Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: Lab Solved: File Path Traversal — Absolute Path Bypass
════════════════════════
𐀪 Author: Ethical Hacker
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 14:51:38 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #information_disclosure #cybersecurity #path_traversal
Medium
🚀 Lab Solved: File Path Traversal — Absolute Path Bypass
Successfully completed the “File path traversal, traversal sequences blocked with absolute path bypass” lab from PortSwigger Web Security…
7 views
Daily Writeups
⤷ Title: IBM Aspera Vulnerabilities Patched in Faspex 5 and Desktop App
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:03:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Aspera Faspex #CVE_2026_14958 #CVE_2026_14959 #CVE_2026_14973 #IBM Aspera #IBM Aspera Desktop #Path Traversal #Remote Code Execution
Daily CyberSecurity
IBM Aspera Vulnerabilities Patched in Faspex 5 and Desktop App
TL;DR IBM patched five IBM Aspera vulnerabilities across two products on July 20, 2026. They affect Aspera Faspex 5 and the Aspera Desktop App. The worst flaws reach a CVSS score of 9.3 and allow …
14 views
Daily Writeups
⤷ Title: CVE-2026-63223: CodeIgniter4 RCE Vulnerability Rated CVSS 9.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 09:19:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CodeIgniter4 #CVE_2026_63223 #File Upload Vulnerability #Path Traversal #PHP Framework #Remote Code Execution #sql injection #Web Security
Daily CyberSecurity
CVE-2026-63223: CodeIgniter4 RCE Vulnerability Rated CVSS 9.8
TL;DR: The CodeIgniter4 team patched four security flaws in release v4.7.4. The most severe, a CodeIgniter4 RCE vulnerability tracked as CVE-2026-63223, scores CVSS 9.8. It can lead to remote code…
27 views
Daily Writeups
⤷ Title: Gitea Vulnerability CVE-2026-59774 Enables Unauthenticated