Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Secure OAuth2: A Simple Story of Two Keys — PKCE
════════════════════════
𐀪 Author: Sagara Gunathunga
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 23:21:33 GMT
════════════════════════
⌗ Tags: #oidc #authorization #api_security #oauth2 #application_security
Medium
Secure OAuth2: A Simple Story of Two Keys — PKCE
This is the final post in my Secure OAuth2 blog series. I began this series by examining the security gaps in the OAuth2 authorization…
25 views
Daily Writeups
⤷ Title: 5 أولويات للأمن السيبراني تستحق انتباهك
════════════════════════
𐀪 Author: Maged Anas
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 21:59:05 GMT
════════════════════════
⌗ Tags: #leadership #infosec #cybersecurity #cyber_security_awareness
Medium
5 أولويات للأمن السيبراني تستحق انتباهك
في عالم اليوم الذي يعتمد بشكل متزايد على التكنولوجيا، أصبح الأمن السيبراني قضية محورية لكل منظمات الأعمال. سواء كنت تعمل في شركة صغيرة أو…
23 views
Daily Writeups
⤷ Title: Palo Alto Networks SaaS Security: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 23:31:27 GMT
════════════════════════
⌗ Tags: #saas #palo_alto_networks #network_security #cybersecurity #technology
Medium
Palo Alto Networks SaaS Security: A Comprehensive Guide
In today’s cloud-first world, Software-as-a-Service (SaaS) applications power businesses of all sizes. But while they bring efficiency and…
19 views
Daily Writeups
⤷ Title: Erlang/OTP SSH: CVE-2025–32433 - TryHackMe
════════════════════════
𐀪 Author: RosanaFSS
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 23:30:20 GMT
════════════════════════
⌗ Tags: #information_technology #ethical_hacking #cybersecurity #tryhackme #vulnerability
Medium
Erlang/OTP SSH: CVE-2025–32433 - TryHackMe
Learn about and exploit Erlang/OTP SSH CVE-2025–32433 in a lab setup.
18 views
Daily Writeups
⤷ Title: Android Security: How to create rooted Android emulator
════════════════════════
𐀪 Author: Abdur Mohammed
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 23:26:51 GMT
════════════════════════
⌗ Tags: #mobile_app_development #android_app_development #cybersecurity #android_security #reverse_engineering
Medium
Android Security: How to create rooted Android emulator
React Native Shorts | Simple| To the point
15 views
Daily Writeups
⤷ Title: Why Cybersecurity Is the Most Underrated Career Path in 2025 (and How to Get Started from Scratch)
════════════════════════
𐀪 Author: Abdelaziz moustakim
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 23:08:29 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity_careers #cybersecurity #jobs #careers
Medium
Why Cybersecurity Is the Most Underrated Career Path in 2025 (and How to Get Started from Scratch)
Why aren’t more people chasing cybersecurity roles?
15 views
Daily Writeups
⤷ Title: Geo-Blocking Features in Next-Gen Firewalls: Why They Matter
════════════════════════
𐀪 Author: Akshay Chauhan
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 23:02:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #firewall #information_security #safeaeon
Medium
Geo-Blocking Features in Next-Gen Firewalls: Why They Matter
Some of the most effective cybersecurity decisions are also the simplest. Geo-blocking, a feature in next-generation firewalls (NGFWs), is…
25 views
Daily Writeups
⤷ Title: Blockchain Security Challenges and the Future with Quantum Computers
════════════════════════
𐀪 Author: Rodrigo M
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 22:42:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #quantum_computing #blockchain
Medium
Blockchain Security Challenges and the Future with Quantum Computers
Since Bitcoin burst onto the scene in 2009, blockchain technology has been a game-changer, offering a decentralized, transparent, and…
20 views
Daily Writeups
⤷ Title: Building an Effective Patch Management Strategy
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 22:16:56 GMT
════════════════════════
⌗ Tags: #careers #technology #programming #security #cybersecurity
Medium
Building an Effective Patch Management Strategy
Proactively Secure Your Infrastructure One Update at a Time
22 views
Daily Writeups
⤷ Title: Forged in Privacy, Sharpened by Cryptography: Why We Built Pinaka Shield
════════════════════════
𐀪 Author: Pinaka Shield
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 22:14:54 GMT
════════════════════════
⌗ Tags: #digital_transformation #european_union #cybersecurity #cryptography #startup
Medium
Forged in Privacy, Sharpened by Cryptography: Why We Built Pinaka Shield
In an era where data fuels economies and breaches dominate headlines, privacy isn’t just a technical requirement — it’s a human right.
35 views
Daily Writeups
⤷ Title: IPED Digital Forensic Tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:00:01 +0000
════════════════════════
⌗ Tags: #Data Forensics #Digital Forensic Tool
Penetration Testing Tools
IPED Digital Forensic Tool
IPED Digital Forensic ToolI is open-source software that can be used to process and analyze digital evidence, often seized at crime scenes
30 views
Daily Writeups
⤷ Title: XnlReveal: Chrome browser extension to show alerts for relfected query params, show hidden elements
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:25:31 +0000
════════════════════════
⌗ Tags: #Web AppSec #Chrome extension #Wayback Archive
Penetration Testing Tools
XnlReveal: Chrome browser extension to show alerts for relfected query params, show hidden elements
This is a Chrome Extension that can do the following: Show an alert for any query parameters that are reflected.
