Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Wed, 12 Jul 2023 02:16:41 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: How to Protect Your NAS from Ransomware
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/b236beb652a1
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #ransomware #nas #backup #data_protection #cybersecurity
Medium
How to Protect Your NAS from Ransomware
The number of malware variants that specifically target NAS devices appears to be on the rise. Fortunately, being proactive in taking…
6 views
Daily Writeups
β€· Title: Synology NAS: Third-Party Drives Restricted in 2025 Plus Series
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 17 Apr 2025 07:05:23 +0000
════════════════════════
βŒ— Tags: #Technology #DRM #firmware #hard drives #NAS #restrictions #Storage #Synology
Daily CyberSecurity
Synology NAS: Third-Party Drives Restricted in 2025 Plus Series
Synology restricts third-party drives in its 2025 Plus NAS series, limiting features like health reports. Learn about the new policy and workarounds.
19 views
Daily Writeups
β€· Title: CVE-2024-10442 (CVSS 10): Zero-Click RCE in Synology DiskStation, PoC Publishes
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 01 May 2025 00:55:19 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2024_10442 #DiskStation #DSM Security #Jack Dates #libsynobtrfsreplicacore #NAS Vulnerability #Pwn2Own #Remote Code Execution #RET2 Systems #Synology
Daily CyberSecurity
CVE-2024-10442 (CVSS 10): Zero-Click RCE in Synology DiskStation, PoC Publishes
CVE-2024-10442 allows unauthenticated RCE on Synology DS1823xs+ via Replication Service flaw. Patch now to avoid exploit risk.
10 views
Daily Writeups
β€· Title: Critical NAS Risk: I-O DATA Flaw with 9.8 CVSS Allows Remote Command Execution
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 16 May 2025 00:13:33 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Command Injection #CVE_2025_32002 #CVE_2025_32738 #firmware #HDL_T Series #I_O DATA #NAS #security #update
Daily CyberSecurity
Critical NAS Risk: I-O DATA Flaw with 9.8 CVSS Allows Remote Command Execution
Urgent security alert! I-O DATA NAS devices vulnerable. A critical 9.8 CVSS flaw (CVE-2025-32002) enables remote command execution. Update firmware now!
10 views
Daily Writeups
β€· Title: Critical Dell Bug (CVSS 9.8) Lets Unauthenticated Attackers Fully Compromise the System
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 05 Jun 2025 01:51:17 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cybersecurity #Data Security #dell #NAS #NFS #OneFS #patch #PowerScale #sql injection
Daily CyberSecurity
Critical Dell Bug (CVSS 9.8) Lets Unauthenticated Attackers Fully Compromise the System
Unauthenticated attackers can fully compromise Dell PowerScale OneFS. Patch now to stop critical NFS access flaws.
18 views
Daily Writeups
β€· Title: How To Turn Old Android Smartphone into Travel Router With NAS
════════════════════════
π€ͺ Author: mh
════════════════════════
β΄΅ Time: Mon, 21 Jul 2025 07:55:53 +0000
════════════════════════
βŒ— Tags: #Privacy #Android tips #DIY router #file sharing #mobile hotspot #NAS #remote access #rooted Android #smartphone hacks #tech experiments #travel tech #VPN setup
Mobile Hacker
How To Turn Old Android Smartphone into Travel Router With NAS - Mobile Hacker
It’s not perfect, but it worksβ€”a clever DIY project that blends portability, privacy, and practicality.
38 views
Daily Writeups
β€· Title: CVE-2025-30247: Critical Command Injection Flaw in Western Digital My Cloud NAS Devices
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 30 Sep 2025 02:12:41 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Command Injection #CVE_2025_30247 #cybersecurity #firmware #My Cloud #NAS #rce #security update #Western Digital
Daily CyberSecurity
CVE-2025-30247: Critical Command Injection Flaw in Western Digital My Cloud NAS Devices
Western Digital has patched a critical RCE flaw in its My Cloud NAS. The vulnerability allows remote attackers to execute arbitrary commands via a crafted HTTP request.
13 views
Daily Writeups
β€· Title: QNAP Fixes High-Severity Flaws: NetBak Replicator RCE and SQL Injection in Qsync Central
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 06 Oct 2025 00:08:57 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2025_57714 #DLL hijacking #NAS #NetBak Replicator #QNAP #Qsync Central #security advisory #sql injection
Daily CyberSecurity
QNAP Fixes High-Severity Flaws: NetBak Replicator RCE and SQL Injection in Qsync Central
QNAP patches NetBak Replicator and Qsync Central. Flaws include a DLL hijacking risk and critical SQL Injection that allows remote attackers to execute code.
