Daily Writeups
@Daily_Writeups
4.04K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.04K subscribers
Daily Writeups
⤷ Title: OpenAI vs. Court Order: The Battle to Protect Your ChatGPT Privacy
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 07:07:41 +0000
════════════════════════
⌗ Tags: #Technology #API #ChatGPT #copyright infringement #data retention #Data Security #lawsuits #legal challenge #OpenAI #privacy #user logs
Daily CyberSecurity
OpenAI vs. Court Order: The Battle to Protect Your ChatGPT Privacy
OpenAI is fighting a court order to retain all ChatGPT user logs, including deleted conversations, due to copyright infringement claims. This could impact global user privacy.
12 views
Daily Writeups
⤷ Title: Amazon’s $10 Billion AI Boost: North Carolina Lands Major Tech Expansion!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 07:00:26 +0000
════════════════════════
⌗ Tags: #Technology #Amazon #artificial intelligence #AWS #community investment #data centers #economic development #job creation #North Carolina #renewable energy #STEM education
Daily CyberSecurity
Amazon's $10 Billion AI Boost: North Carolina Lands Major Tech Expansion!
Amazon is investing $10B in North Carolina for AI infrastructure, creating 500+ high-skilled jobs and boosting the local economy and STEM education.
11 views
Daily Writeups
⤷ Title: Microsoft 365 Update Channels – Major Changes Ahead for IT Admins!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 06:56:29 +0000
════════════════════════
⌗ Tags: #Technology #Current Channel #deprecation #Enterprise Updates #feature updates #IT Administration #Microsoft 365 #Microsoft 365 Admin Center #Monthly Enterprise Channel #Security Updates #Semi_Annual Enterprise Channel #support lifecycle #unattended devices
Daily CyberSecurity
Microsoft 365 Update Channels - Major Changes Ahead for IT Admins!
Microsoft 365 update channels are changing! Semi-Annual Enterprise Channel support is reduced, and Preview is deprecated. IT admins must review & adjust immediately for smooth deployment.
31 views
Daily Writeups
⤷ Title: CVE-2025-49113: Roundcube RCE Exploit Unveiled—The Swiss Army Knife of Webmail Just Got a Weaponized Blade
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 03:42:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_49113 #PHP Object Injection #Remote Code Execution #Roundcube #Webmail Security
Daily CyberSecurity
CVE-2025-49113: Roundcube RCE Exploit Unveiled—The Swiss Army Knife of Webmail Just Got a Weaponized Blade
A critical RCE flaw (CVE-2025-49113) in Roundcube is under active exploitation with PoC sold on forums. Patch immediately to v1.5.10 or v1.6.11!
25 views
Daily Writeups
⤷ Title: Cisco Patches Two Vulnerabilities in CCP and ISE: Proof-of-Concept Exploits Publicly Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 03:16:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Upload #Cisco Vulnerability #CVE_2025_20129 #CVE_2025_20130 #Information Disclosure
Daily CyberSecurity
Cisco Patches Two Vulnerabilities in CCP and ISE: Proof-of-Concept Exploits Publicly Available
Cisco addresses CVE-2025-20129 and CVE-2025-20130 in CCP and ISE platforms. PoC exploits are public. Admins urged to migrate to fixed versions.
18 views
Daily Writeups
⤷ Title: 12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 03:05:18 +0000
════════════════════════
⌗ Tags: #Data Leak #App Platform #cybersecurity #Data Breach #Financial Data #Influencers #Passion.io #PII #security incident #Unprotected Database
Daily CyberSecurity
12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected
12TB of unencrypted user data, including PII and financial records, allegedly from Passion.io, was exposed online. A critical security reminder for all!
17 views
Daily Writeups
⤷ Title: Critical Dell Bug (CVSS 9.8) Lets Unauthenticated Attackers Fully Compromise the System
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 01:51:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Data Security #dell #NAS #NFS #OneFS #patch #PowerScale #sql injection
Daily CyberSecurity
Critical Dell Bug (CVSS 9.8) Lets Unauthenticated Attackers Fully Compromise the System
Unauthenticated attackers can fully compromise Dell PowerScale OneFS. Patch now to stop critical NFS access flaws.
18 views
Daily Writeups
⤷ Title: CVE-2025-48951: Critical Deserialization Flaw in Auth0 PHP SDK Threatens Millions of Applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 01:32:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Auth0 #cybersecurity #Deserialization #Laravel #patch #php #rce #SDK #Symfony #Vulnerability #Web Security #wordpress
Daily CyberSecurity
CVE-2025-48951: Critical Deserialization Flaw in Auth0 PHP SDK Threatens Millions of Applications
A critical Auth0 PHP SDK deserialization flaw (CVE-2025-48951, CVSS 9.3) allows unauthenticated RCE in web apps. Patch to v8.14.0+ immediately!
36 views
Daily Writeups
⤷ Title: Cisco Warns of High-Severity SSH Security Flaws in UCS IMC and NDFC Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:34:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cisco #Cloud Security #Data Center #enterprise #IMC #NDFC #patch #privilege escalation #ssh #Vulnerability
Daily CyberSecurity
Cisco Warns of High-Severity SSH Security Flaws in UCS IMC and NDFC Systems
Cisco issues advisories for high-severity flaws (CVSS 8.8, 8.7) in IMC and NDFC, risking privilege escalation and device impersonation. Patch immediately!
