Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: CVSS 8.7 Unauthenticated RCE Impacts Multiple TP-Link Routers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 00:29:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_11834 #TP_Link
Daily CyberSecurity
CVSS 8.7 Unauthenticated RCE Impacts Multiple TP-Link Routers
A CVSS 8.7 TP-Link router command injection flaw allows unauthenticated remote code execution. Patch CVE-2026-11834 to stop this DHCP option vulnerability.
24 views
Daily Writeups
⤷ Title: Lab 4: Blind OS Command Injection with Out-of-Band Interaction — PortSwigger Web Security Academy…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 13:22:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #portswigger_lab #cybersecurity #command_injection
Medium
Lab 4: Blind OS Command Injection with Out-of-Band Interaction — PortSwigger Web Security Academy Walkthrough (Part 4 of 5)
When there’s no file to read and no time delay to measure: proving Remote Code Execution using Burp Collaborator and DNS callbacks.
25 views
Daily Writeups
⤷ Title: [Silent Monitor] — Breaking an Internal Flask Application via SQLi, Command Injection, and KeePass…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 08:21:03 GMT
════════════════════════
⌗ Tags: #capture_the_flag #sql_injection #privilege_escalation #tryhackme #command_injection
Medium
[Silent Monitor] — Breaking an Internal Flask Application via SQLi, Command Injection, and KeePass Credential Vault Abuse
Internal Application Compromise: SQL Injection, Command Injection, and KeePass-Based Privilege Escalation in a Full Attack Chain.
28 views
Daily Writeups
⤷ Title: Kemp LoadMaster RCE Vulnerability Exploited in the Wild After Public PoC Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 16:22:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_33691 #CVE_2026_8037 #Kemp LoadMaster #Progress Software #Remote Code Execution
Daily CyberSecurity
Kemp LoadMaster RCE Vulnerability Exploited in the Wild After Public PoC Release
TL;DR Attackers began exploiting the Kemp LoadMaster RCE vulnerability, tracked as CVE-2026-8037, on June 29, 2026. That timing matched the public release of proof-of-concept exploit code. The fla…
19 views
Daily Writeups
⤷ Title: StoneFly Storage Concentrator Flaws Allow Unauthenticated Root Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 00:55:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA ICS advisory #Command Injection #CVE_2026_55721 #CVE_2026_56413 #CVE_2026_56415 #hardcoded credentials #sql injection #Stonefly #StoneFly Storage Concentrator
Daily CyberSecurity
StoneFly Storage Concentrator Flaws Allow Unauthenticated Root Access
TL;DR CISA published an advisory for five StoneFly Storage Concentrator vulnerabilities on 30 June 2026. Two rate a maximum CVSS score of 10.0. Both let an unauthenticated attacker run commands as…
12 views
Daily Writeups
⤷ Title: Critical IBM Power HMC Vulnerability Exposes Systems
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 08:29:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_12943 #IBM #Power HMC #Vulnerability
Daily CyberSecurity
Critical IBM Power HMC Vulnerability Exposes Systems
TL;DR IBM disclosed a critical CVSS 9.8 flaw, tracked as CVE-2026-12943, in its Power Hardware Management Console (HMC). This IBM Power HMC vulnerability allows unauthenticated attackers to run ar…
21 views
Daily Writeups
⤷ Title: Control-M CVE-2026-10539: Unauthenticated Remote Command Injection (CVSS 9.5)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 15:21:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BMC #Command Injection #Control_M #CVE_2026_10539 #Vulnerability
Daily CyberSecurity
Control-M CVE-2026-10539: Unauthenticated Remote Command Injection (CVSS 9.5)
TL;DR BMC disclosed a critical flaw in Control-M/Server tracked as CVE-2026-10539. The Control-M command injection bug scores 9.5 on CVSSv4. It lets an unauthenticated attacker run commands on the…
28 views
Daily Writeups
⤷ Title: Ubiquiti UniFi Security Advisory 066 Fixes 25 Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 13:29:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_50746 #CVE_2026_54402 #CVE_2026_55115 #sql injection #ssrf #Ubiquiti #UniFi #UniFi OS #UniFi Protect
Daily CyberSecurity
Ubiquiti UniFi Security Advisory 066 Fixes 25 Vulnerabilities
Ubiquiti released a UniFi security advisory, Bulletin 066. It fixes 25 flaws in UniFi products. One bug in the UniFi Connect app scores a top mark of 10.0. Several more are critical. They allow co…
15 views
Daily Writeups
⤷ Title: Linux Fundamentals Part 1: Mastering the Command Line
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 13:18:05 GMT
════════════════════════
⌗ Tags: #command_line #linux #tryhackme #infosec #cybersecurity
Medium
Linux Fundamentals Part 1: Mastering the Command Line
Introduction
15 views
Daily Writeups
⤷ Title: Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 13:28:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_54161 #Network UPS Tools #NUT #rce #ups.alarm #upsmon
Daily CyberSecurity
Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet
A remote code execution flaw affects Network UPS Tools, the widely used NUT monitoring suite. The bug, CVE-2026-54161, carries a CVSS score of 8.1. It can run commands as root on the monitoring ho…
10 views