Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Spring Framework Flaw Allows Unauthorized Access via Security Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 01:39:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_41232 #java #security #Spring Framework #Spring Security
Daily CyberSecurity
Spring Framework Flaw Allows Unauthorized Access via Security Bypass
A Spring Framework vulnerability can allow unauthorized access! Learn how it bypasses security annotations and how to fix it.
15 views
Daily Writeups
⤷ Title: High-Risk RAGFlow Flaw: Account Takeover Possible (No Patch, PoC Available)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:25:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #AI #authentication #Brute Force #CVE_2025_48187 #Exploit #RAG #RAGFlow #security
Daily CyberSecurity
High-Risk RAGFlow Flaw: Account Takeover Possible (No Patch, PoC Available)
RAGFlow is vulnerable to account takeover. This article details the brute-force exploit and the urgent security risk (CVE-2025-48187, No Patch)
24 views
Daily Writeups
⤷ Title: Can Your Firewall Be Hacked? Severe Flaws Found in pfSense
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:20:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #Command Injection #CVE_2024_54779 #CVE_2024_54780 #CVE_2024_57273 #Exploit #firewall security #Firewall Vulnerabilities #Hacking #Navy Titanium #network_security #pfSense #rce #security risk #XSS
Daily CyberSecurity
Can Your Firewall Be Hacked? Severe Flaws Found in pfSense
Serious vulnerabilities in pfSense put networks at risk. Could your firewall be hacked? Learn about the exploits and how to stay safe.
16 views
Daily Writeups
⤷ Title: More_Eggs Malware Deep Dive: Abusing ieuinit.exe and Polymorphic JavaScript
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:12:18 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Threat #DLL side_loading #ieuinit.exe #javascript #Malware Analysis #More_Eggs #Obfuscation
Daily CyberSecurity
More_Eggs Malware Deep Dive: Abusing ieuinit.exe and Polymorphic JavaScript
A technical analysis of the More_Eggs malware, detailing its use of ieuinit.exe abuse, DLL side-loading, and polymorphic JavaScript.
19 views
Daily Writeups
⤷ Title: Leaky WordPress: Private Post Titles at Risk for 1 Billion Sites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:09:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Exploit #Hacking #pingback #security vulnerability #Website Security #wordpress #XML_RPC
Daily CyberSecurity
Leaky WordPress: Private Post Titles at Risk for 1 Billion Sites
A WordPress vulnerability puts private information at risk for nearly a billion websites. Can your site's draft titles be stolen?
18 views
Daily Writeups
⤷ Title: DBatLoader Analysis: Evasive Malware Uses DLL Side-Loading and Anti-Detection Tactics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:02:07 +0000
════════════════════════
⌗ Tags: #Malware
Daily CyberSecurity
DBatLoader Analysis: Evasive Malware Uses DLL Side-Loading and Anti-Detection Tactics
In-depth analysis of DBatLoader malware: Learn how it uses DLL side-loading, anti-detection techniques, and delivers SnakeKeylogger.
16 views
Daily Writeups
⤷ Title: Hacking Oauth:A bug bounty hunter guide
════════════════════════
𐀪 Author: Canonminibeast
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:19:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bug_bounty #bug_bounty_tips #bug_bounty_writeup
Medium
Hacking Oauth:A bug bounty hunter guide
what is oauth btw…?
18 views
Daily Writeups
⤷ Title: Master Google Dorks — Search Techniques for Cybersecurity and OSINT
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:01:41 GMT
════════════════════════
⌗ Tags: #infosec #osint #ethical_hacking #cybersecurity #bug_bounty
Medium
Master Google Dorks — Search Techniques for Cybersecurity and OSINT
Learn how to use Google as a powerful cybersecurity tool. Ideal for pen testers, bug bounty hunters, and more.
22 views
Daily Writeups
⤷ Title: Why Didn’t Anyone Warn Me That Wallet Backups Can Be Hacked Too?
════════════════════════
𐀪 Author: Pamela Talks
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:45:43 GMT
════════════════════════
⌗ Tags: #hacking #phishing #crypto_wallet #cryptocurrency_investment #backup
Medium
Why Didn’t Anyone Warn Me That Wallet Backups Can Be Hacked Too?
Because we assumed you wouldn’t store them on your phone. Or in Google Docs. Or email them to yourself. But here we are.
20 views
Daily Writeups
⤷ Title: 5 Cybersecurity Habits That Make You Instantly More Valuable on Any Team
════════════════════════
𐀪 Author: Kyle Barbre
════════════════════════
ⴵ Time: Tue, 20 May 2025 01:06:59 GMT
════════════════════════
⌗ Tags: #habit_building #infosec #cybersecurity
Medium
5 Cybersecurity Habits That Make You Instantly More Valuable on Any Team
By Kyle Barbre
15 views
Daily Writeups
⤷ Title: Digital Detectives: The Unsung Heroes behind Cyber Investigations
════════════════════════
𐀪 Author: Fun with logs | Stories behind the evidence
════════════════════════
ⴵ Time: Tue, 20 May 2025 01:27:33 GMT
════════════════════════
⌗ Tags: #cybercrime #legaltech #incident_response #digital_forensics #cybersecurity
Medium
Digital Detectives: The Unsung Heroes behind Cyber Investigations
Ever wondered who investigates when data becomes a crime scene?