15 views
Daily Writeups
β€· Title: Critical Warning: QNAP Patches Seven Zero-Days Exploited at Pwn2Own 2025
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Sat, 08 Nov 2025 02:54:08 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #HBS 3 #Malware Remover #NAS #Pwn2Own #QNAP #QTS #QuTS hero #security advisory #zero_day
Daily CyberSecurity
Critical Warning: QNAP Patches Seven Zero-Days Exploited at Pwn2Own 2025
QNAP patched 7 zero-day flaws in QTS/QuTS hero and apps (HBS 3, Malware Remover) after being hacked by researchers at Pwn2Own Ireland 2025. Update urgently.
31 views
Daily Writeups
β€· Title: Critical RCE Zero-Days Patched: QNAP Fixes 7 Flaws Exposed at Pwn2Own 2025
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Tue, 11 Nov 2025 02:59:26 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cybersecurity #HBS3 #NAS #Pwn2OwnIreland2025 #QNAP #QTS #QuTShero #RCE #zeroday
Penetration Testing Tools
Critical RCE Zero-Days Patched: QNAP Fixes 7 Flaws Exposed at Pwn2Own 2025
QNAP released emergency patches for seven critical RCE zero-day flaws in QTS, QuTS hero, and key apps like HBS 3, all demonstrated live at Pwn2Own Ireland 2025.
10 views
Daily Writeups
β€· Title: Synology Patches BeeStation Zero-Day (CVE-2025-12686) Exposed at Pwn2Own 2025
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 13 Nov 2025 04:13:11 +0000
════════════════════════
βŒ— Tags: #Vulnerability #BeeStation #CVE_2025_12686 #NAS #Pwn2OwnIreland2025 #RCE #Synacktiv #Synology #zeroday
Penetration Testing Tools
Synology Patches BeeStation Zero-Day (CVE-2025-12686) Exposed at Pwn2Own 2025
Synology patched a critical zero-day (CVE-2025-12686) in BeeStation OS, which allowed RCE. The flaw was demonstrated by Synacktiv researchers at Pwn2Own Ireland 2025.
15 views
Daily Writeups
β€· Title: CVE-2025-66848: Critical Flaw in JD Cloud Routers Grants Hackers Root Access
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 05 Jan 2026 00:28:10 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Authentication Bypass #Command Injection #CVE_2025_66848 #firmware update #JD Cloud #Joylink API #NAS #rce #Remote Code Execution #root access #router security
Daily CyberSecurity
CVE-2025-66848: Critical Flaw in JD Cloud Routers Grants Hackers Root Access
JD Cloud alerts users to CVE-2025-66848, a 9.8 critical flaw allowing remote attackers to bypass auth and gain root access on NAS routers.
15 views
Daily Writeups
β€· Title: QNAP Patches High-Severity SQL Injection and Path Traversal Flaws
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 05 Jan 2026 00:00:15 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2025_59384 #CVE_2025_59387 #cybersecurity #Data Protection #Mac Security #MARS #NAS #Path Traversal #Qfiling #QNAP #security #sql injection
Daily CyberSecurity
QNAP Patches High-Severity SQL Injection and Path Traversal Flaws
QNAP patches high-severity flaws (CVSS 8.1) in Qfiling and MARS that allow data theft and code injection. Secure your NAS by updating to the latest versions!
23 views
Daily Writeups
β€· Title: Root via Telnet: Why You Must Patch Your Synology NAS Against This Decade-Old Ghost
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 03 Feb 2026 04:26:44 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_24061 #DiskStation #DSM 7.2.2 #firmware update #GNU Inetutils #NAS security #privilege escalation #Root Exploit #Synology #Telnet vulnerability
Daily CyberSecurity
Root via Telnet: Why You Must Patch Your Synology NAS Against This Decade-Old Ghost
10 views
Daily Writeups
β€· Title: CVE-2026-24936: Critical ASUSTOR Flaw (CVSS 9.5) Allows Remote System Takeover
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 04 Feb 2026 00:45:21 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #active directory #ADM #Arbitrary File Write #ASUSTOR #Critical Vulnerability #CVE_2026_24936 #Data Integrity #NAS security #Patch Alert #ransomware
Daily CyberSecurity
CVE-2026-24936: Critical ASUSTOR Flaw (CVSS 9.5) Allows Remote System Takeover
Critical ASUSTOR ADM flaw CVE-2026-24936 (CVSS 9.5) allows remote file overwrite. Unauthenticated attackers can seize NAS control. Update to v5.1.2 now.
15 views