Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Redis Vulnerability Exposes Servers to Denial-of-Service Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:59:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_21605 #Denial of Service #dos #Redis #security advisory
Daily CyberSecurity
Redis Vulnerability Exposes Servers to Denial-of-Service Attacks
High-severity Redis vulnerability (CVE-2025-21605) allows unauthenticated users to cause DoS. Upgrade to patched versions or apply mitigations to protect your server.
20 views
Daily Writeups
⤷ Title: GitLab Releases Security Update to Patch XSS and Account Takeover Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:46:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #CVE_2025_1763 #CVE_2025_1908 #CVE_2025_2443 #gitlab #security advisory #XSS
Daily CyberSecurity
GitLab Releases Security Update to Patch XSS and Account Takeover Flaws
GitLab releases critical security updates 17.11.1, 17.10.5, 17.9.7 to fix high-severity XSS, account takeover risks. Upgrade now to protect your GitLab instance.
15 views
Daily Writeups
⤷ Title: High-Severity SonicWall SSLVPN Vulnerability Allows Firewall Crashing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:35:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_32818 #Denial of Service #firewall #security advisory #SonicWall #SSLVPN
Daily CyberSecurity
High-Severity SonicWall SSLVPN Vulnerability Allows Firewall Crashing
Critical SonicWall flaw (CVE-2025-32818) in SSLVPN can crash firewalls, leading to DoS. Update your Gen7 devices now!
12 views
Daily Writeups
⤷ Title: CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:53:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cryptocurrency Security #CVE_2025_32965 #Key Exfiltration #NPM Backdoor #supply chain attack #Wallet Compromise #XRP Ledger #xrpl.js
Daily CyberSecurity
CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk
CVE-2025-32965: A backdoor in xrpl.js SDK allows theft of crypto wallet keys. Users must upgrade and rotate compromised credentials immediately.
11 views
Daily Writeups
⤷ Title: CVE-2025-34028: Critical RCE Flaw in Commvault Command Center Scores CVSS 10
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:40:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #Commvault #CVE_2025_34028 #cybersecurity #patch #Remote Code Execution
Daily CyberSecurity
CVE-2025-34028: Critical RCE Flaw in Commvault Command Center Scores CVSS 10
A critical vulnerability (CVE-2025-34028) in Commvault Command Center allows remote code execution. Patch immediately or isolate vulnerable instances.
11 views
Daily Writeups
⤷ Title: Ghost Tap: NFC Fraud Surge Linked to Chinese Cybercriminal Groups
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:36:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contactless Payment #Cybercrime #Ghost Tap #HCE Abuse #Mobile Payments #NFC Fraud #POS Terminal Exploits #Resecurity #Track2NFC #Z_NFC
Daily CyberSecurity
Ghost Tap: NFC Fraud Surge Linked to Chinese Cybercriminal Groups
Resecurity uncovers massive NFC fraud wave using Ghost Tap attacks, with Chinese cybercriminals targeting global payment systems and loyalty programs.
11 views
Daily Writeups
⤷ Title: CVE-2024-6235: NetScaler Console Flaw Enables Admin Access, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:30:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Privilege Escalation #Authentication Bypass #Citrix Vulnerability #Critical CVE #CVE_2024_6235 #Internal API Exploit #NetScaler Console #Rapid7
Daily CyberSecurity
CVE-2024-6235: NetScaler Console Flaw Enables Admin Access, PoC Publishes
Critical flaw CVE-2024-6235 in NetScaler Console lets attackers create admin accounts by abusing an internal API. Patch to version 14.1-25.53 now.
27 views
Daily Writeups
⤷ Title: Russian Hackers Abuse Microsoft 365 OAuth in Sophisticated Phishing Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:26:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #cyber_espionage #cybersecurity #Entra ID #Microsoft 365 #OAuth #OAuth Abuse #OAuth Phishing #phishing #Russian APT #Russian threat actors #social engineering #UTA0352 #UTA0355 #Volexity
Daily CyberSecurity
Russian Hackers Abuse Microsoft 365 OAuth in Sophisticated Phishing Attacks
Volexity uncovers Russian threat actors abusing Microsoft 365 OAuth flows via phishing, impersonation, and device registration to access email accounts.
19 views
Daily Writeups
⤷ Title: NVIDIA NeMo Framework: High-Risk Vulnerabilities Allow Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:22:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_23249 #CVE_2025_23250 #CVE_2025_23251 #NeMo #nvidia #Remote Code Execution
Daily CyberSecurity
NVIDIA NeMo Framework: High-Risk Vulnerabilities Allow Remote Code Execution
NVIDIA discloses 3 vulnerabilities in the NeMo Framework enabling remote code execution and data tampering. Update to version 25.02 to secure your AI development.
