Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: 44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 02:04:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CISA KEV #CPanel #CVE_2026_41940 #CVSS 9.8 #cybersecurity #infosec #Mirai botnet #ransomware #Server Security #WebPros #WHM
Daily CyberSecurity
44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge
CISA warns of cPanel CVE-2026-41940 (CVSS 9.8). 44,000 IPs compromised via authentication bypass, fueling ransomware and botnets. Patch by May 3rd!
24 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 01:57:05 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #CPanel #CVE_2026_41940 #CVSS 10 #cybersecurity #Express.js #infosec #patch management #Vulnerability Digest #WHM
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)
Weekly Triage: 1,134 new vulnerabilities found, including a 9.8 critical bypass in cPanel/WHM and active Express.js logic flaws. Patch your systems now.
14 views
Daily Writeups
⤷ Title: cPanel RCE & Critical vulnerability in Gemini CLI
════════════════════════
𐀪 Author: Stanislav Klevtsov
════════════════════════
ⴵ Time: Tue, 05 May 2026 14:14:07 GMT
════════════════════════
⌗ Tags: #cpanel #gemini #infosec #ai #cybersecurity
Medium
cPanel RCE & Critical vulnerability in Gemini CLI
Let’s start with cPanel
11 views
Daily Writeups
⤷ Title: Root Access at Risk: Perl Injection and Symlink Flaws Hit cPanel & WHM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:00:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_29202 #CVE_2026_29203 #infosec #Linux Server #Patch Alert #Perl Injection #privilege escalation #Web Hosting Security #WHM #WP Squared
Daily CyberSecurity
Root Access at Risk: Perl Injection and Symlink Flaws Hit cPanel & WHM
Update cPanel immediately! High-severity vulnerabilities (CVSS 8.8) allow Perl injection and privilege escalation. Protect your hosting environment now.
15 views
Daily Writeups
⤷ Title: Critical cPanel Auth Bypass CVE-2026-41940 Exploited by Thousands
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 12:37:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CPanel #CVE_2026_41940 #Cyber Security #Data Breach #infosec #Linux Server #Mr_Rot13 #Patch Alert #WHM #wordpress security #XLab
Daily CyberSecurity
Critical cPanel Auth Bypass CVE-2026-41940 Exploited by Thousands
Urgent: cPanel & WHM hit by global 9.8 CVSS auth bypass. Over 2,000 IPs are actively hijacking servers for data theft and ransomware. Patch immediately!
14 views
Daily Writeups
⤷ Title: cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:22:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CPanel #CVE_2026_29205 #CVE_2026_29206 #Cyber Security #infosec #Patch Alert #Server Security #sql injection #WHM #WP Squared
Daily CyberSecurity
cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi
cPanel & WHM fix 5 critical vulnerabilities (CVE-2026-29205). Fixes for arbitrary file read, SQLi, and privilege escalation are now live. Update now!
19 views
Daily Writeups
⤷ Title: CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:46:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Execution Safety #cPanel Vulnerability #CVE_2026_48172 #Cyber Security #infosec #LiteSpeed Plugin #privilege escalation #redisAble Exploit #Root Server Access #Web Hosting Security #WHM Patch
Daily CyberSecurity
CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
Urgent: Active attacks target the LiteSpeed User-End cPanel Plugin (CVE-2026-48172). Learn how to detect the exploit and secure your server root today.
13 views
Daily Writeups
⤷ Title: Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:37:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #cpanel_jsonapi_func=redisAble log grep #CVE_2026_48172 root access #David Strydom security researcher #LiteSpeed cPanel plugin exploit #LiteSpeed WHM Plugin 5.3.1.0 update #lsws.redisAble logic error #remove LiteSpeed cPanel plugin #shared hosting privilege escalation #shared hosting sandbox escape #WebPros ecosystem defense
Information Security News
Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
Perimeter Compromise and Systemic Risk LiteSpeed recently resolved a critical privilege escalation vulnerability within its user-facing cPanel plugin. This severe security defect is tracked global…
12 views
Daily Writeups
⤷ Title: LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 00:00:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CageFS #CloudLinux #CPanel #CVE_2026_54420 #LiteSpeed #privilege escalation #Shared Hosting
Daily CyberSecurity
LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
CVE-2026-54420, a LiteSpeed cPanel privilege escalation flaw, is exploited in the wild to gain root on shared hosting. Patch to plugin v2.4.8 now.
12 views
Daily Writeups
⤷ Title: GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 02:29:19 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cPanel and WHM exploitation #Credential Theft #CVE_2026_41940 #GitHub Actions abuse #Packagist #supply chain attack
Daily CyberSecurity
GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign
At a Glance Actor or group Unattributed threat actor; no group name published Activity type GitHub Actions abuse, internet scanning, credential theft Targets Internet-facing cPanel and WHM servers…
18 views
Daily Writeups
⤷ Title: CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 01:01:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_58047 #CVE_2026_58048 #database security #http_request_smuggling #privilege escalation #Web Hosting Security #WHM
Daily CyberSecurity
CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
TL;DR: cPanel patched a cPanel root SQL execution flaw tracked as CVE-2026-58048, rated CVSS 9.4. A second, lower-severity bug, CVE-2026-58047, allows HTTP request smuggling under limited conditio…
24 views