Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: CVE-2026-0288: PAN-OS Buffer Overflow Can Execute Arbitrary Code
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 02:00:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #buffer overflow #CVE_2026_0288 #firewall security #Palo Alto Networks #PAN_OS #User_ID Terminal Server Agent
Daily CyberSecurity
CVE-2026-0288: PAN-OS Buffer Overflow Can Execute Arbitrary Code
TL;DR Palo Alto Networks disclosed a PAN-OS buffer overflow tracked as CVE-2026-0288. It sits in the User-ID Terminal Server Agent. An unauthenticated attacker on the network could crash the firew…
24 views
Daily Writeups
⤷ Title: HPLIP Vulnerability CVE-2026-14544 (CVSS 9.8) Allows Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 06:05:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_14544 #CVE_2026_8631 #CVE_2026_8632 #hpcups #HPLIP #HPLIP vulnerability #integer overflow #Linux printing
Daily CyberSecurity
HPLIP Vulnerability CVE-2026-14544 (CVSS 9.8) Allows Arbitrary Code Execution
TL;DR Red Hat disclosed a critical HPLIP vulnerability, tracked as CVE-2026-14544, with a CVSS score of 9.8. The flaw lets a remote attacker reach arbitrary code execution or privilege escalation …
18 views
Daily Writeups
⤷ Title: Feast Feature Server Flaw Lets Unauthenticated Attackers Write Files
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 13:33:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #CVE_2026_23537 #Feast #Feature Store #machine_learning #rce #unauthenticated
Daily CyberSecurity
Feast Feature Server Flaw Lets Unauthenticated Attackers Write Files
A critical flaw in the Feast Feature Server carries a CVSS score of 9.1. The bug, tracked as CVE-2026-23537, sits in the /save-document endpoint. It lets an unauthenticated attacker write arbitrar…
10 views
Daily Writeups
⤷ Title: OPNsense Root RCE Flaw CVE-2026-57155 (CVSS 9.9): Details and PoC Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 13:05:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #CVE_2026_57154 #CVE_2026_57155 #CVE_2026_58390 #firewall security #OPNsense #Root RCE #Stored XSS
Daily CyberSecurity
OPNsense Root RCE Flaw CVE-2026-57155 (CVSS 9.9): Details and PoC Publicly Disclosed
TL;DR A researcher from Hacking Cult published full technical details and proof-of-concept code for three OPNsense firewall flaws. The worst, CVE-2026-57155 (CVSS 9.9), escalates a low-privileged …
11 views
Daily Writeups
⤷ Title: Apache IoTDB Fixes Path Traversal and Authentication Bypass Flaws (CVE-2026-24014)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 11 Jul 2026 01:37:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache IoTDB #Arbitrary File Write #Authentication Bypass #CVE_2026_24012 #CVE_2026_24013 #CVE_2026_24014 #IoT security #Path Traversal
Daily CyberSecurity
Apache IoTDB Fixes Path Traversal and Authentication Bypass Flaws (CVE-2026-24014)
TL;DR Apache IoTDB has patched three flaws in its time-series database. The worst is a critical path traversal bug, CVE-2026-24014, scored 9.8. A second flaw allows an authentication bypass, and a…
24 views
Daily Writeups
⤷ Title: decompress npm Vulnerability CVE-2026-53486 (CVSS 9.1) Threatens 2.8 Million Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 13:00:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #CVE_2026_53486 #decompress #Node.js Security #npm Security #Path Traversal #Supply Chain Security
Daily CyberSecurity
decompress npm Vulnerability CVE-2026-53486 (CVSS 9.1) Threatens 2.8 Million Weekly Downloads
TL;DR A high-severity decompress npm vulnerability lets crafted archives write files outside the extraction folder. Tracked as CVE-2026-53486, the flaw carries a CVSS score of 9.1. It sits in a li…
40 views
Daily Writeups
⤷ Title: CVE-2026-59948: PHP Composer Flaw Lets Packages Execute Code Outside the Project Context
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 13:30:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #CVE_2026_59946 #CVE_2026_59947 #CVE_2026_59948 #Path Traversal #PHP Composer #Supply Chain
Daily CyberSecurity
CVE-2026-59948: PHP Composer Flaw Lets Packages Execute Code Outside the Project Context
TL;DR PHP Composer, the main dependency manager for the language, patched three security flaws. The most serious, CVE-2026-59948, is an arbitrary file write rated CVSS 7.0. A malicious package can…
8 views
Daily Writeups
⤷ Title: Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 08:30:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #APT #Arbitrary Code Execution #Canonical #CVE_2026_11386 #Root Privileges #Ubuntu #Ubuntu Pro Client #ubuntu_advantage_tools #USN_8555_1
Daily CyberSecurity
Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges
TL;DR Canonical shipped fixes for CVE-2026-11386 in USN-8555-1 on July 16, 2026. This Ubuntu Pro Client vulnerability scores CVSS 9.0 and can end in arbitrary code execution with root privileges. …
37 views
Daily Writeups
⤷ Title: CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:25:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache OpenMeetings #Arbitrary File Read #Path Traversal
Daily CyberSecurity
CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
TL;DR Apache has patched a critical OpenMeetings vulnerability tracked as CVE-2026-49488. The path traversal flaw grants arbitrary file read to any user with moderator rights in a room. Version 9.…
17 views
Daily Writeups
⤷ Title: Vitest Flaw Rated CVSS 9.4 Hits an npm Package With 65 Million Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 02:12:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #GHSA_p63j_vcc4_9vmv #javascript #npm #Path Traversal #Supply Chain Security #Vite #Vitest #Vitest Browser Mode
Daily CyberSecurity
Vitest Flaw Rated CVSS 9.4 Hits an npm Package With 65 Million Weekly Downloads
TL;DR Vitest patched a critical vulnerability rated CVSS 9.4. Browser Mode commands could read, write, or delete files outside the project folder. They did so even when the allowWrite gate was set…
10 views