18 views
Daily Writeups
⤷ Title: Verizon DBIR 2025: Vulnerability Exploitation Surges, Third-Party Breaches Double
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:13:27 +0000
════════════════════════
⌗ Tags: #Data Leak #Vulnerability #BYOD #Cyber Security #Data Breach #DBIR #GenAI #ransomware #third_party risk #Verizon #Vulnerability Exploitation
Daily CyberSecurity
Verizon DBIR 2025: Vulnerability Exploitation Surges, Third-Party Breaches Double
The Verizon 2025 DBIR reveals a surge in vulnerability exploitation and a doubling of third-party breaches. Learn key findings on ransomware, BYOD risks, and more.
14 views
Daily Writeups
⤷ Title: Grafana Patches CVE-2025-3260 and More in Critical Security Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:08:14 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authorization Bypass #CVE_2025_3260 #Dashboard Security #Data Source Proxy #Grafana #Grafana OSS #Open Source Monitoring #security patch #Trusted Types #XSS
Daily CyberSecurity
Grafana Patches CVE-2025-3260 and More in Critical Security Update
Grafana fixes critical CVE-2025-3260 and two medium bugs, urging users to update immediately to prevent unauthorized access and XSS exploits.
16 views
Daily Writeups
⤷ Title: FormBook Malware Spreads via Sophisticated Phishing Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:05:21 +0000
════════════════════════
⌗ Tags: #Malware #CVE_2017_11882 #cybersecurity #Formbook #Infostealer #malware #phishing #Process Hollowing
Daily CyberSecurity
FormBook Malware Spreads via Sophisticated Phishing Attack
A new phishing campaign delivers FormBook malware via Word docs, exploiting CVE-2017-11882. The fileless attack uses process hollowing to evade detection.
12 views
Daily Writeups
⤷ Title: WormLocker Ransomware Reemerges with Updated Variants
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:00:57 +0000
════════════════════════
⌗ Tags: #Malware #ANY.RUN #Cyber Security #malware #ransomware #system utilities #threat analysis #WormLocker
Daily CyberSecurity
WormLocker Ransomware Reemerges with Updated Variants
WormLocker ransomware is evolving! Discover how version 2.0 abuses system utilities to take over systems, as revealed by ANY.RUN analysis.
9 views
Daily Writeups
⤷ Title: A list of search engines for OSINT investigators and ethical hackers(PART 2)
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:36:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #search_engines #hacking #bug_bounty #tips
Medium
A list of search engines for OSINT investigators and ethical hackers(PART 2)
One of the must-read articles
12 views
Daily Writeups
⤷ Title: Hack The Box — Machine — Administrator Walkthrough (ES)
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:41:27 GMT
════════════════════════
⌗ Tags: #ctf_writeup #cybersecurity #hackthebox #hacking #windows
Medium
Hack The Box — Machine — Administrator Walkthrough (ES)
Descubre como ganar acceso a la máquina Administrador de HTB con explicaciones simples
9 views
Daily Writeups
⤷ Title: TryHackMe — Ultratech
════════════════════════
𐀪 Author: Charles-Thibault Sanchez
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:38:48 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #ctf #tryhackme_writeup #tryhackme
Medium
TryHackMe — Ultratech
Starting with an nmap scan, we discover four open ports, an FTP server on port 21, SSH on port 22, an API on port 8081 and finally a web…
13 views
Daily Writeups
⤷ Title: How Cyber Attacks Spread Through Your Supply Chain
════════════════════════
𐀪 Author: Paul Howard
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:53:42 GMT
════════════════════════
⌗ Tags: #suppy_chain #cybersecurity #cybercrime
Medium
How Cyber Attacks Spread Through Your Supply Chain
In the old days, a chain was only as strong as its weakest link. These days, that chain is digital – and if your supply chain has even one…
9 views
Daily Writeups
⤷ Title: Cloud Security in 2025: What Every Business Should Understand
════════════════════════
𐀪 Author: Michael Siopa
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:49:38 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cloud_security #cloud_services #cybersecurity #cloud_storage
Medium
Cloud Security in 2025: What Every Business Should Understand
Is the Cloud Automatically Secure? Not Quite.
12 views
Daily Writeups
⤷ Title: Agentic AI Is Fragile — Here’s What That Really Means
════════════════════════
𐀪 Author: Clearprüf
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:47:52 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #ai #identity #security
Medium
Agentic AI Is Fragile — Here’s What That Really Means
9 views
Daily Writeups
⤷ Title: 150 Interview Questions and Answers for Cybersecurity 7- 10
════════════════════════
𐀪 Author: Benjaminmillerdev
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:42:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #cybercrime #cyber_security_awareness
Medium
150 Interview Questions and Answers for Cybersecurity 7- 10
Chapter 7: Cryptography
9 views
Daily Writeups
⤷ Title: DawgCTF 2025 Writeup — All GEOSINT Challenges — Chall 1 to Chall 12
════════════════════════
𐀪 Author: xch0r
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 01:40:01 GMT
════════════════════════
⌗ Tags: #ctf_writeup #cybersecurity #ctf
Medium
DawgCTF 2025 Writeup — All GEOSINT Challenges — Chall 1 to Chall 12
GEOSINT — chall1 — Easy
16 views