Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: US Tops List of Unsecured Cameras Exposing Homes and Offices
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 12 Jun 2025 10:45:05 +0000
════════════════════════
⌗ Tags: #Security #Camera #Cybersecurity #Internet of things #IoT #Privacy #Vulnerability
Hackread
US Tops List of Unsecured Cameras Exposing Homes and Offices
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
24 views
Daily Writeups
⤷ Title: CISA Warns of Remote Control Flaws in SinoTrack GPS Trackers
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 11 Jun 2025 21:10:15 +0000
════════════════════════
⌗ Tags: #Security #CISA #Cybersecurity #GPS #IoT #SinoTrack #Vulnerability
Hackread
CISA Warns of Remote Control Flaws in SinoTrack GPS Trackers
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
24 views
Daily Writeups
⤷ Title: Admin Panel Finder: enumerates infrastructure and application Admin Interfaces
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:41:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #admin_panel_finder
Penetration Testing Tools
Admin Panel Finder: enumerates infrastructure and application Admin Interfaces
Admin Panel Finder is a burp suite extension that enumerates infrastructure and application Admin Interfaces.
67 views
Daily Writeups
⤷ Title: RedInfraCraft V2: Automate Your Red Team Infrastructure with Ease
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:23:41 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Automation #cloud security #cybersecurity #ethical hacking #Infrastructure #Mythic C2 #Payload #Pentesting #phishing #Red Team #RedInfraCraft
Penetration Testing Tools
RedInfraCraft V2: Automate Your Red Team Infrastructure with Ease
RedInfraCraft V2 simplifies and automates the deployment of red team infrastructure, including Mythic C2, phishing, and payload setups, across multi-cloud environments
26 views
Daily Writeups
⤷ Title: WordPress webshell plugin for RCE: webshell plugin and interactive shell for pentesting a WordPress website
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Jun 2025 00:59:02 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #WordPress webshell
Penetration Testing Tools
WordPress webshell plugin for RCE: webshell plugin and interactive shell for pentesting a WordPress website
WordPress webshell plugin for RCE is a webshell plugin and interactive shell for pentesting a WordPress website.
23 views
Daily Writeups
⤷ Title: Plaguards: Open Source PowerShell Deobfuscation and IOC Detection Engine for Blue Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Jun 2025 00:48:18 +0000
════════════════════════
⌗ Tags: #Malware Defense #blue team #cybersecurity #Deobfuscation #Indicators of Compromise #ioc #malware analysis #Plaguards #PowerShell #security tool #Threat Detection
Penetration Testing Tools
Plaguards: Open Source PowerShell Deobfuscation and IOC Detection Engine for Blue Teams
Plaguards automates PowerShell deobfuscation, helping security teams quickly identify threats and false positives with comprehensive PDF reports.
22 views
Daily Writeups
⤷ Title: Arsen Launches AI-Powered Vishing Simulation to Help Organizations Combat Voice Phishing at Scale
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 13:30:26 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
Arsen Launches AI-Powered Vishing Simulation to Help Organizations Combat Voice Phishing at Scale
Paris, France, 13th June 2025, CyberNewsWire
15 views
Daily Writeups
⤷ Title: Critical Ricoh Streamline NX Flaw (CVSS 9.8) Allows SYSTEM-Level Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 09:17:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Path Traversal #privilege escalation #rce #Remote Code Execution #Ricoh #Streamline NX
Daily CyberSecurity
Critical Ricoh Streamline NX Flaw (CVSS 9.8) Allows SYSTEM-Level Code Execution
Ricoh warns of critical flaws in Streamline NX V3, including a CVSS 9.8 path traversal (CVE-2025-46783) allowing remote SYSTEM-level code execution.
12 views
Daily Writeups
⤷ Title: EchoLeak: First AI Zero-Click Vulnerability Leaks Data from Microsoft 365 Copilot
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 07:27:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #AIM #cybersecurity #data exfiltration #EchoLeak #large language model #LLM #Microsoft #Microsoft 365 Copilot #Prompt injection #RAG #Zero_Click
Daily CyberSecurity
EchoLeak: First AI Zero-Click Vulnerability Leaks Data from Microsoft 365 Copilot
"EchoLeak," a new AI zero-click vulnerability, allowed data exfiltration from Microsoft 365 Copilot via sophisticated prompt injection. Microsoft has patched the flaw.
