Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: C-CURE 9000 Vulnerability CVE-2026-21655 Enables Remote Code Execution, CVE-2026-21653 Scores CVSS 9.6
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 14:29:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #C_CURE 9000 #CVE_2026_21653 #CVE_2026_21655 #CVE_2026_34496 #ICS Advisory #Johnson Controls #Remote Code Execution
Daily CyberSecurity
C-CURE 9000 Vulnerability CVE-2026-21655 Enables Remote Code Execution, CVE-2026-21653 Scores CVSS 9.6
TL;DR CISA published ICS advisory ICSA-26-204-01 on July 23, 2026. It covers three flaws in Johnson Controls C-CURE 9000 and victor application servers. The most severe C-CURE 9000 vulnerability, …
17 views
Daily Writeups
⤷ Title: Rails Active Storage Flaw CVE-2026-66066 Enables Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 03:01:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Storage #Arbitrary File Read #CVE_2026_66066 #libvips #Remote Code Execution #ruby on rails
Daily CyberSecurity
Rails Active Storage Flaw CVE-2026-66066 Enables Remote Code Execution
TL;DR Ruby on Rails has patched a critical Rails Active Storage flaw. Tracked as CVE-2026-66066 and rated 9.5 CVSS, it lets an unauthenticated attacker read arbitrary files from the server. Stolen…
7 views
Daily Writeups
⤷ Title: CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 08:01:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25243 #CVE_2026_66373 #double_free #proof_of_concept #Redis #Redis RCE #Redis Streams #Remote Code Execution #RESTORE
Daily CyberSecurity
CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed
TL;DR: A public proof-of-concept now targets CVE-2026-66373, a Redis RCE flaw in the RESTORE command. The double-free bug lets an authenticated attacker corrupt memory and run code. Redis fixed it…
25 views
Daily Writeups
⤷ Title: CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 13:02:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42530 #HTTP/3 #nginx #NGINX HTTP/3 #ngx_http_v3_module #proof_of_concept #QPACK #QUIC #Remote Code Execution #use after free
Daily CyberSecurity
CVE-2026-42530: NGINX HTTP/3 RCE Proof-of-Concept Publicly Disclosed
TL;DR: A public proof-of-concept now targets CVE-2026-42530, an NGINX HTTP/3 RCE flaw rated CVSS 9.2. The use-after-free sits in the QPACK code of the HTTP/3 module. F5 fixed it in NGINX Open Sour…
8 views
Daily Writeups
⤷ Title: IBM WebSphere Vulnerabilities (CVSS 9.8) Enable RCE, Privilege Escalation, and SSRF
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 01:01:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_14446 #CVE_2026_14512 #CVE_2026_14529 #IBM WebSphere #Remote Code Execution #ssrf #WebSphere Application Server
Daily CyberSecurity
IBM WebSphere Vulnerabilities (CVSS 9.8) Enable RCE, Privilege Escalation, and SSRF
TL;DR IBM disclosed four IBM WebSphere vulnerabilities in late July 2026. Two of them, CVE-2026-14512 and CVE-2026-14446, each score 9.8 CVSS. A new server-side request forgery flaw, CVE-2026-1452…
15 views
Daily Writeups
⤷ Title: Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 07:30:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #depthfirst #gitlab #GitLab RCE #ipynbdiff #memory corruption #Oj #proof_of_concept #Remote Code Execution #Ruby
Daily CyberSecurity
Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs
TL;DR: Researchers at depthfirst released a working proof-of-concept for a GitLab RCE that runs commands as the git user. The chain abuses two memory corruption bugs in Oj, a native Ruby JSON pars…
25 views
Daily Writeups
⤷ Title: CVE-2026-63223: CodeIgniter4 RCE Vulnerability Rated CVSS 9.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 09:19:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CodeIgniter4 #CVE_2026_63223 #File Upload Vulnerability #Path Traversal #PHP Framework #Remote Code Execution #sql injection #Web Security
Daily CyberSecurity
CVE-2026-63223: CodeIgniter4 RCE Vulnerability Rated CVSS 9.8
TL;DR: The CodeIgniter4 team patched four security flaws in release v4.7.4. The most severe, a CodeIgniter4 RCE vulnerability tracked as CVE-2026-63223, scores CVSS 9.8. It can lead to remote code…
25 views
Daily Writeups
⤷ Title: OpenAM CVE-2026-62379 (CVSS 9.8) Enables Unauthenticated Remote Code Execution, CVE-2026-62261 Scores CVSS 9.9
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 13:40:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_62261 #CVE_2026_62263 #CVE_2026_62379 #Deserialization #IAM #Open Identity Platform #OpenAM #Remote Code Execution
Daily CyberSecurity
OpenAM CVE-2026-62379 (CVSS 9.8) Enables Unauthenticated Remote Code Execution, CVE-2026-62261 Scores CVSS 9.9
TL;DR OpenAM 16.1.2 patches four security flaws in the open-source access management server. Three of these OpenAM vulnerabilities lead to remote code execution. The worst, CVE-2026-62379, allows …
7 views
Daily Writeups
⤷ Title: How I Found My First Real-Life RCE: Exploiting CVE-2026–53576 in Kestra
════════════════════════
𐀪 Author: BelScarabX
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 13:46:01 GMT
════════════════════════
⌗ Tags: #remote_code_execution #rce_vulnerability #bug_bounty #hacking #bug_bounty_writeup
Medium
How I Found My First Real-Life RCE: Exploiting CVE-2026–53576 in Kestra
From spotting an exposed developer portal to bypassing authentication with a single path trick.
12 views
Daily Writeups
⤷ Title: CVE-2026-66066: Rails Active Storage RCE Exploit Code Now Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 10:17:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Storage #Arbitrary File Read #CVE_2026_66066 #KindaRails2Shell #libvips #metasploit #Remote Code Execution #ruby on rails
Daily CyberSecurity
CVE-2026-66066: Rails Active Storage RCE Exploit Code Now Public
TL;DR: A critical Rails Active Storage RCE flaw, CVE-2026-66066 (CVSS 9.5), lets an unauthenticated attacker read server files and potentially run code through crafted image uploads. A public Meta…
17 views