Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: CVSS 9.8: Backend.AI Critical Flaw Allows Account Takeover via PoC, No Patch Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Jun 2025 00:18:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Backend.AI #container platform #CVE_2025_49653 #cybersecurity #HiddenLayer #HPC #machine_learning #no patch #privilege escalation #proof_of_concept #Vulnerability
Daily CyberSecurity
CVSS 9.8: Backend.AI Critical Flaw Allows Account Takeover via PoC, No Patch Available
A critical CVSS 9.8 flaw (CVE-2025-49653) in Backend.AI allows account takeover via PoC, impacting all versions. Vendor has not issued a patch.
16 views
Daily Writeups
⤷ Title: Instantly Claim $SX tokens by SolarSx: No Gas Fees Required
════════════════════════
𐀪 Author: Liam
Wilson
════════════════════════
ⴵ Time: Thu, 12 Jun 2025 10:25:36 GMT
════════════════════════
⌗ Tags: #solarsx #crypto #no_gas_fee #xs
Medium
Instantly Claim $SX tokens by SolarSx: No Gas Fees Required
Get Your SolarSx Tokens Instantly with Zero Gas Fees
7 views
Daily Writeups
⤷ Title: salafrária essa vida
════════════════════════
𐀪 Author: rodrigo uriartt
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 12:06:53 GMT
════════════════════════
⌗ Tags: #poema #no_future #punk #hacking #fazia_poesia
Medium
salafrária essa vida
do-your-self motherfucker
24 views
Daily Writeups
⤷ Title: Proton Unveils Lumo AI Assistant: Fully Encrypted, No Data Logging, European-Hosted AI for Ultimate Privacy
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Jul 2025 02:31:42 +0000
════════════════════════
⌗ Tags: #Technology #AI #encryption #European Data Centers #Lumo AI Assistant #Mistral AI #No Logs #nvidia #open_source #privacy #Proton
Daily CyberSecurity
Proton Unveils Lumo AI Assistant: Fully Encrypted, No Data Logging, European-Hosted AI for Ultimate Privacy
Proton introduces Lumo AI Assistant, an end-to-end encrypted AI tool that guarantees no user data is used for training, offers a "Ghost Mode," and runs on open-source models in Europe.
15 views
Daily Writeups
⤷ Title: How your daily Digital diet is quietly killing your privacy
════════════════════════
𐀪 Author: Yash Kumar Chauhan
════════════════════════
ⴵ Time: Sun, 27 Jul 2025 00:10:18 GMT
════════════════════════
⌗ Tags: #data_protection #no_time #cybersecurity #online_privacy #hacking
Medium
How your daily Digital diet is quietly killing your privacy
As we are becoming addicted to social media, we are destroying our privacy in various ways. I analyze the most frequent cybercrimes and…
15 views
Daily Writeups
⤷ Title: Google Unveils “Opal”: A New AI Tool for Building Mini Web Apps with Natural Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 28 Jul 2025 00:00:47 +0000
════════════════════════
⌗ Tags: #Technology #AI App Builder #AI Tools #Generative AI #Google Labs #Google Opal #No_Code #Productivity #web development
Daily CyberSecurity
Google Unveils "Opal": A New AI Tool for Building Mini Web Apps with Natural Language
Google introduces "Opal" in Google Labs, an experimental AI service allowing users to build web applications using natural language prompts, simplifying app creation for non-technical users.
5 views
Daily Writeups
⤷ Title: FunkSec Ransomware Decryptor Released Free: Victims Can Now Recover Files After Group Goes Dormant
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 00:00:08 +0000
════════════════════════
⌗ Tags: #Malware #ChaCha20 #cybersecurity #Decryption Tool #FunkSec #Gen Digital #malware #No More Ransom #Poly1305 #ransomware #Rust
Daily CyberSecurity
FunkSec Ransomware Decryptor Released Free: Victims Can Now Recover Files After Group Goes Dormant
Gen Digital has released a free decryptor for FunkSec ransomware, allowing victims to recover files. The group appears dormant, with no new victims since March 2025.
8 views
Daily Writeups
⤷ Title: McDonald’s AI Chatbot Data Leak: A No-Code Developer’s Wake-Up Call
════════════════════════
𐀪 Author: Sobemekun Oluwadamilare Matthew
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 22:45:49 GMT
════════════════════════
⌗ Tags: #ai_security #data_privacy #no_code_development #cybersecurity #chatbot_design
Medium
McDonald’s AI Chatbot Data Leak: A No-Code Developer’s Wake-Up Call
How a weak password exposed millions and how you, as a no-code builder, can prevent the same mistakes.
10 views
Daily Writeups
⤷ Title: JetBrains Unveils Kineto: A New No-Code Platform to Turn Ideas Into Apps in 20 Minutes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 08:13:57 +0000
════════════════════════
⌗ Tags: #Technology #AI #Application Development #Developer Tools #Early Access #JetBrains #Kineto #No_Code #Prototyping #Websites
Daily CyberSecurity
JetBrains Unveils Kineto: A New No-Code Platform to Turn Ideas Into Apps in 20 Minutes
JetBrains launches Kineto, a no-code AI platform that lets users build functional websites and apps from natural language prompts, aiming to democratize development.
