Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: The Async Escape: Critical 9.8 Flaw in vm2 Turns JavaScript Sandboxes Into Open Gateways
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:46:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #async/await exploit #CVE_2026_22709 #JavaScript security #Node.js #npm security #Promise sanitization #RCE vulnerability #Sandbox Escape #Tech News #vm2
Penetration Testing Tools
The Async Escape: Critical 9.8 Flaw in vm2 Turns JavaScript Sandboxes Into Open Gateways
A critical sandbox escape vulnerability has been unearthed within the vm2 library—a utility frequently employed as a JavaScript
10 views
Daily Writeups
⤷ Title: 5.7 Million Users at Risk: Multiple 9.8 CVSS Breakthroughs Enable Remote Code Execution in vm2 Sandbox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:33:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_26956 #CVSS 9.8 #infosec #JavaScript Security #Node.js #Patch Alert #rce #Sandbox Escape #V8 Engine #vm2 #WebAssembly
Daily CyberSecurity
5.7 Million Users at Risk: Multiple 9.8 CVSS Breakthroughs Enable Remote Code Execution in vm2 Sandbox
Critical 9.8 CVSS flaws in vm2 affect 5.7M monthly users, allowing RCE via WASM and Promise bypasses. Upgrade to vm2 v3.11.0 immediately to secure your host.
22 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (May 4 – May 10, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:50:50 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #CVSS 10.0 #cyber security 2026 #Gotenberg API #Ivanti EPMM #Linux Dirty Frag #LiteLLM #Palo Alto PAN_OS #threat intelligence #vm2 Sandbox Escape #Vulnerability Digest #Zero_Day Exploits
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (May 4 – May 10, 2026)
Weekly Security Digest: 1,928 new vulnerabilities hit the wire. From Palo Alto firewalls to LiteLLM AI gateways, here is how to prioritize your defense.
11 views
Daily Writeups
⤷ Title: Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 02:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_47137 #CVE_2026_47140 #CVE_2026_47210 #Cyber Security #infosec #JSPI Promise #Node.js Sandbox Escape #patch bypass #Prototype Hijacking #Remote Code Execution #vm2 sandbox
Daily CyberSecurity
Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
Five critical sandbox escape flaws in vm2 (CVE-2026-47140 & more) allow unauthenticated remote code execution on the host server. Update now!
15 views
Daily Writeups
⤷ Title: The Zero-Day Dispatch: Weekly Threat Intelligence Briefing (May 18 – May 24, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 10:24:19 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #CVE Updates #cybersecurity news #threat intelligence #vm2 sandbox #vulnerability management #Zero_Day Exploits
Daily CyberSecurity
The Zero-Day Dispatch: Weekly Threat Intelligence Briefing (May 18 – May 24, 2026)
Read our weekly threat intelligence briefing. Discover active exploits, critical CVEs, and the latest CISA KEV additions for May 18–24, 2026.
34 views