17 views
Daily Writeups
⤷ Title: Sophos Unmasks Sakura RAT: Hackers Hacking Hackers with Backdoored Malware!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:29:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #backdoor #cybersecurity #Game Cheats #github #malware #Remote Access Trojan #Sakura RAT #Sophos X_Ops #threat actor
Daily CyberSecurity
Sophos Unmasks Sakura RAT: Hackers Hacking Hackers with Backdoored Malware!
Sophos X-Ops found a backdoored Sakura RAT targeting hackers and cheaters, spreading info-stealers via hidden scripts in open-source projects.
14 views
Daily Writeups
⤷ Title: Alert: Fake DocuSign & Gitcodes Pages Install NetSupport RAT Malware!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:25:35 +0000
════════════════════════
⌗ Tags: #Malware #cyberattack #cybersecurity #Docusign #DomainTools #Gitcodes #malware #NetSupport RAT #phishing #powershell #Remote Access Trojan
Daily CyberSecurity
Alert: Fake DocuSign & Gitcodes Pages Install NetSupport RAT Malware!
A new campaign uses fake DocuSign & Gitcodes pages to trick users into manually installing NetSupport RAT, gaining remote control.
12 views
Daily Writeups
⤷ Title: CVE-2025-48947: Session Cookies at Risk in Auth0 Next.js SDK
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:18:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Auth0 #CDN #cybersecurity #Next.js #SDK #security update #Session Hijacking #Vulnerability #web development
Daily CyberSecurity
CVE-2025-48947: Session Cookies at Risk in Auth0 Next.js SDK
Auth0 Next.js SDK flaw (CVE-2025-48947, CVSS 7.7) could expose session cookies via CDNs. Patch to v4.6.1 immediately to secure your app!
16 views
Daily Writeups
⤷ Title: IBM X-Force Uncovers Hive0131’s Sophisticated DCRat Campaign Targeting Colombian Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:18:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Colombia #cybersecurity #DCRat #Hive0131 #IBM X_Force #malware #phishing #Remote Access Trojan #VMDetectLoader
Daily CyberSecurity
IBM X-Force Uncovers Hive0131’s Sophisticated DCRat Campaign Targeting Colombian Users
IBM X-Force warns of a new phishing campaign by Hive0131 targeting Colombian users with DCRat malware via fake legal notices.
10 views
Daily Writeups
⤷ Title: Kaspersky Exposes Hidden Dangers: Are Your Containers Truly Secure?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:12:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloud_native #container security #Containerized Environments #cybersecurity #docker #Incident Response #kaspersky #Kubernetes #Threat Detection
Daily CyberSecurity
Kaspersky Exposes Hidden Dangers: Are Your Containers Truly Secure?
Kaspersky warns organizations are overestimating container isolation. New analysis reveals hidden attack surfaces and crucial detection blind spots.
12 views
Daily Writeups
⤷ Title: ViperSoftX Evolves: New PowerShell Malware Boasts Stealth & Persistence
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:08:16 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #cryptocurrency #cyberattack #K7 Labs #malware #persistence #powershell #Stealth #Threat Hunting #ViperSoftX
Daily CyberSecurity
ViperSoftX Evolves: New PowerShell Malware Boasts Stealth & Persistence
K7 Labs details an evolved PowerShell malware, ViperSoftX 2025, featuring enhanced modularity, stealth, and persistence for advanced attacks.
12 views
Daily Writeups
⤷ Title: How Hackers Help NASA Stay Secure: Inside the NASA VDP
════════════════════════
𐀪 Author: 127.0.0.1
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:54:11 GMT
════════════════════════
⌗ Tags: #nasa #vdp #hall_of_fame #bug_bounty #cybersecurity
Medium
How Hackers Help NASA Stay Secure: Inside the NASA VDP
Hackers Wanted: NASA’s Bug Hunt in Real
15 views
Daily Writeups
⤷ Title: ☠️ CORS of Destruction: How Misconfigured Origins Let Me Read Everything
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:53:57 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #money #infosec #cybersecurity
Medium
☠️ CORS of Destruction: How Misconfigured Origins Let Me Read Everything 📜🌐
Free Link 🎈
22 views
Daily Writeups
⤷ Title: Cracking JWTs: A Bug Bounty Hunting Guide [Part 4]
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:51:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #jwt #jwt_exploitation #jwt_authentication #bug_bounty
Medium
Cracking JWTs: A Bug Bounty Hunting Guide [Part 4]
JWT Authentication Bypass via JKU Header Injection — A Deep Dive into a Critical Misconfiguration
23 views
Daily Writeups
⤷ Title: Cookie Attributes — More Than Just Name & Value
════════════════════════
𐀪 Author: phoenixcatalan
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:51:24 GMT
════════════════════════
⌗ Tags: #development #hacking #infosec #bug_bounty #devops
Medium
🔐 Cookie Attributes — More Than Just Name & Value
Understanding the Security & Scope Behind Every Cookie
20 views
Daily Writeups
⤷ Title: Shodan Dorks to Find PII Data & Leaks
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:50:42 GMT
════════════════════════
⌗ Tags: #dorks #dorking #shodan #hacking #bug_bounty
Medium
Shodan Dorks to Find PII Data & Leaks
Shodan dorks to find publicly exposed PII data of your target
18 views
Daily Writeups
⤷ Title: Bypassing HackerOne Report Ban Using API Key
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:49:31 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #penetration_testing #bug_bounty #bug_bounty_tips #technology
Medium
Bypassing HackerOne Report Ban Using API Key
How a Banned Researcher Could Still Submit Reports Using the REST API
14 views