14 views
Daily Writeups
⤷ Title: How I get $ 1,000 and You Can Get it using Rate Limit on OTP
════════════════════════
𐀪 Author: Yossef ibrahim mohamed-salah
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 15:13:09 GMT
════════════════════════
⌗ Tags: #bug_bounty #vulnerability #no_rate_limit
Medium
How I get $ 1,000 and 👌You Can Get it using Rate Limit on OTP
🚨 API Verification Code Brute Force Vulnerability
20 views
Daily Writeups
⤷ Title: Finding Your First High Severity Bug
════════════════════════
𐀪 Author: Rehan Sohail
════════════════════════
ⴵ Time: Wed, 20 Aug 2025 16:26:07 GMT
════════════════════════
⌗ Tags: #no_time #bug_bounty_writeup #bug_bounty #bugbounty_writeup #bug_bounty_tips
Medium
Finding Your First High Severity Bug
This is how you can find your first high severity bug
15 views
Daily Writeups
⤷ Title: Zero Trust, Zero Compromise
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Sat, 04 Oct 2025 09:15:57 GMT
════════════════════════
⌗ Tags: #zt_model #zero_trust #no_comprom #security #infosec
Medium
Zero Trust, Zero Compromise
Explore Zero Trust security, a vital framework for modern cybersecurity, emphasizing continuous verification and least privilege. Learn how…
13 views
Daily Writeups
⤷ Title: Google Cloud Launches Gemini Enterprise: Unifying AI Agents and No-Code Workbench for Business Transformation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Oct 2025 00:03:18 +0000
════════════════════════
⌗ Tags: #Technology #Advantech #AI Agents #enterprise AI #Gemini Enterprise #Google Cloud #No_Code #Workflow Orchestration
Daily CyberSecurity
Google Cloud Launches Gemini Enterprise: Unifying AI Agents and No-Code Workbench for Business Transformation
Google Cloud launched Gemini Enterprise, a platform unifying models, governance, and a no-code workbench. It empowers employees to build AI agents to optimize factories and supply chains.
15 views
Daily Writeups
⤷ Title: The Day I Realized AI Was Helping Hackers Break Into My App
════════════════════════
𐀪 Author: Sandra Kirsch
════════════════════════
ⴵ Time: Wed, 22 Oct 2025 19:49:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #no_code_development #mobile_apps #saas #cyber_security_awareness
Medium
The Day I Realized AI Was Helping Hackers Break Into My App
I still remember the moment clearly. I was patching login and tenancy flows for our app, thinking about UX tweaks and deployment deadlines…
12 views
Daily Writeups
⤷ Title: Prompt to Play: YouTube’s New Gemini 3 Tool Lets Creators Speak Games Into Existence
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 08:06:26 +0000
════════════════════════
⌗ Tags: #Technology #AI Game Development #Gemini 3 #Google DeepMind #Interactive Content #Mini_Games #No_Code #Playables Builder #Vibe Coding #YouTube Creators #YouTube Gaming
Daily CyberSecurity
Prompt to Play: YouTube’s New Gemini 3 Tool Lets Creators Speak Games Into Existence
YouTube launches the Playables Builder beta: an AI tool powered by Gemini 3 that lets creators build mini-games using only natural language prompts.
20 views
Daily Writeups
⤷ Title: PicoCTF.org CTF Challenge Write Up
Category: Web Exploitation
════════════════════════
𐀪 Author: Damian Robert Moore
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 03:51:40 GMT
════════════════════════
⌗ Tags: #capture_the_flag #no_ai_here #web_exploitation #bug_bounty #picoctf
Medium
PicoCTF.org CTF Challenge Write Up Category: Web Exploitation
Challenge Name: <head-dump>
18 views
Daily Writeups
⤷ Title: Critical SSRF Flaw Discovered in Axios – CVE-2025-62718 (CVSS 9.3)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 01:35:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2025_62718 #data exfiltration #Hostname Normalization #infosec #NO_PROXY #Node.js Security #ssrf #vulnerability management #web development
Daily CyberSecurity
Critical SSRF Flaw Discovered in Axios - CVE-2025-62718 (CVSS 9.3)
Axios CVE-2025-62718 allows a critical NO_PROXY bypass via hostname normalization errors. Protect your internal network from SSRF—patch or normalize today!
19 views
Daily Writeups
⤷ Title: Unpatched and Exposed: Public PoC Released for Critical 9.8 CVSS Xiongmai IP Camera Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 02:31:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CISA Warning #CVE_2025_65856 #IoT security #IP Camera Security #no patch #ONVIF Vulnerability #PoC Exploit #Xiongmai #XM530
Daily CyberSecurity
Unpatched and Exposed: Public PoC Released for Critical 9.8 CVSS Xiongmai IP Camera Flaw
Critical 9.8 CVSS auth bypass hits Xiongmai IP cameras. Public PoC is live with NO patch available. Secure your live feeds and isolate your devices now!
32 views
Daily Writeups
⤷ Title: Academic Exposure: The Unpatched Flaw Siphoning Student Data from DRC INSIGHT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 13:45:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Academic Security #COS Server #CVE_2026_5756 #Data Theft #DRC INSIGHT #EduTech #Exam Proctoring #infosec #network_security #no patch #Student Privacy
Daily CyberSecurity
Academic Exposure: The Unpatched Flaw Siphoning Student Data from DRC INSIGHT
Unpatched CVE-2026-5756 in DRC INSIGHT allows unauthenticated hijacking of student exam responses and traffic manipulation. Secure your school's network now.
22 views
Daily Writeups
⤷ Title: WantToCry Ransomware Leverages Exposed SMB for Remote Encryption Loops
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 01:39:29 +0000
════════════════════════
⌗ Tags: #Malware #brute force attack #Cyber Security #EDR evasion #File Share Encryption #infosec #network_security #No Local Execution #Remote Ransomware #SMB Exploitation #Sophos Counter Threat Unit #WantToCry
Daily CyberSecurity
WantToCry Ransomware Leverages Exposed SMB for Remote Encryption Loops
Sophos exposes WantToCry, a remote ransomware campaign that avoids EDR by using brute-forced SMB shares to read, encrypt, and rewrite files from afar.
25 views