Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Critical HIKVISION applyCT Flaw (CVE-2025-34067, CVSS 10.0): Unauthenticated RCE Via Fastjson
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:33:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #applyCT #CVE_2025_34067 #cybersecurity #Deserialization #Fastjson #HikCentral #Hikvision #rce #Remote Code Execution #Security Management Platform #Vulnerability
Daily CyberSecurity
Critical HIKVISION applyCT Flaw (CVE-2025-34067, CVSS 10.0): Unauthenticated RCE Via Fastjson
A critical flaw (CVE-2025-34067, CVSS 10.0) in HIKVISION applyCT allows unauthenticated RCE via Fastjson deserialization, risking surveillance systems. Patch immediately!
👍1
26 views
Daily Writeups
⤷ Title: Stealthy WordPress Malware Uncovered: SEO Spam Plugin Mimics Your Domain to Evade Detection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:28:42 +0000
════════════════════════
⌗ Tags: #Malware #Black Hat SEO #Cloaking #cybersecurity #malware #Obfuscation #plugin #Search Engine Optimization #SEO Spam #Sucuri #Web Security #wordpress
Daily CyberSecurity
Stealthy WordPress Malware Uncovered: SEO Spam Plugin Mimics Your Domain to Evade Detection
Sucuri uncovers a stealthy WordPress malware plugin that mimics your domain to inject SEO spam for bots while remaining invisible to users, evading detection.
30 views
Daily Writeups
⤷ Title: SCATTERED SPIDER Infiltrates Airlines: Ransomware, vCenter Hijacks, and Voice Phishing Unleashed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:22:19 +0000
════════════════════════
⌗ Tags: #Cybercriminals #airline cyberattacks #Cloud Security #CrowdStrike #Cybercrime #identity compromise #ransomware #Scattered Spider #Vishing #VMware ESXi
Daily CyberSecurity
SCATTERED SPIDER Infiltrates Airlines: Ransomware, vCenter Hijacks, and Voice Phishing Unleashed
SCATTERED SPIDER targets U.S. airlines with ransomware, vishing, and VMware exploits—CrowdStrike warns of a rising threat across cloud identities.
28 views
Daily Writeups
⤷ Title: Anthropic MCP Server Flaws: Path Traversal & Symlink Attacks Allow RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:19:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Anthropic #CVE_2025_53109 #CVE_2025_53110 #cybersecurity #MCP #Model Context Protocol #Path Traversal #privilege escalation #rce #Remote Code Execution #Symlink #Vulnerability
Daily CyberSecurity
Anthropic MCP Server Flaws: Path Traversal & Symlink Attacks Allow RCE
Cymulate reveals two flaws (CVE-2025-53110, CVE-2025-53109) in Anthropic's Filesystem MCP Server, allowing path traversal, symlink attacks, and RCE, exposing AI developer machines.
22 views
Daily Writeups
⤷ Title: Apache APISIX Flaw (CVE-2025-46647): Token Issuer Bypass in OpenID Connect Allows Cross-Issuer Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:13:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report
Daily CyberSecurity
Apache APISIX Flaw (CVE-2025-46647): Token Issuer Bypass in OpenID Connect Allows Cross-Issuer Access
A flaw (CVE-2025-46647) in Apache APISIX's OpenID Connect plugin allows authenticated attackers to bypass token issuer validation and gain unauthorized cross-issuer access.
23 views
Daily Writeups
⤷ Title: Exposed JDWP Debug Ports Under Attack: Cryptominers Infiltrating Java Apps in Hours
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:07:06 +0000
════════════════════════
⌗ Tags: #Malware #Cryptojacking #cryptomining #cybersecurity #HoneyPot #Java Debug Wire Protocol #JDWP #malware #rce #Remote Code Execution #TeamCity #Wiz Research Team
Daily CyberSecurity
Exposed JDWP Debug Ports Under Attack: Cryptominers Infiltrating Java Apps in Hours
Wiz Research Team uncovers rapid exploitation of exposed JDWP interfaces, deploying XMRig cryptominers in TeamCity and other Java environments within hours of exposure.
23 views
Daily Writeups
⤷ Title: Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:01:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Server #CFML #ColdFusion Markup Language #CVE_2025_34074 #cybersecurity #Lucee #metasploit #rce #Remote Code Execution #scheduled tasks #Vulnerability
Daily CyberSecurity
Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out
A critical flaw (CVE-2025-34074, CVSS 9.4) in Lucee allows authenticated admins to achieve RCE by abusing scheduled tasks. A Metasploit module is out; urgent patching needed!
23 views
Daily Writeups
⤷ Title: Account Takeover via OTP Brute Force in E-commerce Platform .
════════════════════════
𐀪 Author: Waleed Osama
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:37:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #development #brute_force #account_takeover #hacking
Medium
Account Takeover via OTP Brute Force in E-commerce Platform .
⚡ Quick Overview
16 views
Daily Writeups
⤷ Title: GoBuster: Tu Herramienta Esencial para la Enumeración Web, el Pentesting y Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:02:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #bug_bounty #infosec #cybersecurity
Medium
GoBuster: Tu Herramienta Esencial para la Enumeración Web, el Pentesting y Bug Bounty
GoBuster: Descubre recursos ocultos en webs. Guía esencial para pentesting y bug bounty, con módulos dir, dns, fuzz.
