Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: QNAP Fixes SQL Injection and Certificate Validation Flaws in Qsync Central and File Station 5
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:43:36 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #data compromise #File Station 5 #network storage #QNAP #Qsync Central #Remote Code Execution #security update #sql injection
Daily CyberSecurity
QNAP Fixes SQL Injection and Certificate Validation Flaws in Qsync Central and File Station 5
QNAP releases urgent patches for high-severity flaws in Qsync Central and File Station 5, enabling RCE and data compromise. Update immediately!
12 views
Daily Writeups
⤷ Title: Critical CVSS 10.0 Flaws in B. Braun OnlineSuite Threaten Healthcare Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:39:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #B. Braun #CVE_2025_3322 #cybersecurity #healthcare #IT security #medical devices #OnlineSuite AP 3.0 #patient safety #rce #Vulnerabilities
Daily CyberSecurity
Critical CVSS 10.0 Flaws in B. Braun OnlineSuite Threaten Healthcare Infrastructure
B. Braun's OnlineSuite AP 3.0 faces severe vulnerabilities, including a CVSS 10.0 RCE, risking hospital IT and data. Immediate patching is crucial.
11 views
Daily Writeups
⤷ Title: UNC1151 Exploits Roundcube Flaw in Spear Phishing Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:35:31 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #APT #CERT Polska #Credential Theft #CVE_2024_42009 #cybersecurity #Roundcube #spear_phishing #UNC1151 #webmail #XSS
Daily CyberSecurity
UNC1151 Exploits Roundcube Flaw in Spear Phishing Attack
CERT Polska warns of a critical Roundcube XSS flaw (CVE-2024-42009) exploited by UNC1151 in spear phishing, stealing credentials and compromising Polish organizations.
11 views
Daily Writeups
⤷ Title: DuplexSpy RAT: New C# Malware Toolkit Emerges on GitHub
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:30:48 +0000
════════════════════════
⌗ Tags: #Malware #C++ #Cybercrime #cybersecurity #Cyfirma #DuplexSpy #github #Infostealer #malware #rat #Remote Access Trojan #threat intelligence
Daily CyberSecurity
DuplexSpy RAT: New C# Malware Toolkit Emerges on GitHub
CYFIRMA uncovers DuplexSpy, a powerful C# RAT on GitHub with surveillance, persistence, and anti-analysis features, posing a significant cybercrime threat.
12 views
Daily Writeups
⤷ Title: Destructive npm Packages Disguised as Utilities Trigger Remote System Wipes on Demand
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:27:46 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #cybersecurity #data wiping #Developer Tools #express_api_sync #malware #npm #Socket Security #supply chain attack #system_health_sync_api
Daily CyberSecurity
Destructive npm Packages Disguised as Utilities Trigger Remote System Wipes on Demand
Two malicious npm packages, express-api-sync and system-health-sync-api, act as remote-controlled time bombs, wiping entire directories with a single POST request.
12 views
Daily Writeups
⤷ Title: Android’s Secret Tracking: Meta & Yandex Abused Localhost for User Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:21:39 +0000
════════════════════════
⌗ Tags: #Data Leak #android #cross_context tracking #cybersecurity #facebook #Instagram #localhost #Meta #Meta Pixel #privacy #tracking #WebRTC #Yandex
Daily CyberSecurity
Android's Secret Tracking: Meta & Yandex Abused Localhost for User Data
Researchers found Meta and Yandex secretly tracked Android users via localhost, linking web activity to app IDs, even in Incognito. This widespread abuse bypassed privacy controls.
15 views
Daily Writeups
⤷ Title: Go Fixes Three Security Flaws: Update Your Apps Now!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:16:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #crypto/x509 #CVE #cybersecurity #go #Golang #net/http #OS #security vulnerability #software update #web development
Daily CyberSecurity
Go Fixes Three Security Flaws: Update Your Apps Now!
Go 1.24.4 and 1.23.10 fix flaws in net/http, os, and crypto/x509, addressing data leaks, file inconsistencies, and certificate validation bypasses. Update now!
20 views
Daily Writeups
⤷ Title: FormBook Returns: Exploiting CVE-2017-0199 via Malicious Excel Attachments in New Phishing Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:11:27 +0000
════════════════════════
⌗ Tags: #Malware #CVE_2017_0199 #cybersecurity #Excel #Exploit #Formbook #FortiGuard #Infostealer #malware #microsoft office #phishing
Daily CyberSecurity
FormBook Returns: Exploiting CVE-2017-0199 via Malicious Excel Attachments in New Phishing Campaign
An old Microsoft Office vulnerability (CVE-2017-0199) is being exploited in a new phishing campaign to deploy the FormBook infostealer malware. Update now!
19 views
Daily Writeups
⤷ Title: EnigmaCyberSecurity: Brazil-Focused Banking Malware Campaign Uses RATs and Malicious Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:07:04 +0000
════════════════════════
⌗ Tags: #Malware #banking trojans #Browser Extension Malware #EnigmaCyberSecurity #Financial Credential Theft #Latin America Cybercrime #Mesh Agent #Phishing Campaign #rat
Daily CyberSecurity
EnigmaCyberSecurity: Brazil-Focused Banking Malware Campaign Uses RATs and Malicious Extensions
"EnigmaCyberSecurity" is a new multi-stage cybercrime campaign hitting Brazil and beyond, using phishing, malicious extensions, and RATs to steal banking data.
