Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: What Happens Inside PDFAid in Seconds: From Upload to Download
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 14:50:02 +0000
════════════════════════
⌗ Tags: #Software Reviews #Technology #Document #PDF #PDFAid
Hackread
What Happens Inside PDFAid in Seconds: From Upload to Download
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
36 views
Daily Writeups
⤷ Title: Reader Freedom: Amazon Returns DRM Control to Publishers for EPUB/PDF Downloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 04:25:09 +0000
════════════════════════
⌗ Tags: #Technology #Amazon #copyright #Digital Rights Management #DRM #ebook #EPUB #KDP #Kindle #Pdf #publishing
Daily CyberSecurity
Reader Freedom: Amazon Returns DRM Control to Publishers for EPUB/PDF Downloads
Amazon shifts DRM control to publishers/authors starting Jan 2026. Readers can download unencrypted EPUB/PDF files if the publisher consents, boosting reader choice.
25 views
Daily Writeups
⤷ Title: CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:18:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_68428 #data exfiltration #Information Disclosure #JavaScript Security #jsPDF #lfi #local file inclusion #Node.js #Patch Alert #Path Traversal #PDF Generation
Daily CyberSecurity
CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
A critical vulnerability has been discovered in jsPDF, one of the most popular JavaScript libraries for generating PDF documents. The flaw, assigned a scorching CVSS score of 9.2, allows attackers…
14 views
Daily Writeups
⤷ Title: Attackers Weaponize Legitimate RMM Tools via Fake PDFs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:12:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASEC #cyber attacks #living_off_the_land #Malware Analysis #NinjaOne #NSIS #PDF Malware #phishing #RMM Abuse #ScreenConnect #SuperOps #Syncro
Daily CyberSecurity
Attackers Weaponize Legitimate RMM Tools via Fake PDFs
In a new report, the AhnLab Security Intelligence Center (ASEC) warns of a rising trend where threat actors are hijacking powerful Remote Monitoring and Management (RMM) software to infiltrate vic…
18 views
Daily Writeups
⤷ Title: Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 19:30:37 +0000
════════════════════════
⌗ Tags: #Phishing Scam #Security #Cyber Attack #Cybersecurity #Dropbox #Fraud #Password #PDF #Phishing #Privacy #Scam
Hackread
Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
40 views
Daily Writeups
⤷ Title: Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:11:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cloud Security #Credential Harvesting #Dropbox Impersonation #Email Security #PDF Phishing #phishing #social engineering #Telegram bot #Vercel Blob #X_Labs
Daily CyberSecurity
Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
Phishing attacks have evolved from simple “click here” links to complex, multi-stage puzzles designed to baffle security scanners. A new report from the X-Labs team uncovers a sophisti…
14 views
Daily Writeups
⤷ Title: “PDF” Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:07:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroForm #BMPDecoder #CVE_2026_24133 #CVE_2026_24737 #Denial of Service #Front_end Development #JavaScript Library #jsPDF #PDF Generation #Web Security #XSS
Daily CyberSecurity
"PDF" Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
Critical jsPDF flaws (CVE-2026-24133) allow XSS & DoS via malicious BMPs. Update to v4.1.0 immediately to prevent browser crashes and code injection.
27 views
Daily Writeups
⤷ Title: How to Securely Edit and Redact Sensitive PDFs: A Cybersecurity Guide
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 11:12:30 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Cybersecurity #Data Redaction #Data Security #PDF #pdfFiller
Hackread
How to Securely Edit and Redact Sensitive PDFs: A Cybersecurity Guide
PDF security guide covering redaction, metadata risks, compliance standards, and safe editing of password-protected files to prevent data leaks.
37 views
Daily Writeups
⤷ Title: Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:17:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroJS Bypass #AppSec #CVE_2026_25755 #Cyber Security #infosec #JavaScript Security #jsPDF #npm Vulnerability #Patch Alert #PDF Object Injection
Daily CyberSecurity
Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
A critical PDF Object Injection flaw (CVE-2026-25755) in jsPDF allows attackers to bypass AcroJS sandboxes. Update to version 4.2.0 immediately.
9 views
Daily Writeups
⤷ Title: PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 04:54:58 GMT
════════════════════════
⌗ Tags: #application_security #devsecops #secure_coding #cybersecurity #pdf
Medium
PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
How malicious content can hide in PDFs through template injection, JavaScript execution, and user input vulnerabilities — and how to…
17 views