Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sat, 24 Jun 2023 17:42:58 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Optimistic Challengeβ€Šβ€”β€ŠHack The Box Walkthrough
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/d85e5af8342c
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #hackthebox_writeup #ghidra #integer_overflow #radare2 #tutorial
Medium
Optimistic Challenge β€” Hack The Box Walkthrough
Optimistic is a binary exploitation challengeon hach the box that is vulnerable to an integer overflowand shellcode injection.
13 views
Daily Writeups
β€· Title: Integer Overflow Zafiyetini Anlamak
════════════════════════
π€ͺ Author: Emre GΓΌl
════════════════════════
β΄΅ Time: Tue, 18 Feb 2025 12:26:38 GMT
════════════════════════
βŒ— Tags: #c #integer_overflow #cybersecurity
Medium
Integer Overflow Zafiyetini Anlamak
Bir web sitesinde sepete yΓΌzlerce ΓΌrΓΌn eklediğinizde sepet tutarΔ±nΔ±n β€œ-100 TL” olduğunu düşünΓΌn. Ya da programΔ±nΔ±zda boyut(size) kontrolΓΌ yaptığınΔ±z bir yerin tΓΌm sistemin hacklenmesine sebep…
18 views
Daily Writeups
β€· Title: CVE-2025-23016: Critical FastCGI Heap Overflow Threatens Embedded Devices, PoC Releases
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 28 Apr 2025 00:26:27 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2025_23016 #embedded systems security #FastCGI vulnerability #heap overflow #integer overflow #Synacktiv
Daily CyberSecurity
CVE-2025-23016: Critical FastCGI Heap Overflow Threatens Embedded Devices, PoC Releases
FastCGI CVE-2025-23016 vulnerability allows heap overflow and potential code execution on embedded devices. Users must upgrade to version 2.4.5 or later
15 views
Daily Writeups
β€· Title: Chrome Update Alert: Two High-Severity Flaws (CVE-2025-6191, CVE-2025-6192) Patched
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 18 Jun 2025 00:16:12 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #chrome #cybersecurity #google chrome #High Severity #integer overflow #Profiler #security update #use after free #V8 #Vulnerability
Daily CyberSecurity
Chrome Update Alert: Two High-Severity Flaws (CVE-2025-6191, CVE-2025-6192) Patched
Google Chrome 137.0.7151.119/.120 is rolling out with crucial security fixes, addressing two high-severity flaws: an integer overflow in V8 and a use-after-free in Profiler.
20 views
Daily Writeups
β€· Title: VirtualBox VM Escape: Integer Overflow Flaw Allows Full Host Takeover, PoC Published
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 06 Aug 2025 10:14:36 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cybersecurity #integer overflow #rce #Remote Code Execution #virtualbox #virtualization #VM Escape
Daily CyberSecurity
VirtualBox VM Escape: Integer Overflow Flaw Allows Full Host Takeover, PoC Published
A critical integer overflow in VirtualBox (CVE-2025-30712) allows an attacker to escape the VM and execute code on the host, with a public proof-of-concept available.
17 views
Daily Writeups
β€· Title: Researcher Details Zero-Click RCE in Dolby Audio Decoder Affecting Android, iOS, and macOS
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 20 Oct 2025 00:11:20 +0000
════════════════════════
βŒ— Tags: #Vulnerability #android #Audio Decoder #Dolby Digital Plus #integer overflow #ios #Project Zero #rce #Zero_Click
Daily CyberSecurity
Researcher Details Zero-Click RCE in Dolby Audio Decoder Affecting Android, iOS, and macOS
Google Project Zero disclosed a zero-click RCE flaw (CVE-2025-54957, CVSS 7.0) in Dolby's Audio Decoder. The integer overflow can be triggered by a single audio file and affects Android, iOS, and macOS.
17 views
Daily Writeups
β€· Title: Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 29 Oct 2025 04:37:28 +0000
════════════════════════
βŒ— Tags: #Vulnerability #EAP_MSCHAPv2 #Heap Buffer Overflow #Integer Underflow #rce #strongSwan #VPN Client
Daily CyberSecurity
Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution
A Critical Heap Overflow in strongSwan's EAP-MSCHAPv2 plugin allows Remote Code Execution on the client. An integer underflow in Failure Request packet processing causes memory corruption.