16 views
Daily Writeups
⤷ Title: CVE-2025-4318 (CVSS 9.5): AWS Amplify RCE Flaw Exposed with PoC – CI/CD Pipelines at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:02:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS Amplify #CI/CD security #CVE_2025_4318 #JavaScript Exploits #Node.js #PoC Exploit #Remote Code Execution #Web Development Security
Daily CyberSecurity
CVE-2025-4318 (CVSS 9.5): AWS Amplify RCE Flaw Exposed with PoC – CI/CD Pipelines at Risk
CVE-2025-4318 (CVSS 9.5) hits AWS Amplify Codegen UI with PoC exploit. RCE flaw puts CI/CD pipelines and developer environments at high risk.
15 views
Daily Writeups
⤷ Title: Finally , Got Certified with EJpt Certification
════════════════════════
𐀪 Author: Mr Horbio
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:33:51 GMT
════════════════════════
⌗ Tags: #hacker #cybersecurity #ejpt #bug_bounty #ethical_hacking
Medium
Finally , Got Certified with EJpt Certification
This is tells about my story and how to complete my preparation for ejpt exam.
14 views
Daily Writeups
⤷ Title: Behind the Shop: How a Simple SQLi in the Products Page Gave Me Full Access
════════════════════════
𐀪 Author: Waleed Osama
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:32:45 GMT
════════════════════════
⌗ Tags: #sql #hacking #developer #bug_bounty #sql_injection
Medium
Behind the Shop: How a Simple SQLi in the Products Page Gave Me Full Access
Quick Overview
13 views
Daily Writeups
⤷ Title: Kurby DC — Easy Windows
════════════════════════
𐀪 Author: neo mask
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:05:59 GMT
════════════════════════
⌗ Tags: #writeup #hacking
Medium
Kurby DC — Easy Windows
Description: Unravel Active Directory secrets in Kurby DC! Face fun and engaging tasks designed to test their skills in navigating complex…
13 views
Daily Writeups
⤷ Title: HackTheBox - Nibbles
════════════════════════
𐀪 Author: jniket
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 23:48:49 GMT
════════════════════════
⌗ Tags: #linux #penetration_testing #hacking #cybersecurity #hackthebox
Medium
HackTheBox - Nibbles
Summary
19 views
Daily Writeups
⤷ Title: Documentation: Hardening Linux Remote Tools — SSH
════════════════════════
𐀪 Author: IndoHajk
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:34:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #ssh
Medium
Documentation: Hardening Linux Remote Tools — SSH
Apa itu SSH?
10 views
Daily Writeups
⤷ Title: Why Traditional Security Frameworks Are Failing Against AI Threats (And What Actually Works)
════════════════════════
𐀪 Author: Andrei Ivan
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:04:55 GMT
════════════════════════
⌗ Tags: #threat_modeling #artificial_intelligence #cyber_security_solutions #ai_security #cybersecurity
Medium
Why Traditional Security Frameworks Are Failing Against AI Threats (And What Actually Works)
Last month, I was reviewing a client’s machine learning pipeline when something unsettling caught my attention. Their fraud detection model had been performing beautifully for eight months – until it…
10 views
Daily Writeups
⤷ Title: Dari Aplikasi ke Kabel: Mengurai Cara Kerja 7 Lapis OSI Model
════════════════════════
𐀪 Author: Muhammad Akhtar Khawarizmi
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:04:55 GMT
════════════════════════
⌗ Tags: #networking #technology #cybersecurity #information_technology #computer_science
Medium
Dari Aplikasi ke Kabel: Mengurai Cara Kerja 7 Lapis OSI Model
Pernahkah kamu berpikir tentang bagaimana sebuah proses digital bekerja? Saat kita mengirim email, memesan ojek online, atau memposting…
14 views
Daily Writeups
⤷ Title: CTF Writeup — TJCTF 2025 — guess-my-number
════════════════════════
𐀪 Author: embossdotar
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:00:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #ctf #ctf_walkthrough #ctf_writeup
Medium
CTF Writeup — TJCTF 2025 — guess-my-number
Capture The Flag. CTF Writeup. TJCTF 2025 challenge
15 views
Daily Writeups
⤷ Title: Quantum-Safe Cryptography: Preparing for the Next Security Revolution
════════════════════════
𐀪 Author: Prit
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 23:49:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #quantum_computing #encryption
Medium
Quantum-Safe Cryptography: Preparing for the Next Security Revolution
Ever heard the term “quantum computing” and thought, “Yeah, that’s something for scientists, not me”? I used to feel the same way — until…
16 views
Daily Writeups
⤷ Title: The One Who Owns the Information Owns the World
════════════════════════
𐀪 Author: Pavlo Filipenko
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 23:39:18 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
The One Who Owns the Information Owns the World
How everyday people are unknowingly giving away their identities online — and how to protect yourself.
16 views
Daily Writeups
⤷ Title: When should you perform attestation in confidential VMs.
════════════════════════
𐀪 Author: ijlal
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 23:23:51 GMT
════════════════════════
⌗ Tags: #confidential_computation #security #privacy #cybersecurity #cryptography
Medium
When should you perform attestation in confidential VMs.
Attestation is a crucial component of confidential computing, as you need to establish trust in the Confidential VM, CVM, before you…
20 views