14 views
Daily Writeups
⤷ Title: IBM Unveils “Quantum Starling”: World’s First Large-Scale Fault-Tolerant Quantum Computer by 2029
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 07:19:30 +0000
════════════════════════
⌗ Tags: #Technology #AI #Drug Discovery #Fault_Tolerant #IBM #Material Science #Quantum computing #Quantum Starling #Quantum Technology #Qubits #supercomputer #Tech News
Daily CyberSecurity
IBM Unveils "Quantum Starling": World's First Large-Scale Fault-Tolerant Quantum Computer by 2029
IBM announces "Quantum Starling," the world's first large-scale, fault-tolerant quantum computer, set to unveil by 2029 with 20,000x current power.
12 views
Daily Writeups
⤷ Title: Meta Powers AI Future: New Geothermal Project in New Mexico to Fuel Data Centers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 07:12:52 +0000
════════════════════════
⌗ Tags: #Technology #AI #artificial intelligence #Constellation Energy #data centers #Geothermal Energy #Meta #New Mexico #Nuclear Energy #renewable energy #Sustainable Tech #XGS Energy
Daily CyberSecurity
Meta Powers AI Future: New Geothermal Project in New Mexico to Fuel Data Centers
Meta partners with XGS Energy to develop a 150MW next-gen geothermal system in New Mexico, powering AI data centers with carbon-free energy.
9 views
Daily Writeups
⤷ Title: iOS 26 Password App Gains Major Upgrade: View Full History of Saved Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 07:08:31 +0000
════════════════════════
⌗ Tags: #Technology #Apple #Apple Ecosystem #ios #iOS 26 #MFA #Passkeys #password manager #Passwords App #privacy #security #Tech Update
Daily CyberSecurity
iOS 26 Password App Gains Major Upgrade: View Full History of Saved Credentials
iOS 26's Passwords app now lets users view the complete history of saved credentials, making it easier to recover overwritten or forgotten passwords.
9 views
Daily Writeups
⤷ Title: CVE-2025-5491: Acer Control Center Bug Allows Remote Code Execution as NT AUTHORITY\SYSTEM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 03:18:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Acer #ControlCenter #CVE_2025_5491 #cybersecurity #Named Pipe #NT AUTHORITY\SYSTEM #privilege escalation #rce #Remote Code Execution #Vulnerability #windows
Daily CyberSecurity
CVE-2025-5491: Acer Control Center Bug Allows Remote Code Execution as NT AUTHORITY\SYSTEM
A flaw (CVE-2025-5491) in Acer ControlCenter allows remote, unauthenticated attackers to escalate privileges to NT AUTHORITYSYSTEM
24 views
Daily Writeups
⤷ Title: CVE-2024-9404: Remote DoS Vulnerability Found in Moxa Industrial Switches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 03:01:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Infrastructure #CVE_2024_9404 #cybersecurity #Denial of Service #dos #ICS #industrial control systems #Industrial Ethernet Switches #Moxa #OT Security #Vulnerability
Daily CyberSecurity
CVE-2024-9404: Remote DoS Vulnerability Found in Moxa Industrial Switches
Moxa warns of a high-severity DoS flaw (CVE-2024-9404) in PT-G7728/7828 industrial switches, allowing remote crashes. Update firmware or disable affected services.
12 views
Daily Writeups
⤷ Title: Urgent CISA Alert: Ransomware Actors Exploiting SimpleHelp RMM Flaw (CVE-2024-57727)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 02:47:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #CISA #CVE_2024_57727 #cybersecurity #Double Extortion #Path Traversal #ransomware #Remote Monitoring and Management #SimpleHelp RMM #supply chain attack #Vulnerability
Daily CyberSecurity
Urgent CISA Alert: Ransomware Actors Exploiting SimpleHelp RMM Flaw (CVE-2024-57727)
CISA warns of active exploitation of a SimpleHelp RMM flaw (CVE-2024-57727) by ransomware actors, impacting utility billing software providers and their customers.
