Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: The Next Log4Shell? Global Hackers Weaponize React2Shell for RCE and Cloud Takeovers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:22:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #China Espionage #cloud security #CVE_2025_55182 #cybersecurity #Google Threat Intelligence #Next.js #RCE #React Server Components #React2Shell
Penetration Testing Tools
The Next Log4Shell? Global Hackers Weaponize React2Shell for RCE and Cloud Takeovers
A critical vulnerability in the widely used JavaScript library React, dubbed React2Shell, is already being exploited at scale.
36 views
Daily Writeups
⤷ Title: Beyond the Shell: Critical React2Shell Exploit Hits Japan to Deploy Stealthy ZnDoor RAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Dec 2025 02:45:54 +0000
════════════════════════
⌗ Tags: #Malware #anti_forensics #CVE_2025_55182 #Japan Cyber Attacks #malware analysis #Next.js #NTT Security #RCE #React2Shell #threat intelligence #ZnDoor
Penetration Testing Tools
Beyond the Shell: Critical React2Shell Exploit Hits Japan to Deploy Stealthy ZnDoor RAT
Since early December 2025, SOC teams in Japan have been observing a wave of attacks exploiting React2Shell (CVE-2025-55182)—a
13 views
Daily Writeups
⤷ Title: Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:11:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Beelzebub Research #botnet #Cloud Security #CVE_2025_29927 #CVE_2025_55182 #cyber_espionage #data exfiltration #Next.js #PCPcat #rce #React #React2Shell
Daily CyberSecurity
Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours
A highly automated and ruthlessly efficient cyber-espionage campaign is tearing through the cloud infrastructure of modern web applications, leaving tens of thousands of compromised servers in its…
17 views
Daily Writeups
⤷ Title: “RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:33:19 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CloudSEK #CVE_2025_55182 #IoT security #Next.js #Prototype Pollution #rce #React2Shell #RondoDox #Server Actions #Web Framework Security #XMRig
Daily CyberSecurity
“RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
The RondoDoX botnet has resurfaced with a potent new arsenal, shifting its sights from simple routers to enterprise-grade web frameworks. A new intelligence report from CloudSEK details a sprawlin…
20 views
Daily Writeups
⤷ Title: RondoDox Botnet is Using React2Shell to Hijack Thousands of Unpatched Devices
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 03 Jan 2026 14:59:09 +0000
════════════════════════
⌗ Tags: #Security #Botnet #Cyber Attack #Cybersecurity #Malware #Mirai #Next.js #React2Shell #RondoDox #Vulnerability
Hackread
RondoDox Botnet is Using React2Shell to Hijack Thousands of Unpatched Devices
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
49 views
Daily Writeups
⤷ Title: The Crash Code: Node.js Issues Critical Fix for Framework-Breaking DoS Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:26:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #async_hooks #Datadog #DoS vulnerability #Infosec #Next.js #Node.js #OpenTelemetry #React Server Components #Security Update 2026 #Web Development
Penetration Testing Tools
The Crash Code: Node.js Issues Critical Fix for Framework-Breaking DoS Flaw
The Node.js development team has disseminated critical security updates to mitigate a high-severity vulnerability capable of precipitating a
6 views
Daily Writeups
⤷ Title: Beyond the Wall: Intel and SoftBank’s ZAM Aims to Dethrone HBM by 2030
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:33:30 +0000
════════════════════════
⌗ Tags: #Technology #3D DRAM stacking #Advanced Memory Technology #AI Memory #AMT #HBM #High Bandwidth Memory #intel #Next Generation DRAM Bonding #NGDB #SAIMEMORY #SoftBank #Tech News 2026 #Z_Angle Memory #ZAM
Daily CyberSecurity
Beyond the Wall: Intel and SoftBank’s ZAM Aims to Dethrone HBM by 2030
Intel and SoftBank subsidiary SAIMEMORY join forces to develop Z-Angle Memory (ZAM), a next-gen stacked DRAM aiming to slash power and double AI memory capacity.
16 views
Daily Writeups
⤷ Title: CVE-2026-25544: Critical Payload CMS SQLi (CVSS 9.8) Exposes Admin Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 00:07:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #blind sqli #CVE_2026_25544 #database security #Drizzle ORM #Headless CMS #Next.js #Patch Alert #Payload CMS #sql injection #web development
Daily CyberSecurity
CVE-2026-25544: Critical Payload CMS SQLi (CVSS 9.8) Exposes Admin Tokens
Critical Payload CMS flaw CVE-2026-25544 (CVSS 9.8) allows SQL injection via JSON fields. Unauthenticated attackers can steal admin tokens. Update to v3.73.0.
16 views
Daily Writeups
⤷ Title: The Interview Trap: Malicious Next.js Repositories Weaponize Coding Tests to Hack Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 00:01:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #developer security #infosec #malware #Microsoft Defender #Next.js #npm Security #social engineering #supply chain attack #Technical Interview Scam #VS Code Security
Daily CyberSecurity
The Interview Trap: Malicious Next.js Repositories Weaponize Coding Tests to Hack Developers
Microsoft warns of a new campaign targeting engineers via fake Next.js technical assessments. Malware hides in VS Code tasks and npm scripts to steal secrets.
24 views
Daily Writeups
⤷ Title: 5 Best Next Gen Endpoint Protection Platforms in 2026
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 18:35:15 +0000
════════════════════════
⌗ Tags: #Security #AI #Cybersecurity #EDR #Endpoint Protection #Next Gen #SaaS #Technology
Hackread
5 Best Next Gen Endpoint Protection Platforms in 2026
Follow us on all social media platforms @Hackread
40 views