Daily Writeups
@Daily_Writeups
3.88K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.88K subscribers
Daily Writeups
⤷ Title: Infostealers Are Selling Your Claude and ChatGPT Sessions for $5 on Telegram
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 22:08:52 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ai_agent #ai_security #infosec #cybersecurity
Medium
Infostealers Are Selling Your Claude and ChatGPT Sessions for $5 on Telegram
Your password is not the prize anymore. Your active AI session is.
35 views
Daily Writeups
⤷ Title: Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 01:54:55 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #Cisco ISE #Exploited Vulnerabilities #Linux Kernel #threat intelligence #vulnerability management #Weekly CVE Report #wordpress security
Daily CyberSecurity
Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs
The week in numbers CVE WATCHTOWER logged 4,378 new vulnerabilities between September 14 and September 20, 2026. This weekly CVE report focuses on the flaws that matter most: the ones with confirm…
35 views
Daily Writeups
⤷ Title: Critical MongoDB Driver Vulnerabilities Require Immediate Patching
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 01:15:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE #cybersecurity #mongodb #Vulnerability
Daily CyberSecurity
Critical MongoDB Driver Vulnerabilities Require Immediate Patching
TL;DR Security researchers disclosed 14 vulnerabilities across three major MongoDB integration libraries. These MongoDB driver vulnerabilities threaten data integrity and system availability. User…
28 views
Daily Writeups
⤷ Title: Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 01:00:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Coding Agent #AI supply chain #Claude Code #Gemini CLI #Plugin4Shell #SHA pinning #Zero_Click RCE
Daily CyberSecurity
Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents
TL;DR AIR Security disclosed Plugin4Shell, a zero-click remote code execution flaw in four AI coding agents. The bug defeats SHA pinning, the check meant to lock a plugin to reviewed code. Claude …
36 views
Daily Writeups
⤷ Title: WordPress Click2Shell Vulnerability Triggers Core RCE, PoC Published
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 00:35:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Click2Shell #cybersecurity #Remote Code Execution #Vulnerability #wordpress
Daily CyberSecurity
WordPress Click2Shell Vulnerability Triggers Core RCE, PoC Published
TL;DR Security researchers uncovered a critical remote code execution chain in WordPress Core dubbed Click2Shell. The WordPress Click2Shell vulnerability allows an unauthenticated attacker to forc…
31 views
Daily Writeups
⤷ Title: Exim 4.100.1 Patches Four Security Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 00:34:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_94054 #CVE_2026_94056 #CVE_2026_94057 #Exim #Exim Vulnerability #Mail Server Security #PROXY Protocol #SMTP Smuggling
Daily CyberSecurity
Exim 4.100.1 Patches Four Security Vulnerabilities
TL;DR Exim shipped version 4.100.1 on September 18, 2026. It fixes four flaws, including two high-severity Proxy Protocol bugs, a GnuTLS use-after-free, and SMTP smuggling. Three of the four have …
36 views
Daily Writeups
⤷ Title: OpenAI Data Scraping Sparks Labor Theft Concerns
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 03:30:21 +0000
════════════════════════
⌗ Tags: #Technology #copyright #Microsoft #OpenAI
Daily CyberSecurity
OpenAI Data Scraping Sparks Labor Theft Concerns
A recent New York Times report reveals Microsoft’s deep concerns regarding OpenAI harvesting content for AI training. Microsoft executives describe OpenAI data scraping as the largest labor …
32 views
Daily Writeups
⤷ Title: FomoPeek App Hides an iOS Kernel Exploit to Steal Crypto
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 03:10:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Crypto theft #DarkSword #FomoPeek #iOS security #private key #SlowMist
Daily CyberSecurity
FomoPeek App Hides an iOS Kernel Exploit to Steal Crypto
According to a disclosure from the security firm SlowMist, the company recently received multiple reports of users’ assets being stolen. Its investigation found that the affected cases invol…
27 views
Daily Writeups
⤷ Title: Master the Windows 11 Cloud Recovery Feature
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 02:59:48 +0000
════════════════════════
⌗ Tags: #Windows #Cloud Recovery #System Restore #Windows 11
Daily CyberSecurity
Master the Windows 11 Cloud Recovery Feature
Cloud recovery represents a powerful new feature that Microsoft recently integrated into Windows 11. This tool utilizes the Windows Recovery Environment (WinRE). It connects to the internet to dow…
23 views
Daily Writeups
⤷ Title: EU Kids Act Would Ban Social Media for Under-13s
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 02:53:27 +0000
════════════════════════
⌗ Tags: #Technology #Age Verification #Child Safety #EU Kids Act #European Union #privacy #Social Media
Daily CyberSecurity
EU Kids Act Would Ban Social Media for Under-13s
According to a report from Thomson Reuters, the European Commission has recently proposed prohibiting any child under 13 from using social media. Meanwhile, adolescents under 15 could use accounts…
20 views
Daily Writeups
⤷ Title: Critical IBM Guardium Vulnerabilities Need Immediate Patching
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 02:23:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_82340 #cybersecurity #Data Protection #IBM Guardium #Vulnerability
Daily CyberSecurity
Critical IBM Guardium Vulnerabilities Need Immediate Patching
TL;DR Security researchers recently uncovered over 20 critical IBM Guardium vulnerabilities impacting data protection systems. These flaws allow remote attackers to execute arbitrary code or injec…
18 views
Daily Writeups
⤷ Title: The “Hackerman” Joke That Taught Me a Real Security Trick 2026
════════════════════════
𐀪 Author: Imran Niaz
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 03:50:24 GMT
════════════════════════
⌗ Tags: #life_lessons #bug_bounty #hackerone #api_testing #passive_income
Medium
The “Hackerman” Joke That Taught Me a Real Security Trick 2026
“No hacker launches into space with their fingers crossed.