14 views
Daily Writeups
⤷ Title: How to Build a Risk Register That Actually Helps Decision-Making
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Tue, 20 May 2025 01:17:46 GMT
════════════════════════
⌗ Tags: #risk_register #information_security #risk #programming #cybersecurity
Medium
How to Build a Risk Register That Actually Helps Decision-Making
Most organizations keep a risk register because they’re supposed to. But here’s the problem:
25 views
Daily Writeups
⤷ Title: Third Parties and Machine Credentials: The Silent Drivers Behind 2025’s Worst Data Breaches
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:44:50 GMT
════════════════════════
⌗ Tags: #information_security #cybercrime #cybersecurity #identity #ai
Medium
Third Parties and Machine Credentials: The Silent Drivers Behind 2025’s Worst Data Breaches
Every year, the Verizon Data Breach Investigations Report (DBIR) gives us a peek behind the curtain of the world’s worst cyber incidents…
20 views
Daily Writeups
⤷ Title: Mastering OT Cybersecurity: A Deep-Dive Implementation Blueprint with ATT&CK Reference Architecture
════════════════════════
𐀪 Author: Prabhu Perumal
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:36:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #attack_surface #ot_cybersecurity
Medium
Mastering OT Cybersecurity: A Deep-Dive Implementation Blueprint with ATT&CK Reference Architecture
Introduction:
33 views
Daily Writeups
⤷ Title: AI-Era Security Architecture: Bridging Technology and Human Dynamics
════════════════════════
𐀪 Author: Shittu
════════════════════════
ⴵ Time: Tue, 20 May 2025 00:17:36 GMT
════════════════════════
⌗ Tags: #security_architecture #cyber_security_strategy #ai_security #cybersecurity #enterprise_security
Medium
AI-Era Security Architecture: Bridging Technology and Human Dynamics
Having contributed to enterprise security architecture practices across many organisations in transportation, energy, financial services…
37 views
Daily Writeups
⤷ Title: Emergency Fix: Microsoft Releases Update for BitLocker Recovery Issue
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 03:31:36 +0000
════════════════════════
⌗ Tags: #Windows #bitlocker #data recovery #Intel TXT #KB5061768 #Windows 10 #Windows Update
Daily CyberSecurity
Emergency Fix: Microsoft Releases Update for BitLocker Recovery Issue
Microsoft released an emergency update to fix the BitLocker recovery issue caused by a recent Windows update. Install KB5061768 now.
29 views
Daily Writeups
⤷ Title: High DoS Risk: Multer Flaws Threaten Millions of Node.js Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 02:51:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_47935 #CVE_2025_47944 #Denial of Service #dos #Multer #Node.js #security #web development
Daily CyberSecurity
High DoS Risk: Multer Flaws Threaten Millions of Node.js Apps
High DoS risk in Multer! These flaws threaten millions of Node.js applications. Update now to avoid these attacks.
22 views
Daily Writeups
⤷ Title: Critical Risk (CVSS 9.9): samlify Flaw Exposes SSO in Widely Used Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 02:39:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication #CVE_2025_47949 #SAML #samlify #security #Single Sign_On #SSO
Daily CyberSecurity
Critical Risk (CVSS 9.9): samlify Flaw Exposes SSO in Widely Used Library
Critical vulnerability (CVSS 9.9) in samlify! This flaw puts many SSO implementations at risk, affecting a library with 768,000+ monthly downloads.
15 views
Daily Writeups
⤷ Title: SAP NetWeaver RCE: Zero-Day Allows File Uploads, Qilin Ransomware Connection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 02:25:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #file upload #Qilin #ransomware #rce #Remote Code Execution #SAP NetWeaver #zero_day
Daily CyberSecurity
SAP NetWeaver RCE: Zero-Day Allows File Uploads, Qilin Ransomware Connection
Details on a zero-day vulnerability (CVE-2025-31324) in SAP NetWeaver that allows file uploads and its link to the Qilin ransomware group.
16 views
Daily Writeups
⤷ Title: Earlier this year, I fell victim to an elaborate phishing scam.
════════════════════════
𐀪 Author: Robertdreher
════════════════════════
ⴵ Time: Tue, 20 May 2025 03:35:46 GMT
════════════════════════
⌗ Tags: #btc #hacking #recover_scammed_bitcoin #recovery #recover_scammed_usdt
Medium
Earlier this year, I fell victim to an elaborate phishing scam.
Their expertise turned my nightmare into a hopeful ending, and I wouldn’t hesitate to recommend them to anyone who finds themselves in a…
12 views
Daily Writeups
⤷ Title: Five Ways Cybercriminals Crack Your Passwords (And How to Stay One Step Ahead)
════════════════════════
𐀪 Author: Manish Shivanandhan
════════════════════════
ⴵ Time: Tue, 20 May 2025 03:02:53 GMT
════════════════════════
⌗ Tags: #hacking #passwords #ethical_hacking #cybersecurity #security
Medium
Five Ways Cybercriminals Crack Your Passwords (And How to Stay One Step Ahead)
Your password is the front door to your digital life — don’t leave it unlocked. Learn how hackers break in and how to stop them before…
29 views