Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Hackers Exploit Stripe API for Web Skimming Card Theft on Online Stores
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 03 Apr 2025 15:41:27 +0000
════════════════════════
⌗ Tags: #Security #Malware #API #Cyber Attack #Cybersecurity #Stripe #Vulnerability #Web Skimmer #WooCommerce #Wordpress
Hackread - Latest Cybersecurity, Hacking News, Tech, AI & Crypto
Hackers Exploit Stripe API for Web Skimming Card Theft on Online Stores
Follow us on Blue Sky, Mastodon Twitter, Facebook and LinkedIn @Hackread
50 views
Daily Writeups
⤷ Title: Carding Automation: Malicious PyPI Package Threatens Stores
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Fri, 04 Apr 2025 00:17:21 +0000
════════════════════════
⌗ Tags: #Malware #Carding attacks #WooCommerce
Daily CyberSecurity
Carding Automation: Malicious PyPI Package Threatens Stores
Discover the rise of carding attacks with the malicious Python package disgrasya targeting WooCommerce stores with automated scripts.
14 views
Daily Writeups
⤷ Title: Hacker Claims WooCommerce Data Breach, Selling 4m User Records
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 09 Apr 2025 21:27:57 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Attack #Cybersecurity #data breach #Magento #Satanic #Vulnerability #WooCommerce
Hackread
Hacker Claims WooCommerce Data Breach, Selling 4m User Records
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
42 views
Daily Writeups
⤷ Title: Tuesday Morning Threat Report: April 15, 2025
════════════════════════
𐀪 Author: Mark Maguire
════════════════════════
ⴵ Time: Tue, 15 Apr 2025 01:52:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #volt_typhoon #data_breach #woocommerce
Medium
Tuesday Morning Threat Report: April 15, 2025
China implies Volt Typhoon is state-sponsored, hackers steal 150,000 bank regulator emails, and data stolen on 4.4M in Woo Commerce breach
18 views
Daily Writeups
⤷ Title: WooCommerce Phishing Attack: Fake Vulnerability Exploits Store Owners
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 25 Apr 2025 00:23:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cronjob #cybersecurity alert #fake plugin #IDN homograph #malware #Patchstack #phishing #Web Shell #WooCommerce #wordpress security
Daily CyberSecurity
WooCommerce Phishing Attack: Fake Vulnerability Exploits Store Owners
A new phishing campaign targets WooCommerce users with fake security alerts. Learn how attackers use IDN homographs and malicious plugins to compromise stores.
12 views
Daily Writeups
⤷ Title: Stealthy Skimmer: New Formjacking Malware Targets WooCommerce Checkouts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 23 May 2025 00:35:21 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #e_commerce #formjacking #malware #payment security #skimmer #WooCommerce #wordpress
Daily CyberSecurity
Stealthy Skimmer: New Formjacking Malware Targets WooCommerce Checkouts
A new, deeply stealthy formjacking malware is targeting WooCommerce, secretly stealing customer payment data from legitimate checkout processes.
13 views
Daily Writeups
⤷ Title: Unpatched & Critical (CVSS 10): TI WooCommerce Wishlist Vulnerability Affects 100K+ Sites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 27 May 2025 11:30:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #file upload #no patch #plugin #rce #WooCommerce #wordpress
Daily CyberSecurity
Unpatched & Critical (CVSS 10): TI WooCommerce Wishlist Vulnerability Affects 100K+ Sites
Critical (CVSS 10) unpatched flaw in TI WooCommerce Wishlist allows unauthenticated RCE via file upload. Affects 100K+ sites.
47 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS Flaw: Unpatched PayU CommercePro Plugin Allows Admin Account Takeover!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 10:48:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #CVE_2025_31022 #cybersecurity #PayU CommercePro #plugin #unpatched #Vulnerability #Web Security #WooCommerce #wordpress
Daily CyberSecurity
Critical 9.8 CVSS Flaw: Unpatched PayU CommercePro Plugin Allows Admin Account Takeover!
A critical 9.8 CVSS vulnerability in PayU CommercePro for WordPress allows unauthenticated admin account takeover. No patch available, immediate removal advised.
