Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:39:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #ADSelfService Plus #CVE_2025_1723
Daily CyberSecurity
CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus • Daily CyberSecurity
CVE-2025-1723 poses a significant risk for Zoho ADSelfService Plus users. Discover how to secure your data and avoid account takeover.
14 views
Daily Writeups
⤷ Title: Malicious Go Packages Target Developers with Hidden Loader Malware on Linux and macOS
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:33:11 +0000
════════════════════════
⌗ Tags: #Malware #Linux #macOS #Malicious Go Packages
Cybersecurity News
Malicious Go Packages Target Developers with Hidden Loader Malware on Linux and macOS
Uncover the threat of malicious Go packages targeting developers through typosquatting. Stay informed to protect your projects.
31 views
Daily Writeups
⤷ Title: Vim Users Warned: Crafted TAR Files Could Trigger Code Execution (CVE-2025-27423)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:20:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_27423 #vim #Vim vulnerability
Cybersecurity News
Vim Users Warned: Crafted TAR Files Could Trigger Code Execution (CVE-2025-27423)
Explore CVE-2025-27423, a Vim vulnerability that allows arbitrary code execution. Learn how to protect your systems.
16 views
Daily Writeups
⤷ Title: LummaStealer Expands Attack Surface with Fake Booking Sites and CAPTCHA Tricks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:14:50 +0000
════════════════════════
⌗ Tags: #Malware #LummaStealer #Malware_as_a_Service
Cybersecurity News
LummaStealer Expands Attack Surface with Fake Booking Sites and CAPTCHA Tricks
Uncover the LummaStealer Attack and its new malvertising tactics using fake booking websites to distribute info-stealer malware.
20 views
Daily Writeups
⤷ Title: CVE-2024-0114: NVIDIA Addresses High-Severity HMC Vulnerability
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:59:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_0114 #Hopper HGX #nvidia
Daily CyberSecurity
CVE-2024-0114: NVIDIA Addresses High-Severity HMC Vulnerability
Learn about CVE-2024-0114, a high-severity vulnerability in Nvidia's Hopper HGX, risking code execution and privilege escalation.
17 views
Daily Writeups
⤷ Title: Operation Sea Elephant Cyber-Espionage Campaign Targeting South Asia
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:56:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #CNC group #cyber_espionage #data exfiltration #Github API i #Government Organizations #malware #Operation Sea Elephant #Remote Command Execution #Research Institutions #South Asia #Universities
Daily CyberSecurity
Operation Sea Elephant Cyber-Espionage Campaign Targeting South Asia
Uncover the tactics of the CNC group in Operation Sea Elephant targeting academic and research institutions in South Asia.
19 views
Daily Writeups
⤷ Title: Chrome 134 Update Addresses High-Risk Vulnerability (CVE-2025-1914)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:47:30 +0000
════════════════════════
⌗ Tags: #Vulnerability #Chrome 134 #CVE_2025_1914 #CVE_2025_1915 #javascript #V8
Daily CyberSecurity
Chrome 134 Update Addresses High-Risk Vulnerability (CVE-2025-1914)
Discover how CVE-2025-1914 impacts Google Chrome and the urgent security patches included in the latest Chrome 134 update.
20 views
Daily Writeups
⤷ Title: CVE-2025-0912: Critical Flaw Exposes Over 100,000 WordPress Donation Sites to RCE
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:35:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_0912 #GiveWP #wordpress
Daily CyberSecurity
CVE-2025-0912: Critical Flaw Exposes Over 100,000 WordPress Donation Sites to RCE
Learn about CVE-2025-0912, a severe security vulnerability in GiveWP affecting over 100,000 WordPress sites.
25 views
Daily Writeups
⤷ Title: SharePoint Shadow: Havoc’s FUD Malware Conceals Cyber Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 00:25:32 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Campaign #FUD Malware #Havoc C2 #Microsoft Graph API #Sharepoint #SharePointC2Init #Undetectable
Daily CyberSecurity
SharePoint Shadow: Havoc's FUD Malware Conceals Cyber Attacks
Explore the latest insights on FUD Malware and how the Havoc framework enables undetectable cyber operations.
23 views
Daily Writeups
⤷ Title: Finding jwt tokens that lead to PII data leakage.
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:20:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #bug_bounty #bug_bounty_tips #ethical_hacking
Medium
Finding jwt tokens that lead to PII data leakage.