24 views
Daily Writeups
⤷ Title: Redis Vulnerability Exposes Servers to Denial-of-Service Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:59:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_21605 #Denial of Service #dos #Redis #security advisory
Daily CyberSecurity
Redis Vulnerability Exposes Servers to Denial-of-Service Attacks
High-severity Redis vulnerability (CVE-2025-21605) allows unauthenticated users to cause DoS. Upgrade to patched versions or apply mitigations to protect your server.
20 views
Daily Writeups
⤷ Title: GitLab Releases Security Update to Patch XSS and Account Takeover Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:46:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #CVE_2025_1763 #CVE_2025_1908 #CVE_2025_2443 #gitlab #security advisory #XSS
Daily CyberSecurity
GitLab Releases Security Update to Patch XSS and Account Takeover Flaws
GitLab releases critical security updates 17.11.1, 17.10.5, 17.9.7 to fix high-severity XSS, account takeover risks. Upgrade now to protect your GitLab instance.
15 views
Daily Writeups
⤷ Title: High-Severity SonicWall SSLVPN Vulnerability Allows Firewall Crashing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:35:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_32818 #Denial of Service #firewall #security advisory #SonicWall #SSLVPN
Daily CyberSecurity
High-Severity SonicWall SSLVPN Vulnerability Allows Firewall Crashing
Critical SonicWall flaw (CVE-2025-32818) in SSLVPN can crash firewalls, leading to DoS. Update your Gen7 devices now!
12 views
Daily Writeups
⤷ Title: CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:53:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cryptocurrency Security #CVE_2025_32965 #Key Exfiltration #NPM Backdoor #supply chain attack #Wallet Compromise #XRP Ledger #xrpl.js
Daily CyberSecurity
CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk
CVE-2025-32965: A backdoor in xrpl.js SDK allows theft of crypto wallet keys. Users must upgrade and rotate compromised credentials immediately.
11 views
Daily Writeups
⤷ Title: CVE-2025-34028: Critical RCE Flaw in Commvault Command Center Scores CVSS 10
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:40:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #Commvault #CVE_2025_34028 #cybersecurity #patch #Remote Code Execution
Daily CyberSecurity
CVE-2025-34028: Critical RCE Flaw in Commvault Command Center Scores CVSS 10
A critical vulnerability (CVE-2025-34028) in Commvault Command Center allows remote code execution. Patch immediately or isolate vulnerable instances.
11 views
Daily Writeups
⤷ Title: Ghost Tap: NFC Fraud Surge Linked to Chinese Cybercriminal Groups
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:36:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contactless Payment #Cybercrime #Ghost Tap #HCE Abuse #Mobile Payments #NFC Fraud #POS Terminal Exploits #Resecurity #Track2NFC #Z_NFC
Daily CyberSecurity
Ghost Tap: NFC Fraud Surge Linked to Chinese Cybercriminal Groups
Resecurity uncovers massive NFC fraud wave using Ghost Tap attacks, with Chinese cybercriminals targeting global payment systems and loyalty programs.
11 views
Daily Writeups
⤷ Title: CVE-2024-6235: NetScaler Console Flaw Enables Admin Access, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:30:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Privilege Escalation #Authentication Bypass #Citrix Vulnerability #Critical CVE #CVE_2024_6235 #Internal API Exploit #NetScaler Console #Rapid7
Daily CyberSecurity
CVE-2024-6235: NetScaler Console Flaw Enables Admin Access, PoC Publishes
Critical flaw CVE-2024-6235 in NetScaler Console lets attackers create admin accounts by abusing an internal API. Patch to version 14.1-25.53 now.
27 views
Daily Writeups
⤷ Title: Russian Hackers Abuse Microsoft 365 OAuth in Sophisticated Phishing Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:26:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #cyber_espionage #cybersecurity #Entra ID #Microsoft 365 #OAuth #OAuth Abuse #OAuth Phishing #phishing #Russian APT #Russian threat actors #social engineering #UTA0352 #UTA0355 #Volexity
Daily CyberSecurity
Russian Hackers Abuse Microsoft 365 OAuth in Sophisticated Phishing Attacks
Volexity uncovers Russian threat actors abusing Microsoft 365 OAuth flows via phishing, impersonation, and device registration to access email accounts.
19 views
Daily Writeups
⤷ Title: NVIDIA NeMo Framework: High-Risk Vulnerabilities Allow Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:22:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_23249 #CVE_2025_23250 #CVE_2025_23251 #NeMo #nvidia #Remote Code Execution
Daily CyberSecurity
NVIDIA NeMo Framework: High-Risk Vulnerabilities Allow Remote Code Execution
NVIDIA discloses 3 vulnerabilities in the NeMo Framework enabling remote code execution and data tampering. Update to version 25.02 to secure your AI development.
18 views