Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.55K subscribers

2 photos

130K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.55K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Wed, 15 Mar 2023 15:12:34 GMT
———————————————
✏️Title: Hacking IP Camera
———————————————
📎Link: https://medium.com/p/74a6ce3c7e1e
———————————————
Tags: #ip_camera #penetration_testing #reconnaissance #hacking #reversing

Hacking IP Camera

RTSP is Known as Real-time Streaming Protocol and is supported by all IP cameras, network video recorders, hybrid video recorders, and many…

17 views16:00

🔖New Writeup❗️
———————————————
🗓Date: Wed, 26 Apr 2023 22:56:03 GMT
———————————————
✏️Title: DAVID GROUP Special Configuration CCTV IP Cam
———————————————
📎Link: https://medium.com/p/c5b56f8a4ed2
———————————————
Tags: #cybersecurity #battery #technology #cctv #ip_camera

DAVID GROUP Special Configuration CCTV IP Cam

Auto frame encoder pada saat transmisi video feed, yang berarti tidak perlu adanya browser ekstensi yang di install pada Chrome, Firefox…

11 views00:00

⤷ Title: Security analysis of Besder 6024PB-XMA501 IP camera
════════════════════════
𐀪 Author: Kostas Ereksonas
════════════════════════
ⴵ Time: Fri, 23 May 2025 08:55:58 GMT
════════════════════════
⌗ Tags: #iot #ip_camera #hacking #cybersecurity #nmap

Security analysis of Besder 6024PB-XMA501 IP camera

A security analysis of of an IP camera that started as a final project of Bachelor’s studies

33 views10:03

⤷ Title: CVE-2025-7503 (CVSS 10): Hidden Backdoor in Popular IP Camera Grants Hackers Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 02:38:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_7503 #cybersecurity #hardcoded credentials #IoT security #IP Camera #root access #Shenzhen Liandian #surveillance #Telnet #Vulnerability

Daily CyberSecurity

CVE-2025-7503 (CVSS 10): Hidden Backdoor in Popular IP Camera Grants Hackers Root Access

A critical flaw (CVE-2025-7503, CVSS 10.0) in Shenzhen Liandian IP cameras allows root access via an undocumented, default-enabled Telnet service with hardcoded credentials. No patch available.

21 views05:03

⤷ Title: CVE-2025-31700 & CVE-2025-31701: Buffer Overflow Flaws in Dahua IP Cameras Expose Devices to RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Jul 2025 00:10:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2025_31700 #CVE_2025_31701 #cybersecurity #Dahua #Denial of Service #dos #IP Camera #rce #Remote Code Execution #Vulnerability

Daily CyberSecurity

CVE-2025-31700 & CVE-2025-31701: Buffer Overflow Flaws in Dahua IP Cameras Expose Devices to RCE

Dahua IP cameras are vulnerable to two high-severity buffer overflow flaws (CVE-2025-31700, CVE-2025-31701) allowing remote attackers to crash devices or execute arbitrary code. Update firmware immediately.

16 views01:04

⤷ Title: Critical Buffer Overflow Flaws in Dahua IP Cameras Expose Devices to RCE
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 23:13:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #Buffer Overflow #CVE_2025_31700 #CVE_2025_31701 #cybersecurity #Dahua #Denial of Service #DoS #IP Camera #RCE #remote code execution #vulnerability

Penetration Testing Tools

Critical Buffer Overflow Flaws in Dahua IP Cameras Expose Devices to RCE

Bitdefender uncovers critical buffer overflow flaws (CVE-2025-31700, CVE-2025-31701) in Dahua IP cameras, allowing unauthenticated remote RCE. Update firmware now.

21 views01:04

⤷ Title: CISA Adds Three D-Link Flaws to KEV Catalog: EOL IP Cameras Under Active Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 01:48:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #cybersecurity #D_Link #end_of_life #EOL #exploitation #IP Camera #network_security #Vulnerability

Daily CyberSecurity

CISA Adds Three D-Link Flaws to KEV Catalog: EOL IP Cameras Under Active Exploitation

CISA adds three D-Link vulnerabilities (CVE-2020-25078, -25079, -2022-40799) to its KEV Catalog, confirming active exploitation of EOL IP cameras.

8 views02:04

⤷ Title: Vulnerability Hunting in IoT Devices: Router and Camera Examples
════════════════════════
𐀪 Author: Esra Kayhan
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 07:21:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #ip_camera #iot_security #router

🌐 Vulnerability Hunting in IoT Devices: Router and Camera Examples

The Internet of Things (IoT) has enabled smart devices to become widespread, from homes to industrial systems. However, the rapid expansion…

26 views08:05

⤷ Title: Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 00:31:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2019_19936 #end_of_life #IoT security #IP Camera #rce #unauthenticated access #Vivotek

Daily CyberSecurity

Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection

A critical, unpatched flaw in EOL Vivotek IP Cameras allows unauthenticated RCE via command injection in eventtask.cgi. Firmware versions 0100c–0305a4 are vulnerable and will not receive fixes.

