Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: AI just uncovered critical security flaws that stayed hidden in PHP for over a decade.
════════════════════════
𐀪 Author: Abdullah Ahmad
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 18:42:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #php #ai #hacking
Medium
AI just uncovered critical security flaws that stayed hidden in PHP for over a decade.
Just 3 days ago, on October 21, researchers disclosed two critical vulnerabilities in PHP, a programming language used by millions of…
❤1
19 views
Daily Writeups
⤷ Title: Inside Recent Cybersecurity Vulnerabilities: How the Attacks Work
════════════════════════
𐀪 Author: Persis Tafflin
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 18:15:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability #penetration_testing #networking #hacking
Medium
Inside Recent Cybersecurity Vulnerabilities: How the Attacks Work
Modern applications rely on programming languages, network protocols, and digital certificates. A small implementation mistake in any of…
14 views
Daily Writeups
⤷ Title: Capcom Reset 196 Passwords After a Breach Touching 11.7 Million Accounts
════════════════════════
𐀪 Author: Prashant Thakur
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 18:13:51 GMT
════════════════════════
⌗ Tags: #software_development #hacking #tech #technology #cybersecurity
Medium
Capcom Reset 196 Passwords After a Breach Touching 11.7 Million Accounts
Capcom says records tied to 11,774,247 accounts on its CAPCOM ID service were exposed, with users affected worldwide.
26 views
Daily Writeups
⤷ Title: When Trust Fails: What the eMudhra Certificate Incident and PHP Vulnerabilities Teach Us About Zero…
════════════════════════
𐀪 Author: Ramesh Aithagoina Aka Aira
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 16:58:52 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #vulnerability #hacking #java #security
Medium
When Trust Fails: What the eMudhra Certificate Incident and PHP Vulnerabilities Teach Us About Zero Trust Security
Two security developments in October 2026 expose a critical lesson for every software engineer: securing an application is not just about…
25 views
Daily Writeups
⤷ Title: >> Rate Limiting vs. Account Lockout: Two Security Controls Every VAPT Beginner Should Understand
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 18:06:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing
Medium
>> Rate Limiting vs. Account Lockout: Two Security Controls Every VAPT Beginner Should Understand
When we think about securing a web application’s login page, we often focus on strong passwords, multi-factor authentication, and…
❤1
35 views
Daily Writeups
⤷ Title: From a Dropdown Menu to 3.8 Million Records: Blind SQL Injection on a Multi-Tenant SaaS Platform
════════════════════════
𐀪 Author: zNull
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 17:10:49 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #cybersecurity #saas #sql_injection
Medium
From a Dropdown Menu to 3.8 Million Records: Blind SQL Injection on a Multi-Tenant SaaS Platform
How a single unquoted integer in an AJAX handler gave me MySQL root on 12 servers, 131 databases, and nearly 4 million records of personal…
❤1
42 views
Daily Writeups
⤷ Title: The Brotli Bug CVE-2026-111497, Explained
════════════════════════
𐀪 Author: SAHIL SHARMA
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:09:11 GMT
════════════════════════
⌗ Tags: #web_development #nodejs #cybersecurity #application_security #programming
Medium
The Brotli Bug CVE-2026-111497, Explained
How an invalid block switch led to memory corruption, and what the patch changes.
32 views
Daily Writeups
⤷ Title: PHP’s Memory Bugs, Explained
════════════════════════
𐀪 Author: SAHIL SHARMA
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:07:26 GMT
════════════════════════
⌗ Tags: #php #web_development #application_security #programming #cybersecurity
Medium
PHP’s Memory Bugs, Explained
Two memory bugs, the fixes, and what developers should update.
23 views
Daily Writeups
⤷ Title: Authentication & Authorization Eğitim Serisi — Bölüm 16: ABAC — Attribute-Based Access Control
════════════════════════
𐀪 Author: Sahin Yelkenci
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:45:40 GMT
════════════════════════
⌗ Tags: #application_security #spring_security #access_control #authorization #attribute_based_access
Medium
Authentication & Authorization Eğitim Serisi — Bölüm 16: ABAC — Attribute-Based Access Control
Modül V — Authorization Modelleri
29 views
Daily Writeups
⤷ Title: 48 Hours of Hacks: AI Agents, Stolen Keys, and a PHP Scare
════════════════════════
𐀪 Author: Varun Chopra
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:25:33 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #technology #cybersecurity #hacking #programming
Medium
48 Hours of Hacks: AI Agents, Stolen Keys, and a PHP Scare
Between October 21 and 23, 2026, a Chinese state-linked group used AI agents to work through a supply-chain breach at machine speed, a…
19 views
Daily Writeups
⤷ Title: PHP2Shell: Understanding the Memory Corruption Behind CVE-2026–109618 and CVE-2026–109619
════════════════════════
𐀪 Author: Abhishek Adhikari
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:02:18 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #php #zero_day_vulnerability #hacking
Medium
PHP2Shell: Understanding the Memory Corruption Behind CVE-2026–109618 and CVE-2026–109619
PHP2Shell is a vulnerability chain in PHP where an out-of-memory bailout can leave behind corrupted request state. Under the right server…
17 views
Daily Writeups
⤷ Title: PHP & Railway Security Crisis: The Internet Is Under Attack!
