Daily Writeups
@Daily_Writeups
3.93K subscribers
4 photos
135K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.93K subscribers
Daily Writeups
⤷ Title: Hardcoded Credentials & Command Injection Found in HPE Aruba Instant On Access Points
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 09:45:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #Command Injection #cybersecurity #hardcoded credentials #HPE Aruba #Instant On Access Points
Daily CyberSecurity
Hardcoded Credentials & Command Injection Found in HPE Aruba Instant On Access Points
HPE Aruba warns of critical flaws in Instant On Access Points (CVE-2025-37103) allowing unauthenticated admin bypass via hardcoded credentials and authenticated command injection.
28 views
Daily Writeups
⤷ Title: Ruckus Wireless Exposed: 9 Critical Vulnerabilities Leave Wi-Fi Management Systems Wide Open, No Patch!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:38:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cybersecurity #hardcoded credentials #Network Director #rce #Remote Code Execution #RND #Ruckus Wireless #ssh #Virtual SmartZone #vSZ #Vulnerability
Daily CyberSecurity
Ruckus Wireless Exposed: 9 Critical Vulnerabilities Leave Wi-Fi Management Systems Wide Open, No Patch!
Multiple critical flaws (CVE-2025-44954, -44957, -44963, -44955, -6243) in Ruckus vSZ/RND allow unauthenticated RCE, auth bypass via hardcoded SSH keys and JWT.
22 views
Daily Writeups
⤷ Title: CVE-2025-7503 (CVSS 10): Hidden Backdoor in Popular IP Camera Grants Hackers Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 02:38:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_7503 #cybersecurity #hardcoded credentials #IoT security #IP Camera #root access #Shenzhen Liandian #surveillance #Telnet #Vulnerability
Daily CyberSecurity
CVE-2025-7503 (CVSS 10): Hidden Backdoor in Popular IP Camera Grants Hackers Root Access
A critical flaw (CVE-2025-7503, CVSS 10.0) in Shenzhen Liandian IP cameras allows root access via an undocumented, default-enabled Telnet service with hardcoded credentials. No patch available.
21 views
Daily Writeups
⤷ Title: Critical Flaw (CVE-2025-37103) in Aruba Instant On APs: Hardcoded Credentials Allow Full Admin Takeover – Patch Now!
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 23:52:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Access Point #Aruba Instant On #CVE_2025_37103 #cybersecurity #Hardcoded Credentials #HPE #network security #vulnerability
Penetration Testing Tools
Critical Flaw (CVE-2025-37103) in Aruba Instant On APs: Hardcoded Credentials Allow Full Admin Takeover – Patch Now!
HPE warns of a critical vulnerability (CVE-2025-37103, CVSS 9.8) in Aruba Instant On APs with hardcoded credentials, allowing unauthenticated full administrative access. Update immediately!
14 views
Daily Writeups
⤷ Title: TP-Link Archer C50 (EOL) Exposed: Hardcoded DES Key Allows Sensitive Config Decryption (CVE-2025-6982)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 00:22:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Archer C50 #cybersecurity #DES #encryption #end_of_life #EOL #Hardcoded Key #router #TP_Link #Vulnerability
Daily CyberSecurity
TP-Link Archer C50 (EOL) Exposed: Hardcoded DES Key Allows Sensitive Config Decryption (CVE-2025-6982)
The EOL TP-Link Archer C50 router has a critical hardcoded DES key (CVE-2025-6982), allowing attackers to decrypt sensitive configuration files, including admin credentials and Wi-Fi passwords.
11 views
Daily Writeups
⤷ Title: CISA Alert: Critical Flaws in Tigo Energy Solar Devices Allow Remote Takeover of Solar Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:21:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Command Injection #Critical Infrastructure #CVE_2025_7768 #cybersecurity #Hard_coded Credentials #hardcoded credentials #ICS #IOT #Solar #Solar Systems #Tigo Energy #Vulnerability
Daily CyberSecurity
CISA Alert: Critical Flaws in Tigo Energy Solar Devices Allow Remote Takeover of Solar Systems
In a critical advisory issued by the Cybersecurity and Infrastructure Security Agency (CISA), newly discovered vulnerabilities in Tigo Energy’s Cloud Connect Advanced (CCA) device could allow atta…
14 views
Daily Writeups
⤷ Title: PATCH NOW: Critical Gladinet RCE Flaw Exploits Hardcoded Crypto to Steal Keys
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:25:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #AES #CentreStack #CVE_2025_30406 #cybersecurity #Gladinet #Hardcoded Key #Huntress #RCE #Triofox #ViewState Deserialization
Penetration Testing Tools
PATCH NOW: Critical Gladinet RCE Flaw Exploits Hardcoded Crypto to Steal Keys
Gladinet is facing fresh trouble once again: vulnerabilities have been uncovered in its CentreStack and Triofox products stemming
10 views
Daily Writeups
⤷ Title: Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:11:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_67809 #CVE_2025_68645 #Email Security #hardcoded credentials #infosec #lfi #local file inclusion #Patch Update #ZCS #Zimbra
Daily CyberSecurity
Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers
Administrators of the popular Zimbra Collaboration Suite (ZCS) are being urged to patch immediately after the discovery of two distinct security vulnerabilities. The most severe of the pair allows…
28 views
Daily Writeups
⤷ Title: CVE-2025-68926: Critical Hardcoded Credential Flaw Exposes RustFS Storage Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 00:05:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #CVE_2025_68926 #Cyber Security #data destruction #gRPC Security #hardcoded credentials #Object Storage #Rust Programming #RustFS
Daily CyberSecurity
CVE-2025-68926: Critical Hardcoded Credential Flaw Exposes RustFS Storage Clusters
RustFS, a distributed object storage system celebrated for leveraging the memory safety and performance of the Rust programming language, has stumbled over a decidedly old-school security hurdle. …
31 views
Daily Writeups
⤷ Title: Double Critical: Hardcoded Secrets Expose Ruckus IoT Controllers to Root RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 00:16:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_69425 #CVE_2025_69426 #Docker escape #hardcoded credentials #IoT security #Root Privilege Escalation #Ruckus Networks #vRIoT Controller
Daily CyberSecurity
Double Critical: Hardcoded Secrets Expose Ruckus IoT Controllers to Root RCE
Two CVSS 10 flaws (CVE-2025-69425 & CVE-2025-69426) hit Ruckus vRIoT. Hardcoded secrets allow attackers to seize root access. Update to v3.0.0.0 now.
11 views