Daily Writeups
@Daily_Writeups
3.3K subscribers
1 photo
116K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.3K subscribers
Daily Writeups
⤷ Title: Fileless Remcos RAT Hijacks Trusted Windows Tools
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 01:01:57 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Fileless Malware #infosec #javascript #Lat61 #LOLBins #Malware Analysis #phishing #powershell #Reflective Loader #Remcos RAT #Remote Access Trojan
Daily CyberSecurity
Fileless Remcos RAT Hijacks Trusted Windows Tools
Researchers unmask a fileless Remcos RAT campaign using obfuscated JS and LOLBins to hijack systems in-memory. See the technical breakdown from Lat61.
13 views
Daily Writeups
⤷ Title: Secrets That Survive Everything: The Runtime Security Gap Left Unguarded
════════════════════════
𐀪 Author: Kumar G
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 14:11:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #security #web_development #javascript
Medium
Secrets That Survive Everything: The Runtime Security Gap Left Unguarded
How years of shift-left security investment still can’t stop a hardcoded key from surviving to production — and why the runtime layer…
18 views
Daily Writeups
⤷ Title: Axios npm Supply Chain Attack: Inside the 3-Hour Compromise That Delivered a Cross-Platform RAT
════════════════════════
𐀪 Author: Ankit Mishra
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:25:21 GMT
════════════════════════
⌗ Tags: #npm #cybersecurity #infosec #supply_chain_security #javascript
15 views
Daily Writeups
⤷ Title: CVE-2026-34208 (CVSS 10): Critical Sandbox Escape Uncovered in SandboxJS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 13:07:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_34208 #cybersecurity #Host Poisoning #infosec #JavaScript Security #Node.js #rce #Sandbox Breach #Sandbox Escape #SandboxJS #supply chain attack
Daily CyberSecurity
CVE-2026-34208 (CVSS 10): Critical Sandbox Escape Uncovered in SandboxJS
CVE-2026-34208: A critical 10.0 flaw in SandboxJS allows code to escape and poison host objects like Math.random. Secure your environment—update immediately!
18 views
Daily Writeups
⤷ Title: JIT Heap Spray Explained: A Simple Guide for Beginners
════════════════════════
𐀪 Author: Ashen Bhagya
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:47:28 GMT
════════════════════════
⌗ Tags: #computer_security #javascript #programming_basic #cybersecurity #ethical_hacking
Medium
JIT Heap Spray Explained: A Simple Guide for Beginners
If you’re new to programming or cybersecurity, you might have heard the term JIT Heap Spray and thought it sounded confusing or scary…
27 views
Daily Writeups
⤷ Title: Code Red for AI: CVSS-10 Vulnerability in Flowise Under Active Attack from Starlink IP
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:16:34 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CustomMCP #CVE_2025_59528 #Flowise #InfoSec 2026 #JavaScript Injection #Patch Alert #RCE #remote code execution #VulnCheck #Zero Trust
Penetration Testing Tools
Code Red for AI: CVSS-10 Vulnerability in Flowise Under Active Attack from Starlink IP
A vulnerability garnering the maximum severity rating has already been subjected to active exploitation, despite the remedial patch
9 views
Daily Writeups
⤷ Title: Denial of Service Alert: React Server Components Vulnerability Causes CPU Spikes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:44:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_23869 #Denial of Service #dos #infosec #JavaScript Security #Node.js #React #React Server Components #RSC #web development #Webpack
Daily CyberSecurity
Denial of Service Alert: React Server Components Vulnerability Causes CPU Spikes
React patches a 7.5 CVSS DoS vulnerability in Server Components (CVE-2026-23869). Stop CPU exhaustion attacks—update your 19.x dependencies now!
14 views
Daily Writeups
⤷ Title: Frontend Secrets Exposed: Vite Patches Critical Security Bypass in Dev Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:15:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CVE_2026_39363 #CVE_2026_39364 #cybersecurity #Dev Tools #Frontend Development #HMR #infosec #javascript #Vite #Web Security
Daily CyberSecurity
Frontend Secrets Exposed: Vite Patches Critical Security Bypass in Dev Server
Vite patches critical flaws (CVE-2026-39364 & CVE-2026-39363) allowing arbitrary file reads and .env leaks via WebSockets and query params. Upgrade to 8.0.5!
5 views
Daily Writeups
⤷ Title: Learning About Post-message Vulnerabilities
════════════════════════
𐀪 Author: Raunak Gupta Aka Biscuit
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 08:51:06 GMT
════════════════════════
⌗ Tags: #javascript #programming #cybersecurity #ethical_hacking #bug_bounty
Medium
Learning About Post-message Vulnerabilities
Note: I’m writing this as personal learning notes, not a generic article please keep that in mind. Also, I used AI for rephrasing and…
19 views
Daily Writeups
⤷ Title: CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 17:10:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS IMDSv2 #Axios #Cloud Security #CVE_2026_40175 #Header injection #infosec #javascript #Node.js #Prototype Pollution #rce #request smuggling
Daily CyberSecurity
CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
A critical CVSS 10 flaw in Axios (CVE-2026-40175) allows attackers to bypass AWS IMDSv2 and achieve RCE via header injection. Upgrade to v1.15.0 now!
41 views