Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: Mimo Returns: CVE-2025-32432 Exploited in Cryptomining and Proxyware Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:22:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #Craft CMS #cryptominer #CVE_2025_32432 #Hezb #malware #Mimo #proxyware #rce #unauthenticated #Vulnerability
Daily CyberSecurity
Mimo Returns: CVE-2025-32432 Exploited in Cryptomining and Proxyware Campaigns
Mimo (Hezb) is exploiting an unauthenticated RCE (CVE-2025-32432) in Craft CMS to deploy webshells, cryptominers, and proxyware. Patch now!
18 views
Daily Writeups
⤷ Title: Toxic Agent Flow: GitHub MCP Vulnerability Exposes Private Repositories
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:18:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI agent #cybersecurity #data exfiltration #github #MCP server #Prompt injection
Daily CyberSecurity
Toxic Agent Flow: GitHub MCP Vulnerability Exposes Private Repositories
A critical GitHub MCP server vulnerability allows AI agent hijacking via prompt injection, leading to data exfiltration from private repositories.
16 views
Daily Writeups
⤷ Title: Industrial Systems at Risk: Lenze VPN Flaws Lead to Root/SYSTEM Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:08:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #industrial control systems #IOT #Lenze #privilege escalation #rce #vpn
Daily CyberSecurity
Industrial Systems at Risk: Lenze VPN Flaws Lead to Root/SYSTEM Access
Lenze VPN Client for x500 IoT gateways has critical flaws allowing arbitrary code execution via local privilege escalation.
20 views
Daily Writeups
⤷ Title: Earth Lamia: China-Linked APT Targets Global Industries with Custom Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:01:21 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #backdoor #china #CVE #cyber_espionage #Earth Lamia #malware #PULSEPACK #sql injection
Daily CyberSecurity
Earth Lamia: China-Linked APT Targets Global Industries with Custom Backdoors
Earth Lamia, a China-linked APT, is targeting critical industries worldwide using SQL injection, CVEs, and custom backdoors like PULSEPACK.
20 views
Daily Writeups
⤷ Title: Reflected XSS and Blind OS Command Injection
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:23:05 GMT
════════════════════════
⌗ Tags: #cyebrsecurity #penetration_testing #bug_bounty_tips #bug_bounty #technology
Medium
Reflected XSS and Blind OS Command Injection
How a Misconfigured Email Parameter Led to Script Injection, Frame Embedding, and Remote DNS-Based OS Command Execution
40 views
Daily Writeups
⤷ Title: Ciphered Chaos: Bit-Flipping in the Wild
════════════════════════
𐀪 Author: Ahmed A. Sherif (Batee5a)
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:38:13 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #vulnerability #crypto #encryption #bug_bounty
Medium
Ciphered Chaos: Bit-Flipping in the Wild
Encryption does not mean secure
27 views
Daily Writeups
⤷ Title: Protecting Multitenancy Files: Why Leaking tenant-config.json Can Be a Disaster
════════════════════════
𐀪 Author: Cyber T
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:22:56 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #hacking #osint #cybersecurity #cyber
Medium
Protecting Multitenancy Files: Why Leaking tenant-config.json Can Be a Disaster
Note: This content is intended for educational purposes only. Always apply security best practices in production environments.
23 views
Daily Writeups
⤷ Title: Stack Canaries: The Tiny Guardians of Your Stack
════════════════════════
𐀪 Author: xwxrtxn
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:11:40 GMT
════════════════════════
⌗ Tags: #reverse_engineering #cybersecurity #hacking #cyber_security_awareness #linux
Medium
Stack Canaries: The Tiny Guardians of Your Stack
When it comes to memory corruption attacks like buffer overflows, stack canaries are one of the oldest — and most effective — lines of…
25 views
Daily Writeups
⤷ Title: Roadmap Cysec 5 Tahun Menjadi Purple Team
════════════════════════
𐀪 Author: mie ayam
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:50:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #roadmaps #purple_team
Medium
Roadmap Cysec 5 Tahun Menjadi Purple Team
📅 Tahun 1: Fondasi Cybersecurity & Pemahaman Sistem
26 views
Daily Writeups
⤷ Title: Remote Control: How DragonForce Hijacked MSP Tools to Launch a Ransomware Rampage
════════════════════════
𐀪 Author: Lyra Strix
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:44:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_intelligence #intelligence #emerging_threats
Medium
Remote Control: How DragonForce Hijacked MSP Tools to Launch a Ransomware Rampage
A recent cyberattack attributed to the DragonForce ransomware group has exposed the vulnerabilities inherent in the tools managed service…
23 views
Daily Writeups
⤷ Title: Roadmap Cyber ​​Security, in the next 5 years: My version as a digital forensic investigator.