13 views
Daily Writeups
⤷ Title: Warning: Discontinued Amazon Cloud Cam Has Vulnerability (CVE-2025-6031), Exposing Your Network
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 02:25:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Cloud Cam #CVE_2025_6031 #cybersecurity #end_of_life #EOL #IOT #network_security #Security Camera #Smart Home #SSL Pinning #Vulnerability
Daily CyberSecurity
Warning: Discontinued Amazon Cloud Cam Has Vulnerability (CVE-2025-6031), Exposing Your Network
A new flaw (CVE-2025-6031) in the discontinued Amazon Cloud Cam allows attackers to intercept network traffic, highlighting risks of unsupported smart home devices.
13 views
Daily Writeups
⤷ Title: Apache Tomcat Under Attack: Massive Brute-Force Campaign Targets Manager Interfaces
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 02:08:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #Brute Force #cyberattack #cybersecurity #DigitalOcean #GreyNoise #Login Attempts #Tomcat Manager #Web Security #web server
Daily CyberSecurity
Apache Tomcat Under Attack: Massive Brute-Force Campaign Targets Manager Interfaces
GreyNoise reports a massive brute-force campaign targeting Apache Tomcat Manager interfaces, with hundreds of malicious IPs attempting to compromise services.
14 views
Daily Writeups
⤷ Title: The Day the Internet Broke: Unpacking the June 12th Global Cloud Meltdown
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 01:42:19 +0000
════════════════════════
⌗ Tags: #Technology #Cloud Failure #cloudflare #Digital Services #Global Disruption #Google Cloud #Internet Outage #June 2025 #Tech Downtime
Daily CyberSecurity
The Day the Internet Broke: Unpacking the June 12th Global Cloud Meltdown
Explore the massive June 12, 2025 global cloud outage that took down Google, Cloudflare, and more. Uncover the ripple effects and lingering questions from this unprecedented digital disruption.
13 views
Daily Writeups
⤷ Title: Critical Path Traversal Vulnerability (CVSS 9.8) Exposes Mitel MiCollab Servers to Unauthorized Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:40:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #critical #cybersecurity #MiCollab #Mitel #Patch Now #Path Traversal #security advisory #unauthenticated access #Unified Communications
Daily CyberSecurity
Critical Path Traversal Vulnerability (CVSS 9.8) Exposes Mitel MiCollab Servers to Unauthorized Access
Mitel warns of a critical path traversal flaw (CVSS 9.8) in MiCollab, allowing unauthenticated attackers to access provisioning data and perform admin actions.
13 views
Daily Writeups
⤷ Title: Urgent Bosch Alert: Critical RCE Flaw (CVSS 10.0) Exposes Dispatch & Matrix Software to Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:35:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bosch #Critical Infrastructure #CVE_2025_29902 #CVSS 10.0 #cybersecurity #rce #Remote Code Execution #RTS VLink #security advisory #Telex RDC
Daily CyberSecurity
Urgent Bosch Alert: Critical RCE Flaw (CVSS 10.0) Exposes Dispatch & Matrix Software to Attack
Bosch warns of a critical RCE flaw (CVSS 10.0, CVE-2025-29902) in Telex RDC Server and RTS VLink, allowing unauthenticated remote code execution. Patch immediately!
10 views
Daily Writeups
⤷ Title: TeamFiltration Weaponized: UNK_SneakyStrike Campaign Targets 80,000+ Microsoft Entra ID Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:30:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #ATO #AWS #cyberattack #cybersecurity #Microsoft 365 #Microsoft Entra ID #OAuth #Password Spraying #Proofpoint #TeamFiltration
Daily CyberSecurity
TeamFiltration Weaponized: UNK_SneakyStrike Campaign Targets 80,000+ Microsoft Entra ID Accounts
TeamFiltration is being actively exploited in UNK_SneakyStrike, targeting over 80,000 Microsoft Entra ID accounts with password spraying and data exfiltration.
13 views