Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Lab 1: OS Command Injection — PortSwigger Web Security Academy Walkthrough (Part 1 of 5)
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 13:19:57 GMT
════════════════════════
⌗ Tags: #pentesting #ethical_hacking #bug_bounty #cybersecurity #os_command_injection
Medium
Lab 1: OS Command Injection — PortSwigger Web Security Academy Walkthrough (Part 1 of 5)
Starting the Command Injection series: how unsanitized shell input leads to direct, visible Remote Code Execution — a beginner-friendly…
16 views
Daily Writeups
⤷ Title: Lab 3: Blind OS Command Injection with Output Redirection — PortSwigger Web Security Academy…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 10:26:41 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #os_command_injection #ethical_hacking #cybersecurity
Medium
Lab 3: Blind OS Command Injection with Output Redirection — PortSwigger Web Security Academy Walkthrough (Part 3 of 5)
Turning a silent vulnerability into a readable one: how redirecting command output into a public directory lets you read RCE results…
10 views
Daily Writeups
⤷ Title: Lab 2: Blind OS Command Injection with Time Delays — PortSwigger Web Security Academy Walkthrough…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 10:18:51 GMT
════════════════════════
⌗ Tags: #os_command_injection #cybersecurity #bug_bounty #pentesting #ethical_hacking
Medium
Lab 2: Blind OS Command Injection with Time Delays — PortSwigger Web Security Academy Walkthrough (Part 2 of 5)
When the server stays silent: how to prove Remote Code Execution using nothing but a stopwatch and the Linux sleep command.
10 views
Daily Writeups
⤷ Title: Lab 5: Blind OS Command Injection with Out-of-Band Data Exfiltration — PortSwigger Web Security…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 14:03:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #os_command_injection #portswigger_lab #bug_bounty #cybersecurity
Medium
Lab 5: Blind OS Command Injection with Out-of-Band Data Exfiltration — PortSwigger Web Security Academy Walkthrough (Part 5 of…
The grand finale: smuggling command output inside a DNS query to steal data from a completely silent, fully blind vulnerability.
19 views
Daily Writeups
⤷ Title: Blind OS Command Injection with Time Delays
════════════════════════
𐀪 Author: Ethical Hacker
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 12:19:57 GMT
════════════════════════
⌗ Tags: #bug_bounty #os_command_injection #application_security #blind_command_injection #web_security
Medium
Blind OS Command Injection with Time Delays
Professional write-up and technical documentation for the “Blind OS Command Injection with Time Delays” lab from PortSwigger Web Security…
16 views
Daily Writeups
⤷ Title: How I Found an OS Command Injection (RCE) in Coolify
════════════════════════
𐀪 Author: CyberTechAjju
════════════════════════
ⴵ Time: Sat, 11 Jul 2026 08:22:27 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #bug_bounty #os_command_injection #cve #hacker
Medium
How I Found an OS Command Injection in Coolify
How I Found an OS Command Injection in Coolify A health check that was anything but healthy. Hey everyone, CyberTechAjju here. 👋 So, I got my second CVE — and this time it’s a Remote Code …
20 views
Daily Writeups
⤷ Title: Dell PowerFlex Manager Flaw CVE-2026-56688 Allows Root Command Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 12:38:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_56688 #dell #Dell PowerFlex #os command injection #PowerFlex Manager #rce
Daily CyberSecurity
Dell PowerFlex Manager Flaw CVE-2026-56688 Allows Root Command Execution
TL;DR Dell has patched a batch of flaws in PowerFlex Manager. The most severe, CVE-2026-56688, enables PowerFlex command execution as root. It carries a CVSS score of 9.1. So far, no public exploi…
7 views
Daily Writeups
⤷ Title: CVE-2026-16812: VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 15:26:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arista #CVE_2026_16812 #CVE_2026_17191 #CVE_2026_17192 #exploited in the wild #os command injection #ssrf #VCO #VeloCloud #VeloCloud Orchestrator
Daily CyberSecurity
CVE-2026-16812: VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild
TL;DR: Arista confirmed that CVE-2026-16812, a VeloCloud command injection flaw, is under active attack. The bug scores a maximum CVSS 10.0 and needs no credentials. Arista also patched two relate…
10 views
Daily Writeups
⤷ Title: CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 21:52:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arista #CISA KEV #CVE_2025_68686 #CVE_2026_16812 #Fortinet #FortiOS #Known Exploited Vulnerabilities #os command injection #SSL VPN #VeloCloud Orchestrator
Daily CyberSecurity
CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited
TL;DR: On July 27, 2026, CISA made two KEV additions. Both are known exploited vulnerabilities. One is a critical Arista VeloCloud RCE, while the other is a FortiOS persistence bypass. Why These C…
18 views
Daily Writeups
⤷ Title: Progress Patches Five Kemp LoadMaster Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 02:12:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADC Security #CVE_2026_59686 #CVE_2026_59687 #CVE_2026_59688 #CVE_2026_59689 #CVE_2026_59690 #Kemp LoadMaster #LoadMaster vulnerabilities #os command injection #privilege escalation #Progress Kemp LoadMaster
Daily CyberSecurity
Progress Patches Five Kemp LoadMaster Vulnerabilities
TL;DR Progress fixed five Kemp LoadMaster vulnerabilities in a July 2026 bulletin. Three allow OS command injection, and two allow privilege escalation. Each one can lead to full system compromise…
12 views
Daily Writeups
⤷ Title: One Semicolon. Root Access. No Password.
════════════════════════
𐀪 Author: Nilanjan Chowdhury
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 20:05:03 GMT
════════════════════════
⌗ Tags: #command_injection #ethical_hacking #os_security #cybersecurity #os_command_injection
Medium
One Semicolon. Root Access. No Password.
Author: Nilanjan Chowdhury
37 views