════════════════════════
𐀪 Author: Irfanbayu
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:25:56 GMT
════════════════════════
⌗ Tags: #digital_forensics #beginners_guide #roadmaps #cybersecurity
Medium
Roadmap Cyber ​​Security, in the next 5 years: My version as a digital forensic investigator.
Being a digital forensic investigator is not just about dismantling hidden files or analyzing digital footprints. This is a matter of…
18 views
Daily Writeups
⤷ Title: Why Small Businesses Are the #1 Cyber Target in 2025
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:22:42 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #cyberattack #small_business #lessons_learned
Medium
Why Small Businesses Are the #1 Cyber Target in 2025
When you think of cyberattacks, you probably imagine billion-dollar corporations under siege. But what if we told you a tiny, family-owned…
18 views
Daily Writeups
⤷ Title: Roadmap Belajar Cyber Security (2025–2030): Fundamental untuk Pemula Hingga Profesional Dalam 5…
════════════════════════
𐀪 Author: Rangga Ananda S
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:57:41 GMT
════════════════════════
⌗ Tags: #fundamentals #cybersecurity #roadmaps
Medium
Roadmap Belajar Cyber Security (2025–2030): Fundamental untuk Pemula Hingga Profesional Dalam 5 Tahun Mendatang
Dunia digital berkembang begitu cepat, dan bersamaan dengan itu, ancaman terhadap keamanan informasi pun meningkat drastis. Cyber security…
21 views
Daily Writeups
⤷ Title: ️ Kubernetes Attack Tree: Visualizing Container Security Threats
════════════════════════
𐀪 Author: Michel Alan López
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:52:26 GMT
════════════════════════
⌗ Tags: #container_security #prometheus #cybersecurity #kubernetes_security #k8s_security
Medium
🛡️ Kubernetes Attack Tree: Visualizing Container Security Threats
As Kubernetes continues to dominate the container orchestration landscape, the importance of securing its internal components becomes ever…
20 views
Daily Writeups
⤷ Title: What should we do if Ransomware already face the
════════════════════════
𐀪 Author: Salmajhrx
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:51:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #ransomware_attack
Medium
What should we do if Ransomware already face the
Terdapat 5 step,
25 views
Daily Writeups
⤷ Title: How a Simple SQL Injection Took Down an NGO Website
════════════════════════
𐀪 Author: Sam Galope
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:42:27 GMT
════════════════════════
⌗ Tags: #cyber_defense #technology #blogger #cybersecurity #ethical_hacking
Medium
How a Simple SQL Injection Took Down an NGO Website
And How You Can Stop It from Happening to You
39 views
Daily Writeups
⤷ Title: Filmes e livros sobre hackers e segurança cibernética
════════════════════════
𐀪 Author: Moprius
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:38:29 GMT
════════════════════════
⌗ Tags: #favorites #hacker #cybersecurity #books #movies
Medium
Filmes e livros sobre hackers e segurança cibernética
Há tempos eu queria compartilhar uma lista de filmes, séries e livros sobre hacking e segurança digital que, na minha opinião, valem…
47 views
Daily Writeups
⤷ Title: Citrix Alert: XenServer VM Tools Flaws Risk Windows VM Compromise
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 03:51:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #Citrix #security #virtualization #VM Tools #windows #XenServer
Daily CyberSecurity
Citrix Alert: XenServer VM Tools Flaws Risk Windows VM Compromise
Citrix has patched high-severity flaws in XenServer VM Tools for Windows that could allow attackers to compromise guest VMs. Update to version 9.4.1.
35 views
Daily Writeups
⤷ Title: Critical (CVSS 9.8): Cyrus IMAP Flaw Risks Full System Compromise on openSUSE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 03:04:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #cybersecurity #Cyrus IMAP #openSUSE #privilege escalation #root access
Daily CyberSecurity
Critical (CVSS 9.8): Cyrus IMAP Flaw Risks Full System Compromise on openSUSE
A critical Cyrus IMAP vulnerability (CVSS 9.8) on openSUSE allows unprivileged users to gain root access, risking full system compromise.
27 views
Daily Writeups
⤷ Title: Amazon Redshift Alert: OAuth2 Vulnerability Exposes Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 02:29:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #Amazon Redshift #Azure #CVSS #OAuth2 #Python Connector #security
Daily CyberSecurity
Amazon Redshift Alert: OAuth2 Vulnerability Exposes Data
Amazon Redshift Python Connector has a high severity vulnerability allowing OAuth2 token interception due to missing SSL validation.
23 views
Daily Writeups
⤷ Title: Firefox Alert: Zero-Interaction Exploit in libvpx Allows Arbitrary Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 02:13:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #browser security #firefox #libvpx #mozilla #rce #Remote Code Execution #WebRTC
Daily CyberSecurity
Firefox Alert: Zero-Interaction Exploit in libvpx Allows Arbitrary Code Execution
A critical Firefox vulnerability in libvpx allows remote code execution without user interaction beyond normal Browse. Update immediately!
17 views