Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Twilio Security Scanner: Audit and Harden Your Twilio Configs in Seconds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 24 May 2025 00:48:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #API Security #Compliance #DevOps Tools #Misconfiguration Detection #security scanner #Twilio #Webhook Security
Penetration Testing Tools
Twilio Security Scanner: Audit and Harden Your Twilio Configs in Seconds
Scan your Twilio account for misconfigurations and security risks like public functions, old API keys, and unencrypted webhooks—fast and easy.
23 views
Daily Writeups
⤷ Title: Grafana Alert: Medium-Severity Flaw (CVE-2025-3415) Exposes DingDing API Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 14 Jun 2025 01:43:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API keys #CVSS 4.3 #cybersecurity #Data Exposure #DingDing #Grafana #Grafana Alerting #Monitoring #security patch #Vulnerability #Webhook
Daily CyberSecurity
Grafana Alert: Medium-Severity Flaw (CVE-2025-3415) Exposes DingDing API Keys
A medium-severity flaw (CVE-2025-3415) in Grafana Alerting exposes sensitive DingDing contact point URLs to viewers. Update to patch or disable the integration
24 views
Daily Writeups
⤷ Title: CVE-2025-23171 & CVE-2025-23172: Versa Director Bugs Open Doors to Webshell Uploads and Command Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 02:40:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_23171 #CVE_2025_23172 #cybersecurity #PoC #privilege escalation #rce #Remote Code Execution #SD_WAN #Software Defined Networking #Versa Director #Vulnerability #Webhook #webshell
Daily CyberSecurity
CVE-2025-23171 & CVE-2025-23172: Versa Director Bugs Open Doors to Webshell Uploads and Command Execution
Two flaws in Versa Director SD-WAN allow authenticated RCE via insecure file uploads and privilege escalation via webhook abuse. PoC code is public.
31 views
Daily Writeups
⤷ Title: DoS Flaws in Argo CD: Unauthenticated Attackers Can Crash Kubernetes Server with Single Request
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 00:15:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Argo CD #Azure DevOps #Bitbucket #CVE_2025_59538 #Denial of Service #dos #GitOps #Kubernetes #Webhook
Daily CyberSecurity
DoS Flaws in Argo CD: Unauthenticated Attackers Can Crash Kubernetes Server with Single Request
Argo CD patches multiple High-severity DoS flaws. A single unauthenticated webhook request can crash the entire argocd-server process via improper JSON handling.
6 views
Daily Writeups
⤷ Title: Stealth C2: Hackers Abuse Discord Webhooks for Covert Data Exfiltration in npm, PyPI, and RubyGems Supply Chain Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Oct 2025 00:14:16 +0000
════════════════════════
⌗ Tags: #Malware #data exfiltration #Discord #npm #PyPI #RubyGems #Stealth #supply chain attack #Webhook C2
Daily CyberSecurity
Stealth C2: Hackers Abuse Discord Webhooks for Covert Data Exfiltration in npm, PyPI, and RubyGems Supply Chain Attacks
Malicious packages across npm, PyPI, and RubyGems are exploiting Discord webhooks as stealthy, resilient C2 endpoints to exfiltrate developer config files and sensitive host data.
