Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sat, 30 Sep 2023 11:19:23 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: 8 Tips To Secure Your E-Commerce Website
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/c4db4bc9e755
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #website_security_testing #web_application_security #penetration_testing #cyber_security_awareness #e_commerce_security
Medium
8 Tips To Secure Your E-Commerce Website
Enhance e-commerce website security with 8 crucial tips. Protect data, payments, and customer trust
19 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sat, 07 Oct 2023 11:29:59 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: 10 Essential Security Tips for a Secure eCommerce Website
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/276309f2933b
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #web_penetration_testing #web_application_security #e_commerce_security #website_security #penetration_testing
Medium
10 Essential Security Tips for a Secure eCommerce Website
Safeguard your online store with Cyber Suraksa’s Penetration Testing. Ensure a secure shopping experience for your customers.
11 views
Daily Writeups
β€· Title: WordPress Security Plugins For E-commerce Websites
════════════════════════
π€ͺ Author: Ashley Walker
════════════════════════
β΄΅ Time: Tue, 21 Jan 2025 21:30:37 GMT
════════════════════════
βŒ— Tags: #website_protection #cybersecurity #wordpress_plugins #e_commerce_security #online_store_safety
Medium
WordPress Security Plugins For E-commerce Websites
In the thriving online world, security is paramount, especially when it comes to e-commerce websites. You may be dreamily scrolling through various products, wondering how to safeguard your online…
17 views
Daily Writeups
β€· Title: How to Secure Your Online Store: Essential Cybersecurity Tips for E-Commerce
════════════════════════
π€ͺ Author: Nikita
════════════════════════
β΄΅ Time: Wed, 05 Mar 2025 07:27:41 GMT
════════════════════════
βŒ— Tags: #data_protection #shopify_security #hacking #e_commerce_security #cyber_secutity
Medium
How to Secure Your Online Store: Essential Cybersecurity Tips for E-Commerce
Protect your Shopify, WooCommerce, or any online store from hackers, fraud, and cyber threats with these expert security tips. Did you know…
18 views
Daily Writeups
β€· Title: Fake Font Domain Used in Credit Card Skimming Attack
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 15 Apr 2025 00:19:10 +0000
════════════════════════
βŒ— Tags: #Malware #Credit card skimming #e_commerce security #malware #Website Security #wordpress security
Daily CyberSecurity
Fake Font Domain Used in Credit Card Skimming Attack
Sucuri discovered a credit card skimming attack using a fake font domain to steal credit card data from a WordPress website.
15 views
Daily Writeups
β€· Title: Magecart Attack Uncovered: Obfuscated JavaScript Steals Credit Card Data
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 22 Apr 2025 00:05:34 +0000
════════════════════════
βŒ— Tags: #Malware #credit card theft #cybersecurity #data exfiltration #database pollution #e_commerce security #Infostealer #javascript #Magecart #web skimming
Daily CyberSecurity
Magecart Attack Uncovered: Obfuscated JavaScript Steals Credit Card Data
Yarix uncovers a sophisticated Magecart attack using obfuscated JavaScript to steal credit card data from an e-commerce site, highlighting evolving web skimming tactics.
17 views
Daily Writeups
β€· Title: The Silent Heist: How Formjacking Malware Is Robbing E-Commerce Sites Blind
════════════════════════
π€ͺ Author: Chetan Seripally
════════════════════════
β΄΅ Time: Sat, 24 May 2025 09:05:33 GMT
════════════════════════
βŒ— Tags: #cybersecurity #e_commerce_security #formjacking #data_protection #digital_skimming
Medium
The Silent Heist: How Formjacking Malware Is Robbing E-Commerce Sites Blind
Cybercriminals no longer need to break into vaultsβ€Šβ€”β€Šthey just skim your checkout page. Here’s how this silent cyberattack is growing in…
20 views
Daily Writeups
β€· Title: Critical Magento Flaw (CVE-2025-54236) Actively Exploited for Session Hijacking and Unauthenticated RCE
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 29 Oct 2025 00:21:18 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Active Exploitation #Adobe Commerce #Critical RCE #CVE_2025_54236 #e_commerce security #Magento #SessionReaper
Daily CyberSecurity
Critical Magento Flaw (CVE-2025-54236) Actively Exploited for Session Hijacking and Unauthenticated RCE
Akamai warns of active exploitation of Magento's SessionReaper flaw (CVE-2025-54236). The critical (CVSS 9.8) vulnerability allows session hijacking and unauthenticated RCE via web shells.
22 views
Daily Writeups
β€· Title: Business Logic Flaws: The Vulnerabilities No Scanner Can Find
════════════════════════
π€ͺ Author: InstaTunnel
════════════════════════
β΄΅ Time: Thu, 30 Oct 2025 04:02:32 GMT
════════════════════════
βŒ— Tags: #negative_quantity_orders #application_security #e_commerce_security #business_logic_flaw #race_condition_attacks
Medium
Business Logic Flaws: The Vulnerabilities No Scanner Can Find 🧩
IT
36 views
Daily Writeups
β€· Title: Zero-Click Hijack: The PrestaShop Checkout Flaw That Turns Emails Into Full Account Access, PoC Publishes
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 05 Jan 2026 00:01:54 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Account Takeover #Ananda Dhakal #CVE_2025_61922 #e_commerce security #paypal #PII Leak #PrestaShop #PS Checkout #Session Hijacking #Web Vulnerability #Zero_Click
Daily CyberSecurity
Zero-Click Hijack: The PrestaShop Checkout Flaw That Turns Emails Into Full Account Access, PoC Publishes
PrestaShop patches a 9.1 critical flaw (CVE-2025-61922) in the Checkout module. Attackers can hijack accounts via email. PoC available.
