Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: CVE-2025–63416: The Admin Panel Heist — Stored XSS to Privilege Escalation
════════════════════════
𐀪 Author: Rohit Chaudhary
════════════════════════
ⴵ Time: Sun, 02 Nov 2025 11:37:52 GMT
════════════════════════
⌗ Tags: #backdoor #xss_vulnerability #admin #bug_bounty
Medium
CVE-2025–63416: The Admin Panel Heist — Stored XSS to Privilege Escalation
How a Simple Chat Message Became a Backdoor to Administrative Dominion
41 views
Daily Writeups
⤷ Title: Still Using ‘123456’? 2025 Study Reveals the World’s Weakest Passwords
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 10 Nov 2025 02:43:09 +0000
════════════════════════
⌗ Tags: #Information Security #123456 #Admin #Comparitech #cybersecurity #DataBreach #PasswordList #PasswordSecurity #TwoFactorAuthentication
Penetration Testing Tools
Still Using '123456'? 2025 Study Reveals the World's Weakest Passwords
A 2025 study of 2B leaked passwords confirms '123456', 'admin', and 'password' are still the most common. Experts warn these can be cracked in seconds.
10 views
Daily Writeups
⤷ Title: nopCommerce Flaw (CVE-2025-11699) Allows Admin Takeover by Reusing Session Cookies After Logout
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 02:11:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Takeover #Critical Vulnerability #CVE_2025_11699 #e_commerce #Logout Bypass #nopCommerce #Session Hijacking
Daily CyberSecurity
nopCommerce Flaw (CVE-2025-11699) Allows Admin Takeover by Reusing Session Cookies After Logout
A Critical flaw (CVE-2025-11699) in nopCommerce allows attackers to hijack admin accounts by reusing session cookies that fail to invalidate upon logout. Update to v4.90.3 immediately.
13 views
Daily Writeups
⤷ Title: How I Chained 3 Vulnerabilities for Complete Account Takeover
════════════════════════
𐀪 Author: Raja Uzair Abdullah
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 08:01:45 GMT
════════════════════════
⌗ Tags: #security_testing #bug_bounty #application_security #penetration_testing #admin_takeover
Medium
How I Chained 3 Vulnerabilities for Complete Account Takeover
Complete Account Takeover: Chaining Three Vulnerabilities for Full System Compromise
41 views
Daily Writeups
⤷ Title: Exploited in the Wild: Critical Modular DS Flaw CVE-2026-23550 (CVSS 10) Allows Instant Admin Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 09:34:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #Admin Takeover #CVE_2026_23550 #Modular DS #Patchstack #privilege escalation #Web Security #wordpress security #zero_day
Daily CyberSecurity
Exploited in the Wild: Critical Modular DS Flaw CVE-2026-23550 (CVSS 10) Allows Instant Admin Takeover
Urgent: Modular DS flaw CVE-2026-23550 (CVSS 10) is actively exploited in the wild. Attackers are creating fake admins. Update to the latest version now.
20 views
Daily Writeups
⤷ Title: Absolute Compromise: 10.0 Flaw in Modular DS Plugin Grants Instant Admin Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 03:37:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Bypass #CVE_2026_23550 #cyberattack #InfoSec 2026 #Modular DS #Patchstack #Plugin Security #privilege escalation #WordPress #zero_day
Penetration Testing Tools
Absolute Compromise: 10.0 Flaw in Modular DS Plugin Grants Instant Admin Access
A critical vulnerability has been unearthed in the ubiquitous WordPress plugin Modular DS, which is currently being actively
16 views
Daily Writeups
⤷ Title: Broadcast Hijack: Critical KiloView Flaw (CVSS 9.8) Grants Full Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:05:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Takeover #Broadcast Security #CISA alert #CVE_2026_1453 #firmware update #IoT security #KiloView #Streaming Security #Video Encoder Security
Daily CyberSecurity
Broadcast Hijack: Critical KiloView Flaw (CVSS 9.8) Grants Full Control
Critical KiloView flaw CVE-2026-1453 (CVSS 9.8) allows unauthenticated admin takeover. Broadcast feeds at risk. Check affected E1/E2 versions immediately.
20 views
Daily Writeups
⤷ Title: Admins Only: Microsoft’s New Windows 11 Update Quietly Locks Down Storage Settings
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:07:25 +0000
════════════════════════
⌗ Tags: #Windows #admin privileges #IT Management #KB5074105 #Storage Sense #Storage Settings #UAC prompt #Windows 11 #Windows 11 24H2 #Windows 11 25H2 #Windows security update
Daily CyberSecurity
Admins Only: Microsoft’s New Windows 11 Update Quietly Locks Down Storage Settings
Microsoft’s KB5074105 update adds a surprise security layer: only administrators can now access Storage settings. Standard users now face a mandatory UAC prompt.
14 views
Daily Writeups
⤷ Title: ATO Admin Account via Broken Password Reset Flow
════════════════════════
𐀪 Author: El Professor Qais
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 13:47:09 GMT
════════════════════════
⌗ Tags: #account_takeover #vulnerability #ethical_hacking #admin_password_reset #bug_bounty
Medium
ATO Admin Account via Broken Password Reset Flow
Hi everyone! I’m Qais. Back again with the critical Bug Bounty story which I think everyone would like if they found out this simple Broken…
15 views
Daily Writeups
⤷ Title: ثغرة CVE-2026–20093 في Cisco IMC: تخطٍ كامل للمصادقة بصلاحيات Admin (CVSS 9.8)
════════════════════════
𐀪 Author: Rynbsd
════════════════════════
ⴵ Time: Sat, 04 Apr 2026 18:01:01 GMT
════════════════════════
⌗ Tags: #admin #cve #imc #hacking #cisco
Medium
ثغرة CVE-2026–20093 في Cisco IMC: تخطٍ كامل للمصادقة بصلاحيات Admin (CVSS 9.8)
ثغرة حرجة في Cisco IMC تتيح تجاوز المصادقة عن بُعد. تعرّف على الأجهزة المتأثرة والإجراءات العاجلة المطلوبة.
18 views