Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Cisco Patches Two Vulnerabilities in CCP and ISE: Proof-of-Concept Exploits Publicly Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 03:16:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Upload #Cisco Vulnerability #CVE_2025_20129 #CVE_2025_20130 #Information Disclosure
Daily CyberSecurity
Cisco Patches Two Vulnerabilities in CCP and ISE: Proof-of-Concept Exploits Publicly Available
Cisco addresses CVE-2025-20129 and CVE-2025-20130 in CCP and ISE platforms. PoC exploits are public. Admins urged to migrate to fixed versions.
18 views
Daily Writeups
⤷ Title: 12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 03:05:18 +0000
════════════════════════
⌗ Tags: #Data Leak #App Platform #cybersecurity #Data Breach #Financial Data #Influencers #Passion.io #PII #security incident #Unprotected Database
Daily CyberSecurity
12.2TB of User Data Exposed in Passion.io Breach: Over 3.6 Million Records Left Unprotected
12TB of unencrypted user data, including PII and financial records, allegedly from Passion.io, was exposed online. A critical security reminder for all!
17 views
Daily Writeups
⤷ Title: Critical Dell Bug (CVSS 9.8) Lets Unauthenticated Attackers Fully Compromise the System
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 01:51:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Data Security #dell #NAS #NFS #OneFS #patch #PowerScale #sql injection
Daily CyberSecurity
Critical Dell Bug (CVSS 9.8) Lets Unauthenticated Attackers Fully Compromise the System
Unauthenticated attackers can fully compromise Dell PowerScale OneFS. Patch now to stop critical NFS access flaws.
18 views
Daily Writeups
⤷ Title: CVE-2025-48951: Critical Deserialization Flaw in Auth0 PHP SDK Threatens Millions of Applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 01:32:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Auth0 #cybersecurity #Deserialization #Laravel #patch #php #rce #SDK #Symfony #Vulnerability #Web Security #wordpress
Daily CyberSecurity
CVE-2025-48951: Critical Deserialization Flaw in Auth0 PHP SDK Threatens Millions of Applications
A critical Auth0 PHP SDK deserialization flaw (CVE-2025-48951, CVSS 9.3) allows unauthenticated RCE in web apps. Patch to v8.14.0+ immediately!
36 views
Daily Writeups
⤷ Title: Cisco Warns of High-Severity SSH Security Flaws in UCS IMC and NDFC Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:34:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cisco #Cloud Security #Data Center #enterprise #IMC #NDFC #patch #privilege escalation #ssh #Vulnerability
Daily CyberSecurity
Cisco Warns of High-Severity SSH Security Flaws in UCS IMC and NDFC Systems
Cisco issues advisories for high-severity flaws (CVSS 8.8, 8.7) in IMC and NDFC, risking privilege escalation and device impersonation. Patch immediately!
17 views
Daily Writeups
⤷ Title: Sophos Unmasks Sakura RAT: Hackers Hacking Hackers with Backdoored Malware!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:29:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #backdoor #cybersecurity #Game Cheats #github #malware #Remote Access Trojan #Sakura RAT #Sophos X_Ops #threat actor
Daily CyberSecurity
Sophos Unmasks Sakura RAT: Hackers Hacking Hackers with Backdoored Malware!
Sophos X-Ops found a backdoored Sakura RAT targeting hackers and cheaters, spreading info-stealers via hidden scripts in open-source projects.
14 views
Daily Writeups
⤷ Title: Alert: Fake DocuSign & Gitcodes Pages Install NetSupport RAT Malware!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:25:35 +0000
════════════════════════
⌗ Tags: #Malware #cyberattack #cybersecurity #Docusign #DomainTools #Gitcodes #malware #NetSupport RAT #phishing #powershell #Remote Access Trojan
Daily CyberSecurity
Alert: Fake DocuSign & Gitcodes Pages Install NetSupport RAT Malware!
A new campaign uses fake DocuSign & Gitcodes pages to trick users into manually installing NetSupport RAT, gaining remote control.
12 views
Daily Writeups
⤷ Title: CVE-2025-48947: Session Cookies at Risk in Auth0 Next.js SDK
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:18:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Auth0 #CDN #cybersecurity #Next.js #SDK #security update #Session Hijacking #Vulnerability #web development
Daily CyberSecurity
CVE-2025-48947: Session Cookies at Risk in Auth0 Next.js SDK
Auth0 Next.js SDK flaw (CVE-2025-48947, CVSS 7.7) could expose session cookies via CDNs. Patch to v4.6.1 immediately to secure your app!
16 views
Daily Writeups
⤷ Title: IBM X-Force Uncovers Hive0131’s Sophisticated DCRat Campaign Targeting Colombian Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:18:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Colombia #cybersecurity #DCRat #Hive0131 #IBM X_Force #malware #phishing #Remote Access Trojan #VMDetectLoader
Daily CyberSecurity
IBM X-Force Uncovers Hive0131’s Sophisticated DCRat Campaign Targeting Colombian Users
IBM X-Force warns of a new phishing campaign by Hive0131 targeting Colombian users with DCRat malware via fake legal notices.
