Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Thu, 30 Mar 2023 17:28:00 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Let’s Talk About Privileged Access Management (PAM)
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/6ca57f17b3ec
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #infosec #iam_security #privileged_access_mgmt #pam_solution
Medium
Let’s Talk About Privileged Access Management (PAM)
Privileged Access Management (PAM)
4 views
Daily Writeups
β€· Title: Yubico Addresses Authentication Bypass Vulnerability CVE-2025-23013 in pam-u2f Package
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Fri, 17 Jan 2025 02:53:36 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2025_23013 #Linux #macOS #PAM #Pluggable Authentication Module
Cybersecurity News
Yubico Addresses Authentication Bypass Vulnerability CVE-2025-23013 in pam-u2f Package
Stay informed about the latest security advisory from Yubico regarding an authentication bypass vulnerability, CVE-2025-23013.
13 views
Daily Writeups
β€· Title: ✍Global Privileged Access Management Solutions Market Size, Share, Key Drivers, Growth…
════════════════════════
π€ͺ Author: Yamaguchitabithay
════════════════════════
β΄΅ Time: Fri, 04 Apr 2025 05:18:27 GMT
════════════════════════
βŒ— Tags: #cyber_security_solutions #cybersecurity #pam_solution #access_control #it_security
Medium
✍Global Privileged Access Management Solutions Market Size, Share, Key Drivers, Growth…
The report offers comprehensive market statement on the global Privileged Access Management Solutions Market provides a detailed analysis…
11 views
Daily Writeups
β€· Title: BeyondTrust PRA Vulnerability (CVE-2025-0217) Enables Session Hijacking via Authentication Bypass
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 05 May 2025 22:18:31 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Authentication Bypass #BeyondTrust #CVE_2025_0217 #PAM #PRA #Privileged Access Management #Privileged Remote Access #security advisory #ShellJump
Daily CyberSecurity
BeyondTrust PRA Vulnerability (CVE-2025-0217) Enables Session Hijacking via Authentication Bypass
CVE-2025-0217 flaw in BeyondTrust PRA allows session hijacking via local auth bypass. Upgrade to version 25.1+ to prevent exploitation.
19 views
Daily Writeups
β€· Title: Critical Linux Root Exploit Chain Discovered in PAM & UDisks, Affecting Major Distros
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 18 Jun 2025 02:28:03 +0000
════════════════════════
βŒ— Tags: #Linux #Vulnerability Report #CVE_2025_6018 #CVE_2025_6019 #cybersecurity #libblockdev #PAM #privilege escalation #Qualys #root access #UDisks #Vulnerability
Daily CyberSecurity
Critical Linux Root Exploit Chain Discovered in PAM & UDisks, Affecting Major Distros
Qualys uncovered two critical Linux flaws (CVE-2025-6018, CVE-2025-6019) allowing local root privilege escalation via PAM and UDisks. Patching is urgent for major distros.
22 views
Daily Writeups
β€· Title: Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 19 Jun 2025 00:39:28 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cybersecurity #Linux #Local Privilege Escalation #LPE #PAM #pam_namespace #Pluggable Authentication Modules #privilege escalation #race condition #Symlink Attack
Daily CyberSecurity
Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux
A high-severity flaw (CVE-2025-6020) in Linux PAM's pam_namespace allows unprivileged users to gain root via symlink attacks and race conditions.
24 views
Daily Writeups
β€· Title: Linux Privilege Escalation (CVE-2025-6019): Root Access Via udisksd & libblockdev, PoC Available
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 07 Jul 2025 00:00:20 +0000
════════════════════════
βŒ— Tags: #Linux #Vulnerability Report #CVE_2025_6019 #cybersecurity #libblockdev #PAM #privilege escalation #proof_of_concept #root access #sudo #udisksd #Vulnerability
Daily CyberSecurity
Linux Privilege Escalation (CVE-2025-6019): Root Access Via udisksd & libblockdev, PoC Available
A critical Linux flaw (CVE-2025-6019) in udisksd/libblockdev allows local privilege escalation to root. PoC available. Update now to secure your system!
24 views
Daily Writeups
β€· Title: Palo Alto Networks Acquires CyberArk for $25B, Enters Identity Security Market
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 01 Aug 2025 02:18:27 +0000
════════════════════════
βŒ— Tags: #Technology #acquisition #AI #CyberArk #cybersecurity #Identity Security #Nikesh Arora #Palo Alto Networks #PAM #Privileged Access Management
Daily CyberSecurity
Palo Alto Networks Acquires CyberArk for $25B, Enters Identity Security Market
Palo Alto Networks is acquiring identity security leader CyberArk for nearly $25B. The deal marks Palo Alto's strategic entry into identity security, a critical pillar for the AI era.
