurity #infosec #Lua Scripting #memory corruption #Patch Alert #rce #Redis #RedisBloom #RedisTimeSeries #Remote Code Execution #use after free
Daily CyberSecurity
Critical Redis Patches Fix RCE and Memory Corruption Flaws
Redis releases critical patches for 5 vulnerabilities, including RCE via the RESTORE command (CVSS 7.7). Secure your self-managed Redis instances immediately!
19 views
Daily Writeups
⤷ Title: I Built a Single Nmap Script That Replaces 8 Pentesting Tools — Meet Reko
════════════════════════
𐀪 Author: NullyBlissful
════════════════════════
ⴵ Time: Tue, 12 May 2026 06:56:34 GMT
════════════════════════
⌗ Tags: #lua #cybersecurity #pentesting #nmap #bug_bounty
Medium
I Built a Single Nmap Script That Replaces 8 Pentesting Tools — Meet Reko
One command. 29 services. Prioritised findings. CTF-ready.
24 views
Daily Writeups
⤷ Title: Predating Stuxnet: How the “fast16” Malware Secretly Sabotaged Nuclear Weapons Simulations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:04:53 +0000
════════════════════════
⌗ Tags: #Malware #AUTODYN #Cyber Sabotage #Equation Group #fast16 #infosec #LS_DYNA #Lua Virtual Machine #Nuclear Weapon Design #Stuxnet #Symantec Threat Hunter #Uranium Compression
Daily CyberSecurity
Predating Stuxnet: How the "fast16" Malware Secretly Sabotaged Nuclear Weapons Simulations
Symantec exposes fast16, a 2005 cyber-sabotage framework designed to inject an in-memory Lua engine and corrupt uranium-compression weapons simulations.
15 views
Daily Writeups
⤷ Title: TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 12:30:07 +0000
════════════════════════
⌗ Tags: #Malware #Agent Tesla #Donut Shellcode #FortiGuard Labs #Lua Loader #phishing #Remcos #Snake Keylogger #TTF Trap #XWorm
Daily CyberSecurity
TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files
A global phishing campaign hides a low-detection Lua loader inside fake .ttf font files to drop Remcos, XWorm, Agent Tesla, and a Snake Keylogger. #LuaLoader #TTFTrap #Phishing #FortiGuard #Remcos…
17 views