20 views
Daily Writeups
⤷ Title: JetBrains Plugin Security: How a Malicious IDE Plugin Could Spy on You (Part 3)
════════════════════════
𐀪 Author: jayaram krishna kumar
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 02:49:53 GMT
════════════════════════
⌗ Tags: #security #malware #information_security #offensive_security #application_security
Medium
JetBrains Plugin Security: How a Malicious IDE Plugin Could Spy on You (Part 3)
🛡️ Defending Against Malicious IDE Plugins (Detection & Lessons Learned)
20 views
Daily Writeups
⤷ Title: TryHackMe-Frankesqwen Lab
════════════════════════
𐀪 Author: oiho
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 02:16:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #tryhackme #ai #tryhackme_walkthrough
Medium
TryHackMe-Frankesqwen Lab
This article documents the complete process of solving the FrankesQwen AI Security Lab in an authorized TryHackMe environment.
30 views
Daily Writeups
⤷ Title: SQL Injection: How It Works and How to Prevent It
════════════════════════
𐀪 Author: CDNetworks
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 02:41:01 GMT
════════════════════════
⌗ Tags: #waf #sql_injection #cyberattack #cybersecurity
Medium
SQL Injection: How It Works and How to Prevent It
SQL injection (SQLi) remains a common application security risk because of a simple but dangerous mistake: treating untrusted input as part…
35 views
Daily Writeups
⤷ Title: Google Undercover Analyst Infiltrates Hacking Gang
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 04:01:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Google Security #Mandiant
Daily CyberSecurity
Google Undercover Analyst Infiltrates Hacking Gang
The Google Threat Intelligence team recently disclosed at a security conference that a security researcher from its subsidiary, Mandiant, successfully infiltrated the core chat group of the TeamPC…
30 views
Daily Writeups
⤷ Title: Crack the Gate 2 - picoCTF Write-up | Bypassing Rate Limiting with X-Forwarded-For
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 05:44:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #burpsuite #cybersecurity #ctf #web_security
Medium
Crack the Gate 2 - picoCTF Write-up | Bypassing Rate Limiting with X-Forwarded-For
Introduction
30 views
Daily Writeups
⤷ Title: BAC: Unauthorized Email Sending.
════════════════════════
𐀪 Author: Saad
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 05:04:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #bug_bounty_writeup
Medium
BAC: Unauthorized Email Sending.
Date: 9/21/2026
28 views
Daily Writeups
⤷ Title: My Journey into Cybersecurity
════════════════════════
𐀪 Author: Saad
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 04:33:11 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cybersecurity
Medium
My Journey into Cybersecurity
Date: 9/20/2026
38 views
Daily Writeups
⤷ Title: Miscellaneous File Transfer Methods — A Practitioner’s Reference
════════════════════════
𐀪 Author: Gabriel D. Vincent
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 04:21:01 GMT
════════════════════════
⌗ Tags: #infosec #pentesting #ethical_hacking #windows #cybersecurity
Medium
Miscellaneous File Transfer Methods — A Practitioner’s Reference
When HTTP, HTTPS, SMB, and standard tools are unavailable, these methods cover the gaps. Netcat, Ncat, PowerShell Remoting, RDP folder…
46 views
Daily Writeups
⤷ Title: Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 11:36:44 +0530
════════════════════════
⌗ Tags: No_Tags
38 views