29 views
Daily Writeups
⤷ Title: Navigating the Uncharted Waters: Inside the Alleged WooCommerce Data Breach
════════════════════════
𐀪 Author: Deven Chhajed
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 03:32:37 GMT
════════════════════════
⌗ Tags: #third_party_risk #woocommerce #ecommerce_security #cybersecurity #data_breach
Medium
Navigating the Uncharted Waters: Inside the Alleged WooCommerce Data Breach
In the fast-moving world of online commerce, where trust is the true currency, even the faintest hint of a data breach can send shockwaves…
27 views
Daily Writeups
⤷ Title: How I Saved My WooCommerce Store from Being Hacked (And How You Can Too)
════════════════════════
𐀪 Author: Dike Chiboka
════════════════════════
ⴵ Time: Sun, 20 Jul 2025 19:35:19 GMT
════════════════════════
⌗ Tags: #ecommerce #cybersecurity #ecommerce_web_development #online_business #woocommerce_security
Medium
How I Saved My WooCommerce Store from Being Hacked (And How You Can Too)
From Hacked to Unhackable: How I Fortified My WooCommerce Store Against 2,817 Attacks
27 views
Daily Writeups
⤷ Title: Magecart SMILODON Skimmer Infiltrates WooCommerce Via Rogue Plugin Hiding Payload in Fake PNG Image
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 00:35:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credit Card Skimmer #e_commerce #Fake PNG #Magecart #SMILODON #steganography #WooCommerce #wordpress
Daily CyberSecurity
Magecart SMILODON Skimmer Infiltrates WooCommerce Via Rogue Plugin Hiding Payload in Fake PNG Image
Wordfence exposed a Magecart campaign using a rogue WooCommerce plugin to hide skimmer code in a fake PNG image. The malware uses an AJAX backdoor to maintain access and steal customer cards.
15 views
Daily Writeups
⤷ Title: Critical WooCommerce Plugin Flaw (CVE-2025-12493, CVSS 9.8) Allows Unauthenticated RCE, 100,000+ Sites Affect
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 00:02:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Vulnerability #CVE_2025_12493 #e_commerce #local file inclusion #rce #ShopLentor #WooCommerce #wordpress
Daily CyberSecurity
Critical WooCommerce Plugin Flaw (CVE-2025-12493, CVSS 9.8) Allows Unauthenticated RCE, 100,000+ Sites Affect
A Critical (CVSS 9.8) LFI flaw (CVE-2025-12493) in ShopLentor (WooCommerce Builder) allows unauthenticated attackers to run arbitrary .php files and compromise 100K+ e-commerce sites.
13 views
Daily Writeups
⤷ Title: “Magecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:05:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credit card skimming #Cyber Crime #e_commerce security #JavaScript malware #Magecart #Online Shopping Security #Silent Push #Stripe Fraud #web skimming #WooCommerce
Daily CyberSecurity
“Magecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks
A vast and persistent web-skimming campaign has been unearthed, targeting the checkout pages of online retailers to silently harvest credit card data from unsuspecting shoppers. Dubbed under the u…
12 views
Daily Writeups
⤷ Title: Magecart Attack: Critical Flaw in FunnelKit Plugin Sparks Credit Card Skimming on 40,000+ WooCommerce Sites
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 07:02:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #Checkout Script Injection #Credit Card Theft #E_commerce Security 2026 #Funnel Builder Plugin #FunnelKit Vulnerability #Google Tag Manager Spoof #Magecart Attack #Sansec Report #WooCommerce Skimming #WordPress Security
Penetration Testing Tools
Magecart Attack: Critical Flaw in FunnelKit Plugin Sparks Credit Card Skimming on 40,000+ WooCommerce Sites
Proprietors of WordPress e-commerce platforms have fallen under siege due to a critical vulnerability discovered in the Funnel
13 views
Daily Writeups
⤷ Title: WooCommerce Payment Skimmer Mimics Stripe to Steal Cards at Real Checkouts
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 06:49:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Card Data Theft #Checkout Backdoor #CloudSEK #e_commerce security #Magecart #Payment Skimmer #Stripe #WooCommerce
Daily CyberSecurity
WooCommerce Payment Skimmer Mimics Stripe to Steal Cards at Real Checkouts
Cybercriminals have changed tactics, and online shoppers are paying the price. A newly analyzed WooCommerce payment skimmer hides inside real store checkouts and quietly lifts card details during …
11 views