Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 01:30:07 +0000
════════════════════════
⌗ Tags: #Weekly Recap #Check Point #CISA KEV #Citrix NetScaler #Exploited Vulnerabilities #F5 BIG_IP #threat intelligence #Weekly CVE Report #wordpress security
Daily CyberSecurity
Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)
CVE WATCHTOWER logged 2,825 new vulnerabilities between September 21 and September 27, 2026. Of those, 218 scored CVSS 9.0 or higher. This weekly CVE report focuses on the flaws attackers already …
13 views
Daily Writeups
⤷ Title: Critical Elementor CSRF Vulnerability Threatens Millions
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 13:21:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #CSRF #cybersecurity #Elementor #WordPress
Information Security News
Critical Elementor CSRF Vulnerability Threatens Millions
A seemingly innocuous link possesses the terrifying potential to transform an active WordPress administrator session into a devastating site takeover mechanism. Cybersecurity researchers recently …
21 views
Daily Writeups
⤷ Title: Unauthenticated Persistent Query Write & QueryId Hijacking
════════════════════════
𐀪 Author: msfire
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 04:36:23 GMT
════════════════════════
⌗ Tags: #cve #wp_graphql #wordpress #cve_2026_92099 #infosec
Medium
Unauthenticated Persistent Query Write & QueryId Hijacking
Welcome back, hackers 😉!
22 views
Daily Writeups
⤷ Title: Smol — WordPress SSRF/LFI to Backdoored Plugin RCE + PAM Misconfiguration | TryHackMe
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 14:09:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #wordpress #ctf #penetration_testing
Medium
Smol — WordPress SSRF/LFI to Backdoored Plugin RCE + PAM Misconfiguration | TryHackMe
Smol packs an entire credential-chaining exercise behind a single WordPress install. A plugin vulnerable to SSRF leaks database credentials…
12 views
Daily Writeups
⤷ Title: SC WordPress Backdoor Rebuilds Itself After Cleanup
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 07:25:06 +0000
════════════════════════
⌗ Tags: #Malware #CMS Security #Ethereum #malware #Malware Cleanup #SC Backdoor #Sucuri #web security #WordPress
Information Security News
SC WordPress Backdoor Rebuilds Itself After Cleanup
Deleting the Plugin Is Not Enough Removing the malicious plugin does not solve the problem. A leftover copy simply rebuilds the infection. The firm Sucuri analyzed the SC backdoor. It takes hold i…
18 views
Daily Writeups
⤷ Title: Researchers Publish Full Details and PoC Exploit for a WordPress libheif RCE Chain
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 07:01:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #heap overflow #HEIC #ImageMagick #libheif #proof_of_concept #Remote Code Execution #wordpress
Daily CyberSecurity
Researchers Publish Full Details and PoC Exploit for a WordPress libheif RCE Chain
TL;DR Fortbridge researcher Adrian Tiron has published a working proof-of-concept for a WordPress libheif RCE chain. It turns an authenticated HEIC image upload into code execution as the web serv…
12 views
Daily Writeups
⤷ Title: CVE-2022–1206 PoC WordPress AdRotate Banner Manager plugin
════════════════════════
𐀪 Author: Marinovharisan
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 11:30:36 GMT
════════════════════════
⌗ Tags: #cve #ethical_hacking #pentesting #wordpress #adrotate
Medium
CVE-2022–1206 PoC WordPress AdRotate Banner Manager plugin
The issue is an authenticated arbitrary file upload caused by insufficient filename/extension validation. It affects versions up to and…
50 views
Daily Writeups
⤷ Title: WordPress 7.1.3 Security Update Fixes Stored XSS, SQL Injection and Five More Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 17:37:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CMS Security #Denial of Service #security release #sql injection #Stored XSS #wordpress #WordPress 7.1.3
Daily CyberSecurity
WordPress 7.1.3 Security Update Fixes Stored XSS, SQL Injection and Five More Flaws
TL;DR WordPress released version 7.1.3 on October 6, 2026. The WordPress 7.1.3 security update addresses seven reported issues, including stored XSS, a second-order SQL injection and a denial-of-s…
22 views
Daily Writeups
⤷ Title: Hackers Exploit Ninja Forms and WPC Product Bundles XSS Flaws to Plant Hidden WordPress Admins
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 00:41:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #backdoor #Cross_Site Scripting #CVE_2026_93836 #CVE_2026_94504 #exploited in the wild #Ninja Forms #WooCommerce #wordpress
Daily CyberSecurity
Hackers Exploit Ninja Forms and WPC Product Bundles XSS Flaws to Plant Hidden WordPress Admins
TL;DR Attackers are exploiting two unauthenticated stored XSS flaws in Ninja Forms and WPC Product Bundles for WooCommerce, according to Patchstack. The WordPress XSS campaign plants a script that…
28 views
Daily Writeups
⤷ Title: Smol TryHackMe Walkthrough: WordPress SSRF to Root
════════════════════════
𐀪 Author: Adrian Korwel
════════════════════════
ⴵ Time: Fri, 09 Oct 2026 18:42:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #wordpress #ctf #penetration_testing #tryhackme
Medium
Smol TryHackMe Walkthrough: WordPress SSRF to Root
CVE-2018–20463 in JSmol2WP, a backdoored Hello Dolly plugin, four user hops, and sudo to root
14 views