Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Kiloview E3 NDI Encoder Flaws Allow Root Command Execution, CISA Warns
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 01:43:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Command Injection #CVE_2026_107861 #CVE_2026_110243 #CVE_2026_92450 #ICS security #KiloView #NDI Encoder
Daily CyberSecurity
Kiloview E3 NDI Encoder Flaws Allow Root Command Execution, CISA Warns
TL;DR On October 22, 2026, CISA published advisory ICSA-26-295-01 covering nine Kiloview E3 vulnerabilities in the company’s NDI video encoder. Two command injection flaws score CVSS 9.9 and…
11 views
Daily Writeups
⤷ Title: HPE Patches 72 Flaws in AOS-8 and AOS-10, Including Eight CVSS 10.0 Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 01:33:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AOS_10 #AOS_8 #Aruba #CVE_2026_79844 #CVE_2026_79845 #CVE_2026_79846 #HPE #PAPI Protocol #Wireless Security
Daily CyberSecurity
HPE Patches 72 Flaws in AOS-8 and AOS-10, Including Eight CVSS 10.0 Bugs
TL;DR HPE has patched 72 HPE Networking AOS vulnerabilities in its AOS-8 and AOS-10 wireless operating systems. They affect Mobility Conductors, Controllers, Gateways and Access Points. Of these, …
10 views
Daily Writeups
⤷ Title: Laravel Authentication Bypass PoC Released for Critical TokenGuard Flaw CVE-2026-114509
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 01:00:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Authentication Bypass #CVE_2026_114509 #Laravel #php #proof_of_concept #TokenGuard
Daily CyberSecurity
Laravel Authentication Bypass PoC Released for Critical TokenGuard Flaw CVE-2026-114509
TL;DR Hakai Security has released a public proof-of-concept for CVE-2026-114509, a critical Laravel authentication bypass in the built-in TokenGuard. The flaw, rated CVSS 9.2, lets an unauthentica…
10 views
Daily Writeups
⤷ Title: FortiSIEM Vulnerability Details and PoC Exploit Released for Critical Unauthenticated RCE Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 00:25:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_106173 #Fortinet #FortiSIEM #Horizon3 #Path Traversal #proof_of_concept #Remote Code Execution
Daily CyberSecurity
FortiSIEM Vulnerability Details and PoC Exploit Released for Critical Unauthenticated RCE Flaw
TL;DR Horizon3 has published a technical deep dive and proof-of-concept exploit for CVE-2026-106173, a critical FortiSIEM vulnerability rated CVSS 9.4. The flaw lets an unauthenticated attacker wr…
11 views
Daily Writeups
⤷ Title: Suspected Access Broker k0t Hits FortiGate and GlobalProtect Devices, Exposing 70,000 Credentials
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 00:03:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CVE_2025_64446 #CVE_2026_0257 #Edge Devices #FortiBleed #FortiGate GlobalProtect attacks #Group_IB #initial access broker #k0t #ransomware
Daily CyberSecurity
Suspected Access Broker k0t Hits FortiGate and GlobalProtect Devices, Exposing 70,000 Credentials
At a glance Actor Operator using the alias “k0t,” with suspected collaborators; possible initial access broker Activity Mass scanning, exploitation, and brute-forcing of network edge d…
10 views
Daily Writeups
⤷ Title: LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:44:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_113499 #CVE_2026_113500 #CVE_2026_113501 #LiteSpeed Cache #Stored XSS #WordPress Plugin #wpscan
Daily CyberSecurity
LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
TL;DR LiteSpeed Cache 7.9.2, released October 20, 2026, fixes three LiteSpeed Cache vulnerabilities disclosed by WPScan on October 23. Two flaws let unauthenticated commenters plant stored XSS tha…
8 views
Daily Writeups
⤷ Title: INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:01:29 +0000
════════════════════════
⌗ Tags: #Malware #CVE_2026_35616 #INC Ransomware affiliates #INC Ransomware affiliates AI #Phantom Framework #SOCRadar #The Gentlemen Ransomware
Daily CyberSecurity
INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors
At a Glance Malware Family INC Ransomware (Rust-based encryptors), The Gentlemen extortion kit, Phantom framework, Ghost C2, and RevSocks Threat Actor Confirmed affiliates of INC Ransomware (MITRE…
15 views
Daily Writeups
⤷ Title: TryHackMe PHP2Shell — Complete Walkthrough
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:58:21 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cve #tryhackme #php
Medium
TryHackMe PHP2Shell — Complete Walkthrough
PHP2Shell is a PHP runtime vulnerability chain that can lead to memory disclosure and remote code execution (RCE). Unlike application-level…
28 views
Daily Writeups
⤷ Title: PHP2Shell: Two Critical PHP Flaws (CVE-2026-109618 and CVE-2026-109619)
════════════════════════
𐀪 Author: Aravind S
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:29:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #cve_2026_109618 #rce #php2shell #php
Medium
PHP2Shell: Two Critical PHP Flaws (CVE-2026-109618 and CVE-2026-109619)
An overview of the two PHP runtime vulnerabilities, their potential impact, affected versions, and available fixes
50 views
Daily Writeups
⤷ Title: Signal RingRTC Flaw Can Keep Your Mic Live
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 12:59:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_113380 #CVSS 4.0 #Messenger Security #privacy #RingRTC #Signal #vulnerability #WebRTC
Information Security News
Signal RingRTC Flaw Can Keep Your Mic Live
When Hang Up Does Not Hang Up In Signal, the hang-up button could fail even when a user tried to end a call. A critical bug in the RingRTC library let another call participant block the disconnect…
15 views