28 views
Daily Writeups
β€· Title: High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 08 Dec 2025 00:45:53 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #buffer overflow #CVE_2025_13654 #Disk Usage #dos #Duc #Information Disclosure #Integer Underflow #Linux
Daily CyberSecurity
High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow
A High-severity flaw (CVE-2025-13654) in the Duc disk usage tool risks DoS and information leaks. An integer underflow in buffer.c allows out-of-bounds memory read. Update to v1.4.6 immediately.
16 views
Daily Writeups
β€· Title: ImageMagick Flaw Risks Arbitrary Memory Disclosure via PSX TIM File Integer Overflow on 32-bit Systems
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 15 Dec 2025 00:05:51 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #32_bit #Arbitrary Memory Disclosure #CVE_2025_66628 #ImageMagick #integer overflow #open_source #PSX TIM
Daily CyberSecurity
ImageMagick Flaw Risks Arbitrary Memory Disclosure via PSX TIM File Integer Overflow on 32-bit Systems
A High-severity (CVSS 7.5) flaw in ImageMagick's PSX TIM parser allows Arbitrary Memory Disclosure on 32-bit systems via an integer overflow. Patch immediately to v7.1.2-10.
11 views
Daily Writeups
β€· Title: The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoCβ€”Is Your iPhone at Risk?
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 29 Dec 2025 01:53:21 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Apple #Gigacage #integer overflow #iOS 26.2 #iPhone security #JavaScriptCore #Joseph Goydish #PoC #rce #Remote Code Execution #Safari #Vulnerability #WebKit
Daily CyberSecurity
The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoCβ€”Is Your iPhone at Risk?
Joseph Goydish uncovers a critical integer overflow in iOS 26.2’s WebKit. Proof of Concept shows how attackers can crash browsers or trigger RCE.
22 views
Daily Writeups
β€· Title: The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Tue, 13 Jan 2026 04:05:04 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Blockchain Security #DeFi Hack 2026 #Ethereum #Halborn #Integer Overflow #SlowMist #Smart Contract Exploit #Tornado Cash #TRU Token #Truebit Protocol
Penetration Testing Tools
The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
In early January 2026, a sophisticated adversary identified a critical vulnerability within the purchase and minting contract of
15 views
Daily Writeups
β€· Title: Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 19 Jan 2026 00:01:47 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #ASLR Bypass #CVE_2026_0861 #CVE_2026_0915 #glibc #GNU C Library #heap corruption #infosec #integer overflow #Linux Security #Memory Leak
Daily CyberSecurity
Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
The maintainers of the GNU C Library (glibc), the core library that underpins the vast majority of Linux-based systems, have disclosed details on two security vulnerabilities ranging from high-sev…
30 views
Daily Writeups
β€· Title: HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 16 Feb 2026 00:11:53 +0000
════════════════════════
βŒ— Tags: #Vulnerability #ALOHA #Denial of Service #DevOps #HAProxy #Integer Underflow #load balancer #Patch Alert #QUIC Protocol
Daily CyberSecurity
HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
HAProxy patches high-severity QUIC flaws CVE-2026-26080 & 26081. Remote attackers can crash servers via malformed packets. Update to v3.0.16 now.
13 views
Daily Writeups
β€· Title: Urgent Chrome Patch: Google Fixes High-Severity PDF and V8 Engine Flaws
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 19 Feb 2026 13:52:51 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Chrome Update #CVE_2026_2648 #CVE_2026_2649 #CVE_2026_2650 #Cyber Security #google chrome #Heap Buffer Overflow #integer overflow #Patch Alert #PDFium #V8 Engine
Daily CyberSecurity
Urgent Chrome Patch: Google Fixes High-Severity PDF and V8 Engine Flaws
Google releases an urgent Chrome update to patch high-severity flaws in PDFium (CVE-2026-2648) and the V8 engine (CVE-2026-2649). Update to 145 now.
23 views