Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Advanced Container Escapes: A Principle-Based Security Deep Dive
════════════════════════
𐀪 Author: Kai Aizen
════════════════════════
ⴵ Time: Sun, 02 Mar 2025 04:39:51 GMT
════════════════════════
⌗ Tags: #cloud_penetration_testing #container_escape #containerization #red_team #penetration_testing
Medium
Advanced Container Escapes: A Principle-Based Security Deep Dive
Container security doesn’t end with toggling off --privileged or removing cap_sys_admin. Modern attackers probe runtime binaries, exploit…
30 views
Daily Writeups
⤷ Title: NVIDIAScape: Critical Container Escape (CVE-2025-23266, CVSS 9.0) Threatens 37% of AI Cloud Environments
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 02:28:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #cloud security #Container Escape #Container Toolkit #CVE_2025_23266 #cybersecurity #machine learning #Nvidia #NVIDIAScape
Penetration Testing Tools
NVIDIAScape: Critical Container Escape (CVE-2025-23266, CVSS 9.0) Threatens 37% of AI Cloud Environments
Wiz uncovered "NVIDIAScape," a critical vulnerability (CVE-2025-23266, CVSS 9.0) in NVIDIA Container Toolkit allowing attackers to escape containers and control AI cloud hosts.
39 views
Daily Writeups
⤷ Title: Critical Docker Desktop Vulnerability Exposes Host Systems to Container Abuse
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 23:06:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #container escape #container security #cybersecurity #docker #Docker Desktop
Daily CyberSecurity
Critical Docker Desktop Vulnerability Exposes Host Systems to Container Abuse
A critical vulnerability (CVSS 9.3) in Docker Desktop could allow malicious containers to gain full control of the host system. Update now to version 4.44.3.
10 views
Daily Writeups
⤷ Title: Podman Patches Symlink Traversal Vulnerability in kube play Command (CVE-2025-9566)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 00:13:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container escape #container security #CVE_2025_9566 #kube play #Kubernetes #Podman #symlink traversal #Vulnerability
Daily CyberSecurity
Podman Patches Symlink Traversal Vulnerability in kube play Command (CVE-2025-9566)
A high-severity flaw (CVE-2025-9566) in Podman allows malicious containers to overwrite host files via a symlink traversal attack. A patch is available in Podman v5.6.1.
26 views
Daily Writeups
⤷ Title: Planning — HackTheBox Walkthrough
════════════════════════
𐀪 Author: Death Esther
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 19:52:17 GMT
════════════════════════
⌗ Tags: #container_escape #cve_2024_9264 #cron_job_ui_abuse #planning_htb #hackthebox_writeup
Medium
Planning — HackTheBox Walkthrough
Planning HackTheBox Walkthrough — Grafana Exploitation, Docker Escape & Crontab Privilege Escalation
10 views
Daily Writeups
⤷ Title: OCI Fixes Container Escape Vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 07 Nov 2025 00:26:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container escape #container security #CVE_2025_31133 #docker #Kubernetes #OCI #privilege escalation #runc
Daily CyberSecurity
OCI Fixes Container Escape Vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881)
OCI patched three critical runc flaws allowing container escape and host DoS/RCE. Attackers exploit mount race conditions in maskedPaths and /dev/console bind-mounts. Update to v1.2.8+.
19 views
Daily Writeups
⤷ Title: Docker Container Escape by Exploiting Shared Namespaces
════════════════════════
𐀪 Author: Indigo Shadow
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 06:18:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #namespaces #container_escape #ethical_hacking #docker_security
Medium
Docker Container Escape by Exploiting Shared Namespaces
What are namespaces? How can we exploit shared namespaces to escape from a docker container?
26 views
Daily Writeups
⤷ Title: Linux Docker Container Escapes Cheatsheet
════════════════════════
𐀪 Author: Indigo Shadow
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 03:47:13 GMT
════════════════════════
⌗ Tags: #container_escape #docker_container_security #docker_escape_cheatsheet #cybersecurity #ethical_hacking
Medium
Linux Docker Container Escapes Cheatsheet
What are some common Docker container escape techniques? How do they work? After spending some time researching on this topic, I’ve…
63 views
Daily Writeups
⤷ Title: Copy Fail: Public PoC and Full Details Disclosed for the 732-Byte Linux Root Exploit (CVE-2026-31431)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 23:40:17 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #AF_ALG #container escape #Copy Fail #CVE_2026_31431 #infosec #Linux Kernel #Linux Security #Page Cache Corruption #PoC Disclosure #proof_of_concept #Root Exploit #Theori
Daily CyberSecurity
Copy Fail: Public PoC and Full Details Disclosed for the 732-Byte Linux Root Exploit (CVE-2026-31431)
Linux "Copy Fail" (CVE-2026-31431) technical details and PoC are now public. Learn how a 732-byte script grants root access by corrupting the page cache.
21 views
Daily Writeups
⤷ Title: SaaS-Style Cybercrime: Attackers Weaponize Langflow RCE and NATS Messaging for Ultra-Scalable C2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 08:06:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Pipeline Security #CISA KEV #container escape #CVE_2026_33017 #Distributed Messaging #infosec #Langflow #NATS_as_C2 #Patch Alert #Remote Code Execution #Sysdig TRT
Daily CyberSecurity
SaaS-Style Cybercrime: Attackers Weaponize Langflow RCE and NATS Messaging for Ultra-Scalable C2
Sysdig exposes "NATS-as-C2" infrastructure exploiting Langflow RCE (CVE-2026-33017). Learn how to defend your AI pipelines and block the exploit.
12 views