Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: What is OS command injection?
════════════════════════
𐀪 Author: BinaryShield
════════════════════════
ⴵ Time: Sat, 28 Feb 2026 02:48:51 GMT
════════════════════════
⌗ Tags: #binaryshield #cybersecurity #penetration_testing #os_command_injection #ethical_hacking
Medium
What is OS command injection?
1. What it is (very simple, no jargon)
13 views
Daily Writeups
⤷ Title: OS Command Injection
════════════════════════
𐀪 Author: Abdulnafayk
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 19:19:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #os_command_injection #offensive_security #infosec #vapt
Medium
OS Command Injection
OS Command Injection is a security vulnerability where an attacker can execute operating system (OS) commands on a server through a…
29 views
Daily Writeups
⤷ Title: High-Severity Flaw Exposes LiteSpeed Web Servers to OS Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:31:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_31386 #CVSS 8.6 #cybersecurity #infosec #LiteSpeed Web Server #OpenLiteSpeed #os command injection #privilege escalation #Server Security #WebAdmin
Daily CyberSecurity
High-Severity Flaw Exposes LiteSpeed Web Servers to OS Command Injection
A significant security warning has been issued for administrators utilizing LiteSpeed Web Server, a popular high-performance replacement for Apache. According to a vulnerability note from JPCERT/C…
14 views
Daily Writeups
⤷ Title: Critical 9.1 Flaws Hit Fortinet FortiSandbox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:07:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_39808 #CVE_2026_39813 #cybersecurity #Fortinet #FortiSandbox #infosec #os command injection #Patch Alert #Path Traversal #rce
Daily CyberSecurity
Critical 9.1 Flaws Hit Fortinet FortiSandbox
Fortinet issues a critical 9.1 CVSS alert for FortiSandbox. Unauthenticated auth bypass and command injection risks. Patch to 5.0.6 or 4.4.9 immediately.
19 views
Daily Writeups
⤷ Title: Paperclip Unclipped: The 9.8 CVSS Flaw Handing Your AI Agents to the Public
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 12:17:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Agentic AI #AI security #Cross_Tenant #CVE_2026 #Cyber Security #infosec #Node.js #os command injection #Paperclip #rce #React #Vulnerability
Daily CyberSecurity
Paperclip Unclipped: The 9.8 CVSS Flaw Handing Your AI Agents to the Public
Paperclip’s 9.8 CVSS flaw and cross-tenant leaks expose AI agents to total takeover. Learn how a simple command could compromise your entire business.
18 views
Daily Writeups
⤷ Title: Progress Kemp LoadMaster Alert: Multiple RCE and WAF Bypass Flaws Patched
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 02:09:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADC Security #CVE_2026_3517 #CVE_2026_3518 #CVE_2026_3519 #CVE_2026_4048 #infosec #Kemp LoadMaster #os command injection #Patch Alert #Progress Software #WAF Bypass
Daily CyberSecurity
Progress Kemp LoadMaster Alert: Multiple RCE and WAF Bypass Flaws Patched
Progress Kemp LoadMaster reveals 5 high-severity vulnerabilities, including a WAF bypass and OS command injection. Secure your ADC with the April 2026 patch.
20 views
Daily Writeups
⤷ Title: Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 02:51:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Atlassian #Bamboo #CI/CD security #CVE_2026_21571 #DevOps #infosec #os command injection #Patch Alert #rce #Supply Chain
Daily CyberSecurity
Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection
Atlassian Bamboo Data Center hit by critical 9.4 RCE (CVE-2026-21571). Attackers can hijack your build pipeline. Secure your supply chain—patch now!
22 views
Daily Writeups
⤷ Title: No Password Required: 9.8 Severity ELECOM Router Flaws Allow Total Network Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:02:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_40621 #CVE_2026_42062 #Cyber Security #ELECOM #infosec #os command injection #Patch Alert #router security #WAB_BE Series #WRC_X Series
Daily CyberSecurity
No Password Required: 9.8 Severity ELECOM Router Flaws Allow Total Network Takeover
ELECOM routers hit by critical 9.8 CVSS flaws (CVE-2026-42062). Unauthenticated attackers can execute OS commands and bypass auth. Update firmware now!
17 views
Daily Writeups
⤷ Title: Architectural Vulnerabilities in Notepad++: Arbitrary Code Execution Risks Unmasked
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_48778 commandLineInterpreter #CVSS 7.8 flaw remediation #malicious AppData config overwrites #Notepad++ 8.9.6.1 security patch #Notepad++ config.xml code execution #Open Containing Folder in cmd exploit #OS command injection CWE_78 #shortcuts.xml parsing bug CVE_2026_48800 #text editor arbitrary code execution #Windows text editor vulnerability
Information Security News
Notepad++ Config.xml Code Execution Flaw Patched: Update Now
Notepad++ patches a critical config.xml code execution flaw (CVE-2026-48778) alongside two other security bugs. Upgrade to version 8.9.6.1 immediately.
8 views
Daily Writeups
⤷ Title: TwoMillion-Machine — writeup
════════════════════════
𐀪 Author: ANXS3C
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:51:47 GMT
════════════════════════
⌗ Tags: #os_command_injection #penetration_testing #web_application_security #privilege_escalation #reverse_shell
Medium
TwoMillion-Machine — writeup
From deobfuscating JS code to root ‘CVE-2023–0386’
18 views