Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: EspoCRM v9.3.4: From Extension Upload to Remote Code Execution (RCE)
════════════════════════
𐀪 Author: Ali İltizar
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:28:55 GMT
════════════════════════
⌗ Tags: #cms #rce
Medium
EspoCRM v9.3.4: From Extension Upload to Remote Code Execution (RCE)
In this article, I will detail an Authenticated Remote Code Execution (RCE) vulnerability I discovered in EspoCRM (<= v9.3.4). This flaw…
30 views
Daily Writeups
⤷ Title: Stored XSS to Privilege Escalation in Azuriom CMS — When “Trusted Users” Become a Security…
════════════════════════
𐀪 Author: CradS
════════════════════════
ⴵ Time: Fri, 01 May 2026 15:14:40 GMT
════════════════════════
⌗ Tags: #cms #cybersecurity #penetration_testing #appsec #cross_site_scripting
Medium
Stored XSS to Privilege Escalation in Azuriom CMS — When “Trusted Users” Become a Security Assumption
During a recent review of the Azuriom CMS, I identified a behavior involving SVG file uploads that can lead to privilege escalation through…
23 views
Daily Writeups
⤷ Title: Zero-Day Surge: The MetInfo CMS Flaw That Grants Unauthenticated Root Access to Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:24:08 +0000
════════════════════════
⌗ Tags: #Vulnerability #Automated Scanning #China Cyber Security #CMS Security #CVE_2026_29014 #Cyber attack 2026 #MetInfo #PHP Code Injection #RCE #remote code execution #VulnCheck #zero_day
Penetration Testing Tools
Zero-Day Surge: The MetInfo CMS Flaw That Grants Unauthenticated Root Access to Servers
A zero-day vulnerability residing within the Chinese content management system MetInfo has entered a phase of active exploitation
6 views
Daily Writeups
⤷ Title: Critical Strapi Flaws Enable Unauthenticated Admin Takeover and Server RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 02:02:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Takeover #cms #CVE_2026_22599 #CVE_2026_27886 #Cyber Security #Headless CMS #infosec #Patch Alert #rce #sql injection #Strapi
Daily CyberSecurity
Critical Strapi Flaws Enable Unauthenticated Admin Takeover and Server RCE
Two critical flaws in Strapi CMS (CVE-2026-27886 & CVE-2026-22599) allow unauthenticated admin takeover and SQL injection. Update your nodes now!
21 views
Daily Writeups
⤷ Title: What Businesses Should Know Before Migrating Their CMS
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 15:42:16 +0000
════════════════════════
⌗ Tags: #Technology #Business #CMS #Migrating
Hackread
What Businesses Should Know Before Migrating Their CMS
Plan your CMS migration with clean content audits, SEO safeguards, tested data transfer, integrations, staff training, and a safe launch rollback plan with care.
17 views
Daily Writeups
⤷ Title: TryHackme — Lazy Admin Writeup
════════════════════════
𐀪 Author: Fakhri Rahadi
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 05:40:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #ctf #web_penetration_testing #cms
Medium
TryHackme — Lazy Admin Writeup
From Directory Listing to Root Privilege
30 views
Daily Writeups
⤷ Title: Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 00:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic portlet #CMS Security #CVE_2026_57149 #Plone #Plone RCE vulnerability #plone.app.portlets #ssrf #TALES injection
Daily CyberSecurity
Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs
TL;DR Plone patched three critical flaws across two add-on packages. The worst is a Plone RCE vulnerability scoring 9.9 on CVSS. Two more bugs enable denial of service, SSRF, and stored XSS. Why I…
17 views
Daily Writeups
⤷ Title: CMS Exploitation Campaign Plants Webshells on Business Websites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:50:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ACSC #CMS Exploitation #CMS Vulnerabilities #Web Security #webshell #wordpress
Daily CyberSecurity
CMS Exploitation Campaign Plants Webshells on Business Websites
At a glance Actor / group Unattributed malicious cyber actors Activity Mass exploitation of CMS flaws to deploy webshells Targets / victims WordPress and other CMS sites; many Australian SMBs Scal…
11 views
Daily Writeups
⤷ Title: ACSC Warns: CMS Campaign Installs Web Shells via 17 CVEs
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 15:30:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ACSC Advisory #CMS Security #Craft CMS #joomla #Mass Exploitation #Web Shell #WordPress Vulnerability
Information Security News
ACSC Warns: CMS Campaign Installs Web Shells via 17 CVEs
Attackers are compromising websites at scale and installing hidden tools on servers to maintain remote control. The campaign has hit numerous small and medium-sized organizations in Australia. How…
34 views
Daily Writeups
⤷ Title: Back From Vacation & Launching Open Beta: Help Us Test NextBlock CMS (and Get a $500/yr Lifetime…
════════════════════════
𐀪 Author: NextBlock CMS
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 19:19:21 GMT
════════════════════════
⌗ Tags: #cms #supabase #bug_bounty #nextjs #bounty_program
Medium
Back From Vacation & Launching Open Beta: Help Us Test NextBlock CMS (and Get a $500/yr Lifetime…
We’re opening the doors to our Next.js 16 + Supabase full-stack CMS and giving away lifetime premium licenses to everyone who helps us…
24 views