Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Nightingale: A comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:27:55 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #nightingale
Penetration Testing Tools
Nightingale: A comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment
Nightingale (Docker for Pentesters) contains all the required well-known tools that will be required for the Pentesters at the time of Penetration Testing.
19 views
Daily Writeups
⤷ Title: Linux Kernel Flaw (CVE-2023-0386) Actively Exploited for Root Privilege Escalation, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:45:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #container security #CVE_2023_0386 #cybersecurity #Exploit #Linux Kernel #OverlayFS #privilege escalation #root access
Daily CyberSecurity
Linux Kernel Flaw (CVE-2023-0386) Actively Exploited for Root Privilege Escalation, PoC Available
CISA has added CVE-2023-0386, a critical Linux kernel OverlayFS flaw, to its KEV Catalog, confirming active exploitation allowing local users to gain root privileges.
19 views
Daily Writeups
⤷ Title: Critical NetScaler Flaws Allow Access Control Bypass & Memory Overread
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:34:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #access control bypass #ADC #Citrix #Cloud Software Group #cybersecurity #Gateway #Memory Overread #NetScaler
Daily CyberSecurity
Critical NetScaler Flaws Allow Access Control Bypass & Memory Overread
Cloud Software Group issues urgent patches for two critical NetScaler flaws allowing access bypass and memory overread. Update immediately.
22 views
Daily Writeups
⤷ Title: Urgent Veeam Update: Critical RCE CVE-2025-23121 (CVSS 9.9) & Two Other Flaws Threaten Backup Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:24:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backup & Replication #CVE_2025_23121 #CVE_2025_24286 #CVE_2025_24287 #cybersecurity #Data Protection #Disaster Recovery #rce #Remote Code Execution #Veeam #Vulnerability
Daily CyberSecurity
Urgent Veeam Update: Critical RCE CVE-2025-23121 (CVSS 9.9) & Two Other Flaws Threaten Backup Servers
Veeam released a critical update for Backup & Replication, patching three flaws, including a CVSS 9.9 RCE (CVE-2025-23121) allowing authenticated users to execute code.
17 views
Daily Writeups
⤷ Title: Chrome Update Alert: Two High-Severity Flaws (CVE-2025-6191, CVE-2025-6192) Patched
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:16:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #chrome #cybersecurity #google chrome #High Severity #integer overflow #Profiler #security update #use after free #V8 #Vulnerability
Daily CyberSecurity
Chrome Update Alert: Two High-Severity Flaws (CVE-2025-6191, CVE-2025-6192) Patched
Google Chrome 137.0.7151.119/.120 is rolling out with crucial security fixes, addressing two high-severity flaws: an integer overflow in V8 and a use-after-free in Profiler.
20 views
Daily Writeups
⤷ Title: WAGO Device Manager Vulnerabilities Expose Critical Industrial Infrastructure to Remote Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:08:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_25264 #CVE_2025_25265 #cybersecurity #ICS #Industrial Security #PLC #security update #Vulnerabilities #WAGO
Daily CyberSecurity
WAGO Device Manager Vulnerabilities Expose Critical Industrial Infrastructure to Remote Exploits
WAGO Device Manager security updates address two vulnerabilities allowing unauthenticated remote access to sensitive system files.
17 views
Daily Writeups
⤷ Title: Kimsuky APT Group Abuses HWP and AnyDesk for Covert Remote Surveillance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:01:06 +0000
════════════════════════
⌗ Tags: #Cyber Security #AnyDesk #APT #ASEC #backdoor #cybersecurity #dropbox #HWP #Kimsuky #living_off_the_land #North Korea #phishing #Remote Access #spear_phishing
Daily CyberSecurity
Kimsuky APT Group Abuses HWP and AnyDesk for Covert Remote Surveillance
Kimsuky APT is using HWP documents and stealthy AnyDesk backdoors in a new phishing campaign to infiltrate systems under the guise of academic collaboration.
24 views
Daily Writeups
⤷ Title: How to Use Subfinder for Bug Bounty: Complete Guide with Examples and Advanced Tips
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:02:38 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #ethical_hacking #penetration_testing #cybersecurity
Medium
How to Use Subfinder for Bug Bounty: Complete Guide with Examples and Advanced Tips
Learn how to use Subfinder to list subdomains in Bug Bounty. A practical guide, examples, APIs, and automation.
24 views
Daily Writeups
⤷ Title: ISO 27001 Certification? Here’s Your Survival Guide
════════════════════════
𐀪 Author: Max Secure
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 23:04:49 GMT
════════════════════════
⌗ Tags: #iso_27001 #cybersecurity #risk_assessment #information_security #infosec
Medium
ISO 27001 Certification? Here’s Your Survival Guide
So, your boss just dropped a bombshell: “We need ISO 27001 certification in 48 weeks, and you’re leading the charge.”
