Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CVE-2026-59948: PHP Composer Flaw Lets Packages Execute Code Outside the Project Context
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 13:30:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #CVE_2026_59946 #CVE_2026_59947 #CVE_2026_59948 #Path Traversal #PHP Composer #Supply Chain
Daily CyberSecurity
CVE-2026-59948: PHP Composer Flaw Lets Packages Execute Code Outside the Project Context
TL;DR PHP Composer, the main dependency manager for the language, patched three security flaws. The most serious, CVE-2026-59948, is an arbitrary file write rated CVSS 7.0. A malicious package can…
8 views
Daily Writeups
⤷ Title: Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 08:30:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #APT #Arbitrary Code Execution #Canonical #CVE_2026_11386 #Root Privileges #Ubuntu #Ubuntu Pro Client #ubuntu_advantage_tools #USN_8555_1
Daily CyberSecurity
Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges
TL;DR Canonical shipped fixes for CVE-2026-11386 in USN-8555-1 on July 16, 2026. This Ubuntu Pro Client vulnerability scores CVSS 9.0 and can end in arbitrary code execution with root privileges. …
37 views
Daily Writeups
⤷ Title: CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:25:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache OpenMeetings #Arbitrary File Read #Path Traversal
Daily CyberSecurity
CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
TL;DR Apache has patched a critical OpenMeetings vulnerability tracked as CVE-2026-49488. The path traversal flaw grants arbitrary file read to any user with moderator rights in a room. Version 9.…
17 views
Daily Writeups
⤷ Title: Vitest Flaw Rated CVSS 9.4 Hits an npm Package With 65 Million Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 02:12:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #GHSA_p63j_vcc4_9vmv #javascript #npm #Path Traversal #Supply Chain Security #Vite #Vitest #Vitest Browser Mode
Daily CyberSecurity
Vitest Flaw Rated CVSS 9.4 Hits an npm Package With 65 Million Weekly Downloads
TL;DR Vitest patched a critical vulnerability rated CVSS 9.4. Browser Mode commands could read, write, or delete files outside the project folder. They did so even when the allowWrite gate was set…
10 views
Daily Writeups
⤷ Title: Mobile AI Assistant Vulnerabilities Expose Security Flaws
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 13:11:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Assistant #arbitrary code execution #Machine Vision Exploit #mobile security #Smartphone Vulnerability
Information Security News
Mobile AI Assistant Vulnerabilities Expose Security Flaws
The Emergence of a New Attack Vector Mobile artificial intelligence assistants, designed to operate smartphones autonomously, represent a novel tool for cyberattacks. Specialists have demonstrated…
16 views
Daily Writeups
⤷ Title: JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:22:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_64812 #CVE_2026_64813 #CVE_2026_65907 #IntelliJ IDEA #JetBrains #JetBrains vulnerabilities #TeamCity
Daily CyberSecurity
JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development
TL;DR JetBrains fixed 18 vulnerabilities across GoLand, IntelliJ IDEA, PhpStorm, PyCharm, TeamCity, and WebStorm. Two IntelliJ IDEA flaws in Remote Development sessions carry a maximum CVSS score …
13 views
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
21 views
Daily Writeups
⤷ Title: Rails Active Storage Flaw CVE-2026-66066 Enables Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 03:01:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Storage #Arbitrary File Read #CVE_2026_66066 #libvips #Remote Code Execution #ruby on rails
Daily CyberSecurity
Rails Active Storage Flaw CVE-2026-66066 Enables Remote Code Execution
TL;DR Ruby on Rails has patched a critical Rails Active Storage flaw. Tracked as CVE-2026-66066 and rated 9.5 CVSS, it lets an unauthenticated attacker read arbitrary files from the server. Stolen…
7 views
Daily Writeups
⤷ Title: Adobe Campaign Classic CVE-2026-48449 Enables Code Execution at CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 02:41:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe #Adobe Campaign Classic #Arbitrary Code Execution #CVE_2026_48448 #CVE_2026_48449 #rce
Daily CyberSecurity
Adobe Campaign Classic CVE-2026-48449 Enables Code Execution at CVSS 10.0
TL;DR Adobe patched two critical flaws in Adobe Campaign Classic on July 29, 2026. The worst, CVE-2026-48449, scores a perfect CVSS 10.0 and allows arbitrary code execution. A second bug, CVE-2026…
8 views
Daily Writeups
⤷ Title: CVE-2026-66066: Rails Active Storage RCE Exploit Code Now Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 10:17:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Storage #Arbitrary File Read #CVE_2026_66066 #KindaRails2Shell #libvips #metasploit #Remote Code Execution #ruby on rails
Daily CyberSecurity
CVE-2026-66066: Rails Active Storage RCE Exploit Code Now Public
TL;DR: A critical Rails Active Storage RCE flaw, CVE-2026-66066 (CVSS 9.5), lets an unauthenticated attacker read server files and potentially run code through crafted image uploads. A public Meta…
17 views
Daily Writeups
⤷ Title: Adobe Campaign Classic CVE-2026-48331 Scores CVSS 10.0 for Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 02:21:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe #Adobe Campaign Classic #Arbitrary Code Execution #CVE_2026_48331 #patch #sql injection #ssrf #Vulnerability
Daily CyberSecurity
Adobe Campaign Classic CVE-2026-48331 Scores CVSS 10.0 for Arbitrary Code Execution
TL;DR Adobe published a Priority 1 security update for Adobe Campaign Classic. The patch resolves seven severe flaws, including three bugs with a CVSS score of 10.0. Consequently, attackers can ex…
7 views
Daily Writeups
⤷ Title: Gitea Vulnerability CVE-2026-59774 Enables Unauthenticated Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 07:53:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CVE_2026_59774 #Gitea #Path Traversal #rce #Remote Code Execution #Vulnerability
Daily CyberSecurity
Gitea Vulnerability CVE-2026-59774 Enables Unauthenticated Remote Code Execution
TL;DR Gitea 1.27.1 patches a critical Gitea vulnerability, CVE-2026-59774, rated CVSS 9.8. An unauthenticated attacker can read arbitrary server files through a public repository, then escalate to…
10 views
Daily Writeups
⤷ Title: IBM Patches Three CVSS 9.8 Flaws, Including CVE-2026-12943 Command Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 13:45:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Command Execution #CVE_2026_12118 #CVE_2026_12943 #CVE_2026_15435 #IBM #IBM App Connect Enterprise #Power HMC #rce #webMethods Integration
Daily CyberSecurity
IBM Patches Three CVSS 9.8 Flaws, Including CVE-2026-12943 Command Execution
TL;DR IBM has disclosed three critical vulnerabilities across three products, each rated CVSS 9.8. The flaws affect App Connect Enterprise, Power HMC, and webMethods Integration. Two of them let a…
12 views
Daily Writeups
⤷ Title: CVE-2026-71319: Nuxt DevTools Flaw With 7.3 Million Monthly Downloads Allows Arbitrary Command Execution, CVSS 9.6
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 13:18:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Command Execution #CVE_2026_71319 #CVSS 9.6 #Nuxt #Nuxt DevTools #RPC #Vue.js
Daily CyberSecurity
CVE-2026-71319: Nuxt DevTools Flaw With 7.3 Million Monthly Downloads Allows Arbitrary Command Execution, CVSS 9.6
TL;DR A critical Nuxt DevTools vulnerability lets an attacker run arbitrary commands on a developer’s machine. Tracked as CVE-2026-71319, it scores 9.6 on CVSS. The Nuxt package sees more th…
19 views