Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: Architectural Vulnerabilities in Notepad++: Arbitrary Code Execution Risks Unmasked
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_48778 commandLineInterpreter #CVSS 7.8 flaw remediation #malicious AppData config overwrites #Notepad++ 8.9.6.1 security patch #Notepad++ config.xml code execution #Open Containing Folder in cmd exploit #OS command injection CWE_78 #shortcuts.xml parsing bug CVE_2026_48800 #text editor arbitrary code execution #Windows text editor vulnerability
Information Security News
Notepad++ Config.xml Code Execution Flaw Patched: Update Now
Notepad++ patches a critical config.xml code execution flaw (CVE-2026-48778) alongside two other security bugs. Upgrade to version 8.9.6.1 immediately.
9 views
Daily Writeups
⤷ Title: TwoMillion-Machine — writeup
════════════════════════
𐀪 Author: ANXS3C
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:51:47 GMT
════════════════════════
⌗ Tags: #os_command_injection #penetration_testing #web_application_security #privilege_escalation #reverse_shell
Medium
TwoMillion-Machine — writeup
From deobfuscating JS code to root ‘CVE-2023–0386’
19 views
Daily Writeups
⤷ Title: Splunk AI Toolkit Vulnerabilities: Critical RCE & Data Risks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 19:26:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_20265 #CVE_2026_20266 #cybersecurity #os command injection #Splunk AI Toolkit
Daily CyberSecurity
Splunk AI Toolkit Vulnerabilities: Critical RCE & Data Risks
New Splunk AI Toolkit vulnerabilities, including severe OS command injection (CVE-2026-20266), expose systems to attacks. Patch your instances immediately.
21 views
Daily Writeups
⤷ Title: Microsoft Details Support Lifecycle for Windows 11 Version 26H2
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:36:55 +0000
════════════════════════
⌗ Tags: #Windows #IT Administration #Microsoft #OS Update #Windows 11 #Windows 11 version 26H2
Daily CyberSecurity
Microsoft Details Support Lifecycle for Windows 11 Version 26H2
Microsoft outlines the official support lifecycle and deployment guidelines for Windows 11 version 26H2, urging IT admins to prepare.
28 views
Daily Writeups
⤷ Title: Mastering Command Injection: A Complete PortSwigger Web Security Academy Walkthrough for Bug Bounty…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 10:28:17 GMT
════════════════════════
⌗ Tags: #web_security #os_command_injection #ethical_hacking #bug_bounty #cybersecurity
Medium
Mastering Command Injection: A Complete PortSwigger Web Security Academy Walkthrough for Bug Bounty…
From simple OS command injection to blind, out-of-band, and data-exfiltration techniques — a hands-on journey through all five PortSwigger…
19 views
Daily Writeups
⤷ Title: Lab 1: OS Command Injection — PortSwigger Web Security Academy Walkthrough (Part 1 of 5)
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 13:19:57 GMT
════════════════════════
⌗ Tags: #pentesting #ethical_hacking #bug_bounty #cybersecurity #os_command_injection
Medium
Lab 1: OS Command Injection — PortSwigger Web Security Academy Walkthrough (Part 1 of 5)
Starting the Command Injection series: how unsanitized shell input leads to direct, visible Remote Code Execution — a beginner-friendly…
20 views
Daily Writeups
⤷ Title: Lab 3: Blind OS Command Injection with Output Redirection — PortSwigger Web Security Academy…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 10:26:41 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #os_command_injection #ethical_hacking #cybersecurity
Medium
Lab 3: Blind OS Command Injection with Output Redirection — PortSwigger Web Security Academy Walkthrough (Part 3 of 5)
Turning a silent vulnerability into a readable one: how redirecting command output into a public directory lets you read RCE results…
10 views
Daily Writeups
⤷ Title: Lab 2: Blind OS Command Injection with Time Delays — PortSwigger Web Security Academy Walkthrough…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 10:18:51 GMT
════════════════════════
⌗ Tags: #os_command_injection #cybersecurity #bug_bounty #pentesting #ethical_hacking
Medium
Lab 2: Blind OS Command Injection with Time Delays — PortSwigger Web Security Academy Walkthrough (Part 2 of 5)
When the server stays silent: how to prove Remote Code Execution using nothing but a stopwatch and the Linux sleep command.
10 views
Daily Writeups
⤷ Title: Lab 5: Blind OS Command Injection with Out-of-Band Data Exfiltration — PortSwigger Web Security…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 14:03:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #os_command_injection #portswigger_lab #bug_bounty #cybersecurity
Medium
Lab 5: Blind OS Command Injection with Out-of-Band Data Exfiltration — PortSwigger Web Security Academy Walkthrough (Part 5 of…
The grand finale: smuggling command output inside a DNS query to steal data from a completely silent, fully blind vulnerability.
22 views
Daily Writeups
⤷ Title: Blind OS Command Injection with Time Delays
════════════════════════
𐀪 Author: Ethical Hacker
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 12:19:57 GMT
════════════════════════
⌗ Tags: #bug_bounty #os_command_injection #application_security #blind_command_injection #web_security
Medium
Blind OS Command Injection with Time Delays
Professional write-up and technical documentation for the “Blind OS Command Injection with Time Delays” lab from PortSwigger Web Security…
16 views