21 views
Daily Writeups
⤷ Title: Casefile: XIS10CIAL (Marc Streefland) GPT Pentest Investigation
════════════════════════
𐀪 Author: mikesploit
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:15:50 GMT
════════════════════════
⌗ Tags: #ethical_ai #openai #ai #cybersecurity #chatgpt
Medium
Casefile: XIS10CIAL (Marc Streefland) GPT Pentest Investigation
Overview
14 views
Daily Writeups
⤷ Title: Smart Caching and DDoS Mitigation with AWS CloudFront: A Practical Guide for Modern Web Apps
════════════════════════
𐀪 Author: Harsh Singhal
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:05:54 GMT
════════════════════════
⌗ Tags: #web_performance #aws #edge_computing #cloudfront #cybersecurity
Medium
Smart Caching and DDoS Mitigation with AWS CloudFront: A Practical Guide for Modern Web Apps
CDNs are critical to modern performance and scalability — but most only shine when serving purely static assets. As soon as you introduce…
17 views
Daily Writeups
⤷ Title: Scaling Smart: Why GDPR Compliance is a Secret Weapon for SaaS Growth
════════════════════════
𐀪 Author: Zachary Neal
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 23:52:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #gdpr #compliance
Medium
Scaling Smart: Why GDPR Compliance is a Secret Weapon for SaaS Growth
As software companies scale, managing user data becomes increasingly complex and important. Compliance with the General Data Protection…
17 views
Daily Writeups
⤷ Title: Caltech Scientists Achieve Hyper-Entanglement in Atomic Motion: A Quantum Leap in Control and…
════════════════════════
𐀪 Author: QuantumGenie
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 23:37:50 GMT
════════════════════════
⌗ Tags: #technology #quantum_computing #cybersecurity #information_technology #laser
Medium
Caltech Scientists Achieve Hyper-Entanglement in Atomic Motion: A Quantum Leap in Control and…
In a groundbreaking experiment that pushes the boundaries of quantum science, researchers at the California Institute of Technology…
28 views
Daily Writeups
⤷ Title: No, Don’t Stop the Bleeding
════════════════════════
𐀪 Author: Wesley Belleman
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 23:28:23 GMT
════════════════════════
⌗ Tags: #incident_response #cybersecurity #security #national_security #emergency_response
Medium
No, Don’t Stop the Bleeding
Blocking too soon in a cyber incident can do more harm than good. Learn why “stop the bleeding” is often the wrong move.
28 views
Daily Writeups
⤷ Title: Taiwan Under Attack: Sophisticated Phishing Campaign Delivers Winos 4.0, HoldingHands RAT, & Gh0stCringe
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 02:49:25 +0000
════════════════════════
⌗ Tags: #Malware #cyberattack #cybersecurity #FortiGuard Labs #Gh0stCringe #HoldingHands RAT #malware #phishing #Taiwan #Tax Bureau Impersonation #Winos
Daily CyberSecurity
Taiwan Under Attack: Sophisticated Phishing Campaign Delivers Winos 4.0, HoldingHands RAT, & Gh0stCringe
A sophisticated malware campaign is targeting Taiwan, impersonating the National Taxation Bureau to distribute Winos 4.0, HoldingHands RAT, and Gh0stCringe.
30 views
Daily Writeups
⤷ Title: Urgent Ubiquiti Alert: Critical Flaws (CVSS 9.9) Allow Privilege Escalation via XSS & SQL Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 02:40:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Networking #privilege escalation #sql injection #Ubiquiti #UCRM #UISP #XSS
Daily CyberSecurity
Urgent Ubiquiti Alert: Critical Flaws (CVSS 9.9) Allow Privilege Escalation via XSS & SQL Injection
Two high-severity Ubiquiti flaws allow privilege escalation via XSS in UCRM and authenticated SQL injection in UISP. Update immediately!
24 views
Daily Writeups
⤷ Title: Critical Linux Root Exploit Chain Discovered in PAM & UDisks, Affecting Major Distros
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 02:28:03 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #CVE_2025_6018 #CVE_2025_6019 #cybersecurity #libblockdev #PAM #privilege escalation #Qualys #root access #UDisks #Vulnerability
Daily CyberSecurity
Critical Linux Root Exploit Chain Discovered in PAM & UDisks, Affecting Major Distros
Qualys uncovered two critical Linux flaws (CVE-2025-6018, CVE-2025-6019) allowing local root privilege escalation via PAM and UDisks. Patching is urgent for major distros.
22 views
Daily Writeups
⤷ Title: KimJongRAT Returns: New PE & PowerShell Variants Steal Crypto and Browser Data via CDNs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 02:15:11 +0000
════════════════════════
⌗ Tags: #Malware #Browser Data #CDN Abuse #cryptocurrency #cybersecurity #info_stealer #KimJongRAT #malware #PE #Portable Executable #powershell #rat #Remote Access Trojan #threat intelligence #Unit 42
Daily CyberSecurity
KimJongRAT Returns: New PE & PowerShell Variants Steal Crypto and Browser Data via CDNs
KimJongRAT is back with new PE and PowerShell variants, using LNK files and CDNs to steal browser, email, and over 30 crypto wallet details from victims.
22 views
Daily Writeups
⤷ Title: Why Threat Intelligence Is Critical for Business Security and Avoiding Cyberattacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 01:26:48 +0000
════════════════════════
⌗ Tags: #Technique
Daily CyberSecurity
Why Threat Intelligence Is Critical for Business Security and Avoiding Cyberattacks
Understand the importance of threat intelligence for businesses. Stay ahead of cyber threats and reduce breach costs effectively.
25 views
Daily Writeups
⤷ Title: Multi-Step Process with No Access Control on One Step
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 02:56:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #broken_access_control #privilege_escalation #bypass_access_control #bug_bounty_tips
Medium
Multi-Step Process with No Access Control on One Step
[Write-up] Broken Access Control: Exploiting a Multi‑Step Role Change Flow for Unauthorized Admin Promotion.
21 views
Daily Writeups
⤷ Title: SafeLine 7.1 Adds Custom NGINX Location Support — Here’s How to Use It
════════════════════════
𐀪 Author: AerieWhole123
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 02:46:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #nginx #safeline_waf
Medium
SafeLine 7.1 Adds Custom NGINX Location Support — Here’s How to Use It
SafeLine is an open-source Web Application Firewall (WAF) that’s easy to deploy, highly effective, and trusted by developers to defend web…
13 views