Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Thu, 20 Apr 2023 13:06:30 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: What Are Digital Signatures?
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/a6a9f46f1285
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #signature #digital #bug_zero #cybersecurity #digital_signatures
Medium
What Are Digital Signatures?
In today’s digital world, ensuring the authenticity and integrity of electronic documents is crucial. Digital signatures provide a way to…
3 views
Daily Writeups
β€· Title: Bybit SaldΔ±rΔ±sΔ±: Γ‡oklu Δ°mza GΓΌvenliği ve SektΓΆre YΓΆnelik DΓΌzenleyici Γ–neriler
════════════════════════
π€ͺ Author: BeosinTR
════════════════════════
β΄΅ Time: Tue, 25 Feb 2025 20:07:17 GMT
════════════════════════
βŒ— Tags: #cybersecurity #hacking #cryptocurrency #bybit #signature
Medium
Bybit SaldΔ±rΔ±sΔ±: Γ‡oklu Δ°mza GΓΌvenliği ve SektΓΆre YΓΆnelik DΓΌzenleyici Γ–neriler
Bybit Γ§oklu imza saldΔ±rΔ±sΔ±, kripto varlΔ±k gΓΌvenliğinde gΓΌvenlik aΓ§Δ±klarΔ±nΔ± gΓΆstermesi aΓ§Δ±sΔ±ndan sektΓΆre ΓΆnemli bir uyarΔ± niteliğindedir…
18 views
Daily Writeups
β€· Title: North Korean Hacking Group Steals 2 Trillion Won in Ethereum… Technique: β€˜Signature Forgery’
════════════════════════
π€ͺ Author: RICH CHOI
════════════════════════
β΄΅ Time: Wed, 26 Feb 2025 02:05:56 GMT
════════════════════════
βŒ— Tags: #north_korea #signature_forgery #cryptocurrency #security #hacking
Medium
North Korean Hacking Group Steals 2 Trillion Won in Ethereum… Technique: β€˜Signature Forgery’
The North Korean hacking group that stole 2 trillion won (1.46 billion dollars, as of the time of the damage) of Ethereum from Bybit, the…
12 views
Daily Writeups
β€· Title: Critical OpenPGP.js Flaw Allows Message Signature Spoofing
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 21 May 2025 00:09:21 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2025_47934 #encryption #messaging #OpenPGP.js #security #signature spoofing
Daily CyberSecurity
Critical OpenPGP.js Flaw Allows Message Signature Spoofing
A critical OpenPGP.js flaw (CVE-2025-47934) allows attackers to spoof message signatures and manipulate content. Update to fix this risk.
9 views
Daily Writeups
β€· Title: Critical node-forge Flaw (CVE-2025-12816) Allows Signature Verification Bypass via ASN.1 Manipulation (21M Downloads/Week)
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 26 Nov 2025 01:44:28 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #ASN.1 #Critical Vulnerability #cryptography #CVE_2025_12816 #node_forge #npm #Signature Bypass
Daily CyberSecurity
Critical node-forge Flaw (CVE-2025-12816) Allows Signature Verification Bypass via ASN.1 Manipulation (21M Downloads/Week)
A Critical flaw (CVE-2025-12816) in node-forge allows attackers to bypass signature verification by manipulating ASN.1 structures. The vulnerability affects 21M+ weekly downloads. Update to v1.3.2.
13 views
Daily Writeups
β€· Title: HTB: Era
════════════════════════
π€ͺ Author: bluesnow
════════════════════════
β΄΅ Time: Fri, 27 Feb 2026 09:30:45 GMT
════════════════════════
βŒ— Tags: #signature_section #cronjob #rce #php_wrappers #idor
Medium
HTB: Era
| Subdomain | IDOR | SQLite | SSH2.exec:// PHP Stream Wrapper | RCE | Cron Job | .text_sig Signature |
47 views
Daily Writeups
β€· Title: The Infinite Variant: How β€œPromptmorphism” Uses AI to Shatter Traditional Malware Detection
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Tue, 17 Mar 2026 09:39:45 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #AI Malware #Cyber Security 2026 #Gen Digital #large language models #LLM #Loader_as_a_Service #Polymorphism #Promptmorphism #Signature_Based Detection #StealC #threat intelligence #Wincir
Penetration Testing Tools
The Infinite Variant: How "Promptmorphism" Uses AI to Shatter Traditional Malware Detection
Malefactors are increasingly harnessing large language models to rapidly rewrite malicious code. This stratagem, christened β€œpromptmorphism,” facilitates the
19 views
Daily Writeups
β€· Title: High-Severity Authentication Bypass Discovered in MinIO Storage
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 15 Apr 2026 12:02:08 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #AIStor #Cloud Security #CVSS 8.8 #cybersecurity #Data Injection #infosec #MinIO #Object Storage #PutObjectHandler #S3 Security #Signature Bypass
Daily CyberSecurity
High-Severity Authentication Bypass Discovered in MinIO Storage
MinIO faces a critical 8.8 CVSS vulnerability allowing unauthenticated object writes by bypassing signature checks. Secure your AI/ML dataβ€”upgrade now!
17 views
Daily Writeups
β€· Title: Signature Bypass Alert: Critical Coder Flaw (CVE-2026-46354) Exposes Git Keys and Developer Tokens
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 21 May 2026 02:10:07 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Azure IMDS #Cloud Development Environments #Coder #CVE_2026_46354 #Cyber Security #infosec #OAuth exploitation #Patch Alert #Signature Bypass #Terraform Workspace #Token Theft
Daily CyberSecurity
Signature Bypass Alert: Critical Coder Flaw (CVE-2026-46354) Exposes Git Keys and Developer Tokens
Coder patches a critical 9.1 CVSS signature bypass (CVE-2026-46354) in Azure identities that allows unauthenticated workspace token theft. Patch now!
11 views
Daily Writeups
β€· Title: Critical Security Defect Exploits NTFS Processing Architecture Within 7-Zip
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 27 May 2026 04:42:21 +0000
════════════════════════
βŒ— Tags: #Vulnerability #7_Zip 26.01 download #7_Zip CVE_2026_48095 patch #dynamic link library memory corruption #GitHub Security Lab GHSL_2026_140 #heap buffer write overflow #NTFS archive handler #remote code execution vulnerability #signature based fallback detection #vtable hijack exploit #Yaroslav Lobachevsky cyber security
Information Security News
7-Zip CVE-2026-48095 Patch: Fix Critical NTFS Code Execution
Update now to the 7-Zip CVE-2026-48095 patch. Discover how this critical heap overflow in the NTFS archive handler triggers remote code execution.
14 views
Daily Writeups
β€· Title: The Quantum Bastion: Let’s Encrypt Embraces Merkle Tree Certificates against Post-Quantum Threats
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Thu, 04 Jun 2026 17:13:58 +0000
════════════════════════
βŒ— Tags: #Technology #Certificate Transparency automation #Google Cloudflare MTC #Let's Encrypt roadmap #Merkle Tree Certificates #post_quantum cryptography TLS #signature size bloat mitigation
Daily CyberSecurity
The Quantum Bastion: Let’s Encrypt Embraces Merkle Tree Certificates against Post-Quantum Threats
Discover how Merkle Tree Certificates resolve post-quantum signature bloat. Learn about the new TLS standards from Google and Cloudflare.
15 views