22 views
Daily Writeups
β€· Title: β€œMagecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 15 Jan 2026 00:05:40 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Credit card skimming #Cyber Crime #e_commerce security #JavaScript malware #Magecart #Online Shopping Security #Silent Push #Stripe Fraud #web skimming #WooCommerce
Daily CyberSecurity
β€œMagecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
A vast and persistent web-skimming campaign has been unearthed, targeting the checkout pages of online retailers to silently harvest credit card data from unsuspecting shoppers. Dubbed under the u…
12 views
Daily Writeups
β€· Title: β€œSessionReaper” Harvests Roots: Mass Exploitation Campaign Hits Over 200 Magento Sites
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 30 Jan 2026 00:21:14 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Vulnerability Report #API vulnerability #CVE_2025_54236 #e_commerce security #Magento #Oasis Security #root access #Session Hijacking #SessionReaper #Web Shells
Daily CyberSecurity
"SessionReaper" Harvests Roots: Mass Exploitation Campaign Hits Over 200 Magento Sites
"SessionReaper" (CVE-2025-54236) targets Magento stores. Attackers use zombie tokens to gain root access. 200+ sites compromised. Patch now.
15 views
Daily Writeups
β€· Title: CVE-2026-25993: Critical EverShop SQL Injection (CVSS 9.3) Exposes Stores
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 12 Feb 2026 00:23:57 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_25993 #Database Takeover #e_commerce security #EverShop #graphql #Patch Alert #React Commerce #Second_Order Injection #sql injection #Web Security
Daily CyberSecurity
CVE-2026-25993: Critical EverShop SQL Injection (CVSS 9.3) Exposes Stores
Critical EverShop flaw CVE-2026-25993 (CVSS 9.3) allows Second-Order SQL Injection via URL keys. Update to v2.1.1 to prevent store takeover.
12 views
Daily Writeups
β€· Title: Shattered Trust: Coupang’s Q4 Profits Plunge 97% Following Massive 33-Million Record Data Leak
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Tue, 03 Mar 2026 04:26:24 +0000
════════════════════════
βŒ— Tags: #Data Leak #Bom Kim #Consumer Privacy #corporate accountability #Coupang #data breach #e_commerce security #KFTC fine #Operating Profit #South Korea #Tech News 2026
Penetration Testing Tools
Shattered Trust: Coupang’s Q4 Profits Plunge 97% Following Massive 33-Million Record Data Leak
The South Korean e-commerce behemoth Coupang has registered a precipitous decline in profits amidst the fallout from a
12 views
Daily Writeups
β€· Title: Critical 9.1 SQL Injection Threatens Vendure Core Stores
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 15 Apr 2026 13:06:51 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #@vendure/core #CVSS 9.1 #cybersecurity #e_commerce security #infosec #mysql #Patch Alert #PostgreSQL #Shop API #sql injection #sqli #Vendure
Daily CyberSecurity
Critical 9.1 SQL Injection Threatens Vendure Core Stores
Vendure Core faces a critical 9.1 SQL Injection via the Shop API. Unauthenticated attackers can hijack databasesβ€”upgrade to 3.6.2, 3.5.7, or 2.3.4 now!
10 views
Daily Writeups
β€· Title: Critical PrestaShop Flaw Allows Hijacking via β€œContact Us” Form
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 12 May 2026 02:11:30 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Back_office Hijacking #Cross_Site Scripting #CVE_2026_44212 #e_commerce security #infosec #Patch Alert #PHP Security #PrestaShop #Stored XSS #Web Security #XSS
Daily CyberSecurity
Critical PrestaShop Flaw Allows Hijacking via β€œContact Us” Form
PrestaShop, the global open-source e-commerce powerhouse known for its highly customizable PHP architecture and responsive design, has issued an urgent security update. Used by merchants worldwide…
32 views
Daily Writeups
β€· Title: Magecart Attack: Critical Flaw in FunnelKit Plugin Sparks Credit Card Skimming on 40,000+ WooCommerce Sites
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 18 May 2026 07:02:42 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Checkout Script Injection #Credit Card Theft #E_commerce Security 2026 #Funnel Builder Plugin #FunnelKit Vulnerability #Google Tag Manager Spoof #Magecart Attack #Sansec Report #WooCommerce Skimming #WordPress Security
Penetration Testing Tools
Magecart Attack: Critical Flaw in FunnelKit Plugin Sparks Credit Card Skimming on 40,000+ WooCommerce Sites
Proprietors of WordPress e-commerce platforms have fallen under siege due to a critical vulnerability discovered in the Funnel
13 views