════════════════════════
𐀪 Author: Beyond Tahir
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:00:02 GMT
════════════════════════
⌗ Tags: #beyond_tahir #railways #bta #php #hacking
Medium
PHP & Railway Security Crisis: The Internet Is Under Attack!
The internet is facing a serious security threat, and I think we are underestimating how dangerous this could become.
16 views
Daily Writeups
⤷ Title: The Super-Productivity Paradox of AI
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:22:44 GMT
════════════════════════
⌗ Tags: #cyberattack #cybersecurity #artificial_intelligence #ai #hacking
Medium
The Super-Productivity Paradox of AI
When an MCP Server Is Breached, a Company’s Digital Brain Is at Risk
15 views
Daily Writeups
⤷ Title: Four Hours To Intercept HTTPS Traffic from an Android App: A Journey Through Certificate Trust…
════════════════════════
𐀪 Author: Yahia Ibrahim khamis
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:51:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #ssl_pinning_bypass #penetration_testing #mobile_pentesting #mobile_security
Medium
Four Hours To Intercept HTTPS Traffic from an Android App: A Journey Through Certificate Trust, Split APKs, and Signing Issues
قال الله تعالى: ﴿وَقُل رَّبِّ زِدْنِي عِلْمًا﴾ (سورة طه، الآية 114)
17 views
Daily Writeups
⤷ Title: AI Hackers Go Regional: ARTEX in Japan, and Can AI Plan an Attack on a Factory?
════════════════════════
𐀪 Author: Wartelski.
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ai_agent #ics_security #ai
Medium
AI Hackers Go Regional: ARTEX in Japan, and Can AI Plan an Attack on a Factory?
An open-source AI pentesting tool shows up behind attacks on Japanese companies, and a new study measures how well AI can plan attacks on…
35 views
Daily Writeups
⤷ Title: Handbook for the Recently Compromised — Log Analysis
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:16:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #log_analysis #tryhackme #windows_forensics #tryhackme_walkthrough
Medium
Handbook for the Recently Compromised — Log Analysis
Trace an intrusion through Windows event logs and uncover what happened on the workstation.
24 views
Daily Writeups
⤷ Title: IronShade
════════════════════════
𐀪 Author: Wynn
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:03:55 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #ctf #linux #ctf_writeup
Medium
IronShade
Access Room: https://tryhackme.com/room/ironshade
26 views
Daily Writeups
⤷ Title: After Hours | Hacker Holidays Day 12 | TryHackMe Writeup
════════════════════════
𐀪 Author: Debmalya Mondal
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:04:01 GMT
════════════════════════
⌗ Tags: #tryhackme #windows_persistence #tryhackme_walkthrough #reverse_engineering #tryhackme_writeup
Medium
After Hours | Hacker Holidays Day 12 | TryHackMe Writeup
WMI Persistence Investigation by Analyzing the Windows WMI Repository and Decoding a .NET payload
31 views
Daily Writeups
⤷ Title: Cracking CVE-2026-109618: OffSec Lab Walkthrough to RCE via PHP 8.4.26
════════════════════════
𐀪 Author: Cyril Shaji
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:26:22 GMT
════════════════════════
⌗ Tags: #offsec #cve_2026_109618 #php2shell #ethical_hacking #remote_code_execution
Medium
Cracking CVE-2026-109618: OffSec Lab Walkthrough to RCE via PHP 8.4.26
Remote Code Execution (RCE) vulnerabilities in core programming language runtimes are rare gems. When CVE-2026-109618 dropped, it…
38 views
Daily Writeups
⤷ Title: API Security in Layers: Why Signature Filtering Misses BOLA
════════════════════════
𐀪 Author: Kazem Mortazavi
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 20:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #devsecops #web_application_security #information_security #api_security
Medium
API Security in Layers: Why Signature Filtering Misses BOLA
Picture an organization with a WAF, a valid TLS certificate and a yearly penetration test that still finds its customer data on a public…
41 views
Daily Writeups
⤷ Title: BeyondTrust CVE-2026–102764: A Critical Remote Support Vulnerability Under Active Exploitation
════════════════════════
𐀪 Author: Muhammad Raheem
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 21:44:17 GMT
════════════════════════
⌗ Tags: #infosec #zero_day #vulnerability #cyber_threat_intelligence #cybersecurity
Medium
BeyondTrust CVE-2026–102764: A Critical Remote Support Vulnerability Under Active Exploitation
Why security teams should prioritize patching remote-support appliances and investigating suspicious file activity
27 views