Check the JWT tokens carefully for those that contain sensitive information
18 views
Daily Writeups
⤷ Title: Able to create an account without a phone number. (unique bug)
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:16:31 GMT
════════════════════════
⌗ Tags: #tips #bug_bounty_tips #ethical_hacking #cybersecurity #bug_bounty
Medium
Able to create an account without a phone number. (unique bug)
Enter anything in the phone number field, and I’m still able to create an account
14 views
Daily Writeups
⤷ Title: Find new apex domains that are related to your bug bounty target.
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:14:11 GMT
════════════════════════
⌗ Tags: #tips #penetration_testing #bug_bounty #cybersecurity #programming
Medium
Find new apex domains that are related to your bug bounty target.
Learn how to do it by reading this article.
16 views
Daily Writeups
⤷ Title: A Logical Bug That Slipped Through
════════════════════════
𐀪 Author: callgh0st
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:12:44 GMT
════════════════════════
⌗ Tags: #bug_bounty #burpsuite #genocide #logic #hacking
Medium
A Logical Bug That Slipped Through
In the Name of Allah, the Most Beneficent, the Most Merciful. All the praises and thanks be to Allah, the Lord of the ‘Alamin (mankind…
18 views
Daily Writeups
⤷ Title: Command Injection: The Ultimate Guide to Exploiting and Preventing OS Command Execution
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 09:45:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #injection_payloads #prevent_injection #command_injection #os_injection
Medium
Command Injection: The Ultimate Guide to Exploiting and Preventing OS Command Execution
✨ Free Link in the first comment
17 views
Daily Writeups
⤷ Title: $50-$100 worth Sensitive Leaks via Google Dorks | Part 2
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 09:18:40 GMT
════════════════════════
⌗ Tags: #google #secrets #bug_bounty #google_hacking #google_dork
Medium
$50-$100 worth Sensitive Leaks via Google Dorks | Part 2
Part 2: Learn practical and hidden dorks to target sensitive bounty earning leaks and sensitive files.
18 views
Daily Writeups
⤷ Title: How i Bypass 403 and earn bounty $$$$
════════════════════════
𐀪 Author: Rishav anand
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 08:53:57 GMT
════════════════════════
⌗ Tags: #servers #cybersecurity #money #bug_bounty #hacking
Medium
How i Bypass 403 and earn bounty $$$$
Bypassing a 403 Forbidden error during bug bounty hunting can be tricky, but there are multiple techniques you can try, depending on the…
15 views
Daily Writeups
⤷ Title: The Curious Case of an Insecure Password Reset Flaw
════════════════════════
𐀪 Author: Sapienshack
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 07:58:30 GMT
════════════════════════
⌗ Tags: #pentesting #penetration_testing #bug_bounty #application_security #bug_bounty_writeup
Medium
The Curious Case of an Insecure Password Reset Flaw
During our penetration testing journey, we encounter numerous test cases. Recently, I came across a unique scenario that I felt was worth…
11 views
Daily Writeups
⤷ Title: Cybersecurity Update: Major Attacks and Trends
════════════════════════
𐀪 Author: Sivaprakash Sivakumar
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 07:46:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #news #cyberattack #cryptocurrency
Medium
Cybersecurity Update: Major Attacks and Trends
Follow me for regular cybersecurity updates
11 views
Daily Writeups
⤷ Title: Cache Deception Attack help you make a good Bounty.(0–1)
════════════════════════
𐀪 Author: Rishav anand
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 07:25:09 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #cache #money
Medium
Cache Deception Attack help you make a good Bounty.(0–1)
1. Introduction
16 views
Daily Writeups
⤷ Title: XSS :- When, Where, and How to Strike in Web and Mobile Apps! and make $$$ Easily
════════════════════════
𐀪 Author: Rishav anand
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 07:15:04 GMT
════════════════════════
⌗ Tags: #hacking #money #xss_attack #bug_bounty #cybersecurity
Medium
XSS :- When, Where, and How to Strike in Web and Mobile Apps! and make $$$ Easily
Cross-Site Scripting (XSS) is one of the most common web application vulnerabilities, allowing attackers to inject malicious scripts into…
17 views
Daily Writeups
⤷ Title: 2025 OWASP Vulnerabilities Complete Guide for Security Tester
════════════════════════
𐀪 Author: Ajay Naik
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 06:36:48 GMT
════════════════════════
⌗ Tags: #information_security #penetration_testing #owasp #owasp_top_10 #bug_bounty
Medium
2025 OWASP Vulnerabilities Complete Guide for Security Tester
As cybersecurity threats continue to evolve, the Open Web Application Security Project (OWASP) updates its list of top vulnerabilities…
17 views