27 views02:04

⤷ Title: South Korea Arrests 4 for Hacking 120,000 IP Cameras to Mass-Produce Illegal Videos
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 04:20:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #cybersecurity #Digital Sex Crime #IP Camera Hack #Sextortion #South Korea #Weak Passwords

Penetration Testing Tools

South Korea Arrests 4 for Hacking 120,000 IP Cameras to Mass-Produce Illegal Videos

Police in South Korea have detained four individuals in connection with the hacking of more than 120,000 IP

16 views06:05

⤷ Title: Unpatched & Exposed: Legacy Vivotek Cameras Broadcast Live Video to All
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 00:12:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CERT Polska #CVE_2025_66049 #End of Life (EOL) #IoT Vulnerability #IP Camera Security #RTSP #Surveillance Privacy #Vivotek

Daily CyberSecurity

Unpatched & Exposed: Legacy Vivotek Cameras Broadcast Live Video to All

Owners of legacy Vivotek IP7137 surveillance cameras have been dealt a harsh reality check: their devices are riddled with critical security holes, and no patch is coming to save them. CERT Polska…

19 views02:04

⤷ Title: Hikvision Security Cameras and Access Controls Hit by Stack Overflow Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 03:04:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #Access Control #Cisco Talos #Denial of Service #Hikvision #IP Camera Security #Network Video Recorder #Physical Security #stack overflow

Daily CyberSecurity

Hikvision Security Cameras and Access Controls Hit by Stack Overflow Flaws

High-severity Hikvision stack overflow flaws (CVE-2025-66176) allow attackers to crash cameras & NVRs via LAN. Update firmware now to prevent DoS.

9 views06:04

⤷ Title: The Invisible Skeleton Key: Critical CVSS 9.8 Flaw in Honeywell Cameras Allows Full Admin Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 05:28:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #CISA #CVE_2026_1670 #CVSS 9.8 #firmwire update #Honeywell #IoT Security #IP Camera #security vulnerability #surveillance security #Tech News 2026

Penetration Testing Tools

The Invisible Skeleton Key: Critical CVSS 9.8 Flaw in Honeywell Cameras Allows Full Admin Takeover

A critical vulnerability has been unearthed within ubiquitous Honeywell surveillance cameras, enabling unauthorized actors to gain illicit access

9 views07:04

⤷ Title: Digital Reconnaissance: Iran-Aligned Hackers Hijack Middle Eastern Surveillance Grids Ahead of Kinetic Strikes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:02:38 +0000
════════════════════════
⌗ Tags: #Cyber Security #Check Point Research #CVE_2021_33044 #CVE_2025_34067 #cyber_kinetic warfare #Dahua #Hikvision #IP camera hacking #Iran #Israel #Middle East conflict 2026 #Tech News 2026

Penetration Testing Tools

Digital Reconnaissance: Iran-Aligned Hackers Hijack Middle Eastern Surveillance Grids Ahead of Kinetic Strikes

Researchers at Check Point have disclosed that since the eruption of hostilities on February 28th, a coalition of

9 views11:04

⤷ Title: Is Someone Watching? How Hackers Access Your Security Cameras — and How to Stop Them
════════════════════════
𐀪 Author: Jazz Cyber Shield
════════════════════════
ⴵ Time: Sat, 07 Mar 2026 10:05:59 GMT
════════════════════════
⌗ Tags: #security_camera #hacking #technology #cybersecurity #ip_camera

Is Someone Watching? How Hackers Access Your Security Cameras — and How to Stop Them

Millions of cameras are already compromised. Yours might be one of them.

37 views11:03

⤷ Title: Unpatched and Exposed: Public PoC Released for Critical 9.8 CVSS Xiongmai IP Camera Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 02:31:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CISA Warning #CVE_2025_65856 #IoT security #IP Camera Security #no patch #ONVIF Vulnerability #PoC Exploit #Xiongmai #XM530

Daily CyberSecurity

Unpatched and Exposed: Public PoC Released for Critical 9.8 CVSS Xiongmai IP Camera Flaw

Critical 9.8 CVSS auth bypass hits Xiongmai IP cameras. Public PoC is live with NO patch available. Secure your live feeds and isolate your devices now!

32 views03:03

⤷ Title: CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 12:44:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Command Injection #CVE_2026_61514 #CVE_2026_61515 #IOT #IP Camera #Puwell

Daily CyberSecurity

CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed

TL;DR Two critical Puwell IP Camera vulnerabilities now have public details and proof-of-concept exploit code. Both score 9.3 on the CVSS scale. Together they let a remote attacker bypass login an…

14 views14:03