10 views
Daily Writeups
⤷ Title: Kaspersky Exposes Hidden Dangers: Are Your Containers Truly Secure?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:12:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloud_native #container security #Containerized Environments #cybersecurity #docker #Incident Response #kaspersky #Kubernetes #Threat Detection
Daily CyberSecurity
Kaspersky Exposes Hidden Dangers: Are Your Containers Truly Secure?
Kaspersky warns organizations are overestimating container isolation. New analysis reveals hidden attack surfaces and crucial detection blind spots.
12 views
Daily Writeups
⤷ Title: ViperSoftX Evolves: New PowerShell Malware Boasts Stealth & Persistence
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 00:08:16 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #cryptocurrency #cyberattack #K7 Labs #malware #persistence #powershell #Stealth #Threat Hunting #ViperSoftX
Daily CyberSecurity
ViperSoftX Evolves: New PowerShell Malware Boasts Stealth & Persistence
K7 Labs details an evolved PowerShell malware, ViperSoftX 2025, featuring enhanced modularity, stealth, and persistence for advanced attacks.
12 views
Daily Writeups
⤷ Title: How Hackers Help NASA Stay Secure: Inside the NASA VDP
════════════════════════
𐀪 Author: 127.0.0.1
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:54:11 GMT
════════════════════════
⌗ Tags: #nasa #vdp #hall_of_fame #bug_bounty #cybersecurity
Medium
How Hackers Help NASA Stay Secure: Inside the NASA VDP
Hackers Wanted: NASA’s Bug Hunt in Real
15 views
Daily Writeups
⤷ Title: ☠️ CORS of Destruction: How Misconfigured Origins Let Me Read Everything
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:53:57 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #money #infosec #cybersecurity
Medium
☠️ CORS of Destruction: How Misconfigured Origins Let Me Read Everything 📜🌐
Free Link 🎈
22 views
Daily Writeups
⤷ Title: Cracking JWTs: A Bug Bounty Hunting Guide [Part 4]
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:51:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #jwt #jwt_exploitation #jwt_authentication #bug_bounty
Medium
Cracking JWTs: A Bug Bounty Hunting Guide [Part 4]
JWT Authentication Bypass via JKU Header Injection — A Deep Dive into a Critical Misconfiguration
23 views
Daily Writeups
⤷ Title: Cookie Attributes — More Than Just Name & Value
════════════════════════
𐀪 Author: phoenixcatalan
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:51:24 GMT
════════════════════════
⌗ Tags: #development #hacking #infosec #bug_bounty #devops
Medium
🔐 Cookie Attributes — More Than Just Name & Value
Understanding the Security & Scope Behind Every Cookie
20 views
Daily Writeups
⤷ Title: Shodan Dorks to Find PII Data & Leaks
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:50:42 GMT
════════════════════════
⌗ Tags: #dorks #dorking #shodan #hacking #bug_bounty
Medium
Shodan Dorks to Find PII Data & Leaks
Shodan dorks to find publicly exposed PII data of your target
18 views
Daily Writeups
⤷ Title: Bypassing HackerOne Report Ban Using API Key
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:49:31 GMT
════════════════════════
⌗ Tags: #tips_and_tricks #penetration_testing #bug_bounty #bug_bounty_tips #technology
Medium
Bypassing HackerOne Report Ban Using API Key
How a Banned Researcher Could Still Submit Reports Using the REST API
14 views
Daily Writeups
⤷ Title: When APIs Don’t Check Roles: Broken Authorization in Customer Deletion Endpoint
════════════════════════
𐀪 Author: callgh0st
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 05:48:35 GMT
════════════════════════
⌗ Tags: #roles #bug_bounty #burpsuite #hacking #broken
Medium
When APIs Don’t Check Roles: Broken Authorization in Customer Deletion Endpoint
In the Name of Allah, the Most Beneficent, the Most Merciful.
All the praises and thanks be to Allah, the Lord of the ‘Alamin (mankind…
10 views
Daily Writeups
⤷ Title: Broken Object Fiesta: How I Used IDOR, No Auth, and a Little Luck to Pull User Data
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 08:18:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #money #hacking #infosec
Medium
🎉 Broken Object Fiesta: How I Used IDOR, No Auth, and a Little Luck to Pull User Data 🎉🔍
Hey there!😁
14 views
Daily Writeups
⤷ Title: ️ OSINT for User Information — How to Find People Using Public Data
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 08:12:18 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #cybersecurity #infosec #osint
Medium
🕵️ OSINT for User Information — How to Find People Using Public Data
What if you could find someone’s email, social handles, breached passwords, or even their office location — all without hacking?
13 views
Daily Writeups
⤷ Title: ️ NASA/JPL Credentials & Email Leak via Public Pastebin — An Unexpected Find
════════════════════════
𐀪 Author: FufuFafa
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 07:46:06 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bugbounty_writeup #cybersecurity #bug_bounty #hacking
Medium
🛰️ NASA/JPL Credentials & Email Leak via Public Pastebin — An Unexpected Find
Hey fellow hackers and bug bounty hunters!  Today, I’m sharing a fun little story about how I stumbled across something pretty wild…
15 views