10 views
Daily Writeups
β€· Title: Plague Backdoor: New Linux Malware Infiltrates Authentication Stack, Evading Detection for a Year
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Tue, 05 Aug 2025 03:23:20 +0000
════════════════════════
βŒ— Tags: #Linux #Malware #Authentication #Backdoor #cybersecurity #Evasion #Linux malware #PAM #Plague #ssh #threat intelligence
Penetration Testing Tools
Plague Backdoor: New Linux Malware Infiltrates Authentication Stack, Evading Detection for a Year
A new backdoor, Plague, disguised as a Linux PAM component, evaded detection for over a year. It grants attackers persistent SSH access and leaves no forensic trail.
11 views
Daily Writeups
β€· Title: Critical Devolutions Server Flaw (CVE-2025-12485, CVSS 9.4) Allows User Impersonation via Pre-MFA Cookie Hijacking
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 11 Nov 2025 00:29:14 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Authentication Bypass #Credential Management #Critical Vulnerability #CVE_2025_12485 #Devolutions Server #PAM #privilege escalation
Daily CyberSecurity
Critical Devolutions Server Flaw (CVE-2025-12485, CVSS 9.4) Allows User Impersonation via Pre-MFA Cookie Hijacking
Devolutions patched two flaws in Devolutions Server: A Critical (CVSS 9.4) Auth Bypass allows user impersonation via pre-MFA cookie replay, and another flaw leaks plaintext passwords to view-only users.
13 views
Daily Writeups
β€· Title: The Surveillance Standoff: Hackers vs. ICE’s Multi-Billion Dollar Watch
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 15 Jan 2026 08:12:25 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #ALPR #Benn Jordan #Counter_Surveillance #DeFlock #EFF #Flock Safety #ICE #ICEBlock #Joshua Aaron #Kristi Noem #Pam Bondi #Privacy 2026 #Surveillance
Penetration Testing Tools
The Surveillance Standoff: Hackers vs. ICE’s Multi-Billion Dollar Watch
U.S. Immigration and Customs Enforcement (ICE) has long been distinguished by its multibillion-dollar budget dedicated to surveillance technologies.
17 views
Daily Writeups
β€· Title: CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 09 Feb 2026 00:28:00 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #BeyondTrust #CVE_2026_1731 #CVSS 9.9 #IT security #PAM #Patch Alert #Pre_Auth Vulnerability #Privileged Remote Access #Remote Code Execution #Remote Support
Daily CyberSecurity
CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE
Critical BeyondTrust flaw CVE-2026-1731 (CVSS 9.9) allows unauthenticated RCE on Remote Support & PRA appliances. Update to v25.3.2 immediately.
19 views
Daily Writeups
β€· Title: PamDOORa Backdoor Targets Linux PAM Stack to Steal Passwords and Wipe Logs
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 12 May 2026 09:09:57 +0000
════════════════════════
βŒ— Tags: #Malware #anti_forensics #Credential Harvesting #Cybercrime #Flare #infosec #Linux Security #Malware Analysis #PAM Stack #PamDOORa #rootkit #ssh backdoor #SysAdmin
Daily CyberSecurity
PamDOORa Backdoor Targets Linux PAM Stack to Steal Passwords and Wipe Logs
Flare unmasks PamDOORa: a $1,600 Linux backdoor that hijacks the PAM stack to harvest credentials and manipulate authentication logs to evade detection.
35 views
Daily Writeups
β€· Title: Unmasked Origin: Infamous β€œOrBit” Linux Rootkit Exposed as a Fork of Open-Source Medusa
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 19 May 2026 09:22:30 +0000
════════════════════════
βŒ— Tags: #Malware #BLOCKADE SPIDER #infosec #Intezer #LD_PRELOAD #Linux Security #Medusa Malware #OrBit Rootkit #PAM Hooking #Pluggable Authentication Modules #UNC3886 #userland rootkit
Daily CyberSecurity
Unmasked Origin: Infamous "OrBit" Linux Rootkit Exposed as a Fork of Open-Source Medusa
New research by Intezer reveals the OrBit Linux rootkit is actually a fork of the open-source Medusa kit, actively weaponized across multiple APTs.
10 views