10 views
Daily Writeups
⤷ Title: How to Properly Secure Your n8n Webhook API (and Keep Secrets Out of GitHub)
════════════════════════
𐀪 Author: Claire Focus
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 00:14:26 GMT
════════════════════════
⌗ Tags: #n8n_self_host #webhook_integration #github_secret #wordpress_development #api_security
Medium
How to Properly Secure Your n8n Webhook API (and Keep Secrets Out of GitHub)
A Practical Guide to Removing Hardcoded Secrets from n8n Workflows and WordPress Plugins
25 views
Daily Writeups
⤷ Title: The Ni8mare Scenario: Critical n8n Vulnerability Grants Full Server Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 08:32:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #Automation Security #CVE_2026_21858 #Cyber Security #Cyera Research #InfoSec 2026 #n8n #Ni8mare #RCE #Webhook Vulnerability #zero_day
Information Security News
The Ni8mare Scenario: Critical n8n Vulnerability Grants Full Server Access
A critical vulnerability has been unearthed within the esteemed workflow automation platform n8n, permitting the illicit seizure of vulnerable instances without the requisite credentials. By dispa…
14 views
Daily Writeups
⤷ Title: BlueDelta Espionage: Russian Hackers Abuse Free Apps to Target Energy Sector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:08:34 +0000
════════════════════════
⌗ Tags: #Cyber Security #BlueDelta #Credential Harvesting #cyber_espionage #Energy Sector Security #GRU #phishing #Recorded Future #threat intelligence #Webhook.site
Daily CyberSecurity
BlueDelta Espionage: Russian Hackers Abuse Free Apps to Target Energy Sector
A notorious Russian state-sponsored hacking group has evolved its digital espionage toolkit, launching a sophisticated wave of credential-harvesting attacks targeting energy researchers and govern…
20 views
Daily Writeups
⤷ Title: Sandbox Shattered: New n8n Critical Flaw CVE-2026-25049 Exposes AI Workflows to Full Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:45:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Automation #CVE_2026_25049 #Endor Labs #expression evaluation #n8n #Pillar Security #RCE #remote code execution #Sandbox Escape #SecureLayer7 #Tech News 2026 #webhook exploit
Penetration Testing Tools
Sandbox Shattered: New n8n Critical Flaw CVE-2026-25049 Exposes AI Workflows to Full Takeover
The n8n workflow automation platform is once again embroiled in a significant security crisis. In a recently disseminated
19 views
Daily Writeups
⤷ Title: Hiding in Plain Sight: APT28’s “Operation MacroMaze” Hits European Govs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:32:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT28 #cyber_espionage #Fancy Bear #Forest Blizzard #Lab52 #living_off_the_land #Macro Malware #Operation MacroMaze #Spanish Government #Webhook.site
Daily CyberSecurity
Hiding in Plain Sight: APT28's "Operation MacroMaze" Hits European Govs
APT28's "Operation MacroMaze" targets Europe using Spanish gov decoys. The campaign uses "low-tech" macros & Webhook.site to evade detection.
20 views
Daily Writeups
⤷ Title: The Invisible Edge: APT28’s “Operation MacroMaze” Hijacks Browsers via Webhook Lures
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 07:31:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT28 #Central Europe #Cyber Espionage #INCLUDEPICTURE #LAB52 #Microsoft Edge headless #Operation MacroMaze #S2 Grupo #Spear Phishing #Tech News 2026 #VBScript #webhook.site #Western Europe
Penetration Testing Tools
The Invisible Edge: APT28’s "Operation MacroMaze" Hijacks Browsers via Webhook Lures
The APT28 syndicate has orchestrated a series of surgical strikes against organizations across Western and Central Europe, employing
8 views
Daily Writeups
⤷ Title: Budibase Patches Critical RCE and SSRF Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 14:30:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation Security #Budibase #CVE_2026_31818 #CVE_2026_35216 #cybersecurity #infosec #Low Code Security #Open Source Security #rce #ssrf #Webhook Exploit
Daily CyberSecurity
Budibase Patches Critical RCE and SSRF Vulnerabilities
Critical 9.6 CVSS flaws in Budibase allow unauthenticated RCE and data exfiltration via SSRF. Secure your internal tools—update to v3.33.4 now.
29 views
Daily Writeups
⤷ Title: Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation #CVSS 10 #infosec #JavaScript Security #n8n #Node.js #Patch Alert #Prototype Pollution #rce #Webhook Security #XML parsing
Daily CyberSecurity
Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
Critical CVSS 10 and 9.4 vulnerabilities hit n8n. Prototype pollution in XML nodes can lead to full RCE. Patch to v2.18.1 or v1.123.32 immediately.
17 views