19 views
Daily Writeups
⤷ Title: How I Unlocked Premium Features for Free via a Simple API Trick (Privilege Escalation Story)
════════════════════════
𐀪 Author: MostReal
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 23:19:12 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #privilege_escalation #cybersecurity #bug_bounty_writeup
Medium
How I Unlocked Premium Features for Free via a Simple API Trick (Privilege Escalation Story)
## 🎯 Introduction
15 views
Daily Writeups
⤷ Title: HOW TO EXPLOIT ESC2 IN ADCS — IN DETAIL
════════════════════════
𐀪 Author: 0xZ3US
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:46:58 GMT
════════════════════════
⌗ Tags: #red_teaming #hacking #adc #learn_hacking
Medium
🔥 HOW TO EXPLOIT ESC2 IN ADCS — IN DETAIL
Hello! My name is 0xZ3US, a 21-year-old passionate about hacking and red teaming operations. I’m always eager to expand my knowledge of…
22 views
Daily Writeups
⤷ Title: ️ Mobile Pentesting: Keamanan Aplikasi Android AndroGOAT
════════════════════════
𐀪 Author: Alex
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:41:53 GMT
════════════════════════
⌗ Tags: #mobile_penetration_test #cybersecurity #android
Medium
🛡️ Mobile Pentesting: Keamanan Aplikasi Android AndroGOAT
AndroGOAT adalah aplikasi vulnerable Android yang dirancang untuk pembelajaran keamanan mobile. Dalam write-up ini, kita akan menantang…
39 views
Daily Writeups
⤷ Title: dnSpy—Static Analysis of a .NET Malware
════════════════════════
𐀪 Author: R.D.Tarun
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:25:35 GMT
════════════════════════
⌗ Tags: #malware_analysis #spyware #dotnet #cybersecurity #malware
Medium
dnSpy—Static Analysis of a .NET Malware
Using dnSpy to analyze a Keylogger and Password Stealer
20 views
Daily Writeups
⤷ Title: CTF US Cyber Open 2025 Writeup
════════════════════════
𐀪 Author: Dee
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:24:54 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #cybersecurity
Medium
CTF US Cyber Open 2025 Writeup
CTF Challenges and write-ups on the US Cyber Open Season V 2025. The competition I participated in was for beginners, so all the solutions…
15 views
Daily Writeups
⤷ Title: Deep Web y Dark Web: ¿Un misterio oculto o una realidad mal contada?
════════════════════════
𐀪 Author: Tiziano Mass
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 23:37:59 GMT
════════════════════════
⌗ Tags: #deep_web #tor #ciberseguridad #cybersecurity #darkweb
Medium
Deep Web y Dark Web: ¿Un misterio oculto o una realidad mal contada?
La deep web no es solo un lugar lleno de criminales, ni tampoco es ese rincón oscuro que aparece en las películas. La verdad es que, sin…
16 views
Daily Writeups
⤷ Title: Fortinet Secure SD-WAN: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 23:32:52 GMT
════════════════════════
⌗ Tags: #sd_wan #cloud_security #cybersecurity #fortinet #network_security
Medium
Fortinet Secure SD-WAN: A Comprehensive Guide
As enterprises embrace digital transformation and adopt hybrid work environments, the demand for high-performance, secure, and scalable…
18 views
Daily Writeups
⤷ Title: Part 3: In-Memory Execution Methods — How Malware Lives Rent-Free in Your System
════════════════════════
𐀪 Author: Kunal Rajour
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 22:55:44 GMT
════════════════════════
⌗ Tags: #information_security #fileless_malware #cybersecurity #malware #memes
Medium
Part 3: In-Memory Execution Methods — How Malware Lives Rent-Free in Your System
You’re working late, half-distracted.
25 views
Daily Writeups
⤷ Title: TryHackMe | Friday Overtime Room — Cyber Threat Intelligence
════════════════════════
𐀪 Author: the Journal of a Cyber Security Enthusiast
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 23:54:00 GMT
════════════════════════
⌗ Tags: #virustotal #cyber_threat_intelligence #friday_overtime #tryhackme #tryhackme_walkthrough
Medium
TryHackMe | Friday Overtime Room — Cyber Threat Intelligence
Question 1 - Who shared the malware samples?
42 views
Daily Writeups
⤷ Title: Hacking, Virtual Machines, Linux, and Networking: Your Guide to the Digital World!
════════════════════════
𐀪 Author: Naveen J
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 02:43:47 GMT
════════════════════════
⌗ Tags: #computer_science #artificial_intelligence #hacking #cybersecurity #technology
Medium
Hacking, Virtual Machines, Linux, and Networking: Your Guide to the Digital World!
Your Guide to the Digital World!
34 views
Daily Writeups
⤷ Title: 200+ Life Hacks Review
════════════════════════
𐀪 Author: xuanthuan123
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 01:55:20 GMT
════════════════════════
⌗ Tags: #hacking #hacks #li̇fe #200
Medium
200+ Life Hacks Review
200+ Life Hacks Review — Introduction
29 views
Daily Writeups
⤷ Title: Ejercicio Active Directory, VPN Pivoting y Escalada de Privilegios
════════════════════════
𐀪 Author: Luis Angel Ramirez Mendoza
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 01:44:50 GMT
════════════════════════
⌗ Tags: #metodologia #pentesting #ciberseguridad #hacking #red_team
Medium
Ejercicio Active Directory, VPN Pivoting y Escalada de Privilegios
Luis Angel Ramirez Mendoza
23 views