Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: How to Check for a Null or Empty String in JavaScript
════════════════════════
𐀪 Author: Yadollah khaje hosseini
════════════════════════
ⴵ Time: Thu, 26 Dec 2024 08:59:57 GMT
════════════════════════
⌗ Tags: #variables #javascript #null #empty
Medium
How to Check for a Null or Empty String in JavaScript
Use: https://www.freecodecamp.org/news/javascript-check-empty-string-checking-null-or-empty-in-js/
35 views
Daily Writeups
⤷ Title: JavaScript: The Difference Between null and undefined from a Garbage Collection Perspective
════════════════════════
𐀪 Author: Bale
════════════════════════
ⴵ Time: Fri, 27 Dec 2024 00:21:43 GMT
════════════════════════
⌗ Tags: #undefined #null #javascript #coding_interviews
Medium
JavaScript: The Difference Between null and undefined from a Garbage Collection Perspective
When working with JavaScript, you frequently encounter two special values: null and undefined. While both signify the absence of a value…
63 views
Daily Writeups
⤷ Title: typeof null
════════════════════════
𐀪 Author: Aremu Oluwagbamila (SMOG)
════════════════════════
ⴵ Time: Mon, 30 Dec 2024 21:08:49 GMT
════════════════════════
⌗ Tags: #javascript #names_and_naming #null
Medium
typeof null
My monniker on twitter at the time of writing this piece is: typeof null and here’s why. About two years ago, I was taking a refresher…
15 views
Daily Writeups
⤷ Title: Day #14 Javascript Null vs Undefined
════════════════════════
𐀪 Author: Osman Sokuoğlu
════════════════════════
ⴵ Time: Sun, 05 Jan 2025 10:24:47 GMT
════════════════════════
⌗ Tags: #null #undefined #javascript
Medium
Day #14 Javascript Null vs Undefined
What is the difference between null and undefined?
36 views
Daily Writeups
⤷ Title: Security Alert: AsyncRAT Malware Evades Detection with Null-AMSI
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 24 Feb 2025 02:04:11 +0000
════════════════════════
⌗ Tags: #Malware #AsyncRAT #Null_AMSI
Daily CyberSecurity
Security Alert: AsyncRAT Malware Evades Detection with Null-AMSI
Uncover how Null-AMSI is used in a malware campaign to bypass Windows security and deploy AsyncRAT effectively.
13 views
Daily Writeups
⤷ Title: Zoom Patches High-Severity Flaw (CVE-2025-30663) in Workplace Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:49:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #buffer over_read #CVE_2025_30663 #CVSS 8.8 #cybersecurity #Denial of Service #NULL pointer #privilege escalation #security #security update #update #Workplace Apps #Zoom #Zoom patch
Daily CyberSecurity
Zoom Patches High-Severity Flaw (CVE-2025-30663) in Workplace Apps
Zoom fixes critical CVE-2025-30663 flaw allowing local privilege escalation. Users urged to update Workplace apps and SDKs to version 6.4.0 or newer.
13 views
Daily Writeups
⤷ Title: CVSS 10 RCE in Wing FTP Server (CVE-2025-47812) Allows Full Server Takeover, PoC Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 02 Jul 2025 02:56:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_47812 #cybersecurity #File Transfer #FTP Server #Lua Injection #Null Byte #rce #Remote Code Execution #unauthenticated #Vulnerability #Wing FTP Server
Daily CyberSecurity
CVSS 10 RCE in Wing FTP Server (CVE-2025-47812) Allows Full Server Takeover, PoC Releases
A critical RCE flaw (CVE-2025-47812, CVSS 10.0) in Wing FTP Server allows unauthenticated attackers to execute arbitrary Lua code via NULL byte injection, compromising the server
33 views
Daily Writeups
⤷ Title: Urgent: Linux Kernel Flaw Allows Remote Crash, PoC Available!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 03:03:20 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Denial of Service #dos #Kernel Crash #Linux Kernel #Network File System #NFS #Null Pointer Dereference #SUNRPC
Daily CyberSecurity
Urgent: Linux Kernel Flaw Allows Remote Crash, PoC Available!
A NFSundown flaw (CVE-2025-38089) in the Linux kernel allows remote attackers to crash NFS servers via a NULL pointer dereference. PoC exploit is public!
14 views
Daily Writeups
⤷ Title: PHP Flaws: CVE-2025-1735 (SQLi/Crash) & CVE-2025-6491 (SOAP DoS) Threaten PHP Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:46:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_1735 #CVE_2025_6491 #cybersecurity #Denial of Service #dos #Null Pointer Dereference #pgsql #php #PostgreSQL #SOAP #sql injection
Daily CyberSecurity
PHP Flaws: CVE-2025-1735 (SQLi/Crash) & CVE-2025-6491 (SOAP DoS) Threaten PHP Apps
PHP patches two flaws: CVE-2025-1735 allows SQL injection/crashes in pgsql, and CVE-2025-6491 enables DoS in SOAP via oversized XML. Update immediately!
16 views
Daily Writeups
⤷ Title: Critical Wing FTP Server RCE (CVE-2025-47812) Actively Exploited In The Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:38:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_47812 #cybersecurity #Exploited in Wild #FTP Server #Huntress #Lua #Null Byte Injection #rce #Remote Code Execution #Vulnerability #Wing FTP Server
Daily CyberSecurity
Critical Wing FTP Server RCE (CVE-2025-47812) Actively Exploited In The Wild
Huntress witnessed active exploitation of a critical RCE flaw (CVE-2025-47812) in Wing FTP Server, allowing root/SYSTEM access via null byte injection and Lua code execution.
19 views
Daily Writeups
⤷ Title: CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:55:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_47812 #cybersecurity #Exploited in Wild #FTP Server #Huntress #Lua #Null Byte Injection #rce #Remote Code Execution #Vulnerability #Wing FTP Server
Daily CyberSecurity
CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
CISA adds critical Wing FTP Server RCE flaw (CVE-2025-47812, CVSS 10.0) to KEV. Actively exploited via null byte and Lua code injection; patch to 7.4.4 immediately!
12 views
Daily Writeups
⤷ Title: $500 Bounty: Unauthorized Folder Creation with Null Name
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 13:31:13 GMT
════════════════════════
⌗ Tags: #hacking #infosec #null_safety #bug_bounty #cybersecurity
Medium
$500 Bounty: Unauthorized Folder Creation with Null Name
Hey everyone, In this write-up, I’ll share a simple but impactful bug I found in a SaaS recruitment platform that allowed me to create a…
28 views
Daily Writeups
⤷ Title: CORS Vulnerability with Trusted Null Origin
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 08 Nov 2025 02:01:55 GMT
════════════════════════
⌗ Tags: #cors_attack #bug_bounty #cors_exploit #null_origin_attack #cors_misconfiguration
Medium
CORS Vulnerability with Trusted Null Origin
Discover how a simple CORS misconfiguration can leak sensitive data across origins.
21 views
Daily Writeups
⤷ Title: CORS Vulnerability with Trusted Null Origin
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 13:34:10 GMT
════════════════════════
⌗ Tags: #cors_attack #bug_bounty #cors_exploit #null_origin_attack #cors_misconfiguration
Medium
CORS Vulnerability with Trusted Null Origin
Discover how a simple CORS misconfiguration can leak sensitive data across origins.
14 views
Daily Writeups
⤷ Title: File Path Traversal, Validation of File Extension with Null Byte Bypass
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 05:52:55 GMT
════════════════════════
⌗ Tags: #directory_traversal #file_path_traversal #bug_bounty #bypass_extension_file #null_byte_bypass
Medium
File Path Traversal, Validation of File Extension with Null Byte Bypass
How weak filename checks lead to arbitrary file reads in web applications.
24 views
Daily Writeups
⤷ Title: Hidden in Plain Sight: TA584 Deploys “Tsundere Bot” & Invisible Registry Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:11:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Fileless Malware #IAB #initial access broker #Malware Analysis #Null Byte Injection #Proofpoint #ransomware #Registry Persistence #TA584 #Tsundere Bot
Daily CyberSecurity
Hidden in Plain Sight: TA584 Deploys "Tsundere Bot" & Invisible Registry Keys
TA584 triples activity with new "Tsundere Bot" malware. Attackers use invisible Registry keys to hide persistence. Read the Proofpoint analysis.
15 views
Daily Writeups
⤷ Title: Null Byte Nightmare: Critical WPvivid Backup Flaw (CVSS 9.8) Exposes 800K WordPress Sites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 02:47:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Upload #CVE_2026_1357 #Lucas Montes #Null Byte Key #Patch Alert #Plugin Vulnerability #Remote Code Execution #site takeover #wordpress security #WPvivid Backup
Daily CyberSecurity
Null Byte Nightmare: Critical WPvivid Backup Flaw (CVSS 9.8) Exposes 800K WordPress Sites
Critical WPvivid Backup flaw CVE-2026-1357 (CVSS 9.8) allows unauthenticated file upload via null byte key. Update to v0.9.124 to prevent RCE.
11 views
Daily Writeups
⤷ Title: Predictable Secrets: The “Null Key” Flaw in Matrix’s Vodozemac Library That Could Expose Conversational History
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 07:17:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #cryptographic audit #end_to_end encryption #Matrix #null key attack #Olm #protocol downgrade #Rust security #Soatok #Tech News 2026 #Vodozemac #X25519
Penetration Testing Tools
Predictable Secrets: The "Null Key" Flaw in Matrix’s Vodozemac Library That Could Expose Conversational History
The proprietor of the Soatok weblog has promulgated an exhaustive exposition detailing the vulnerabilities within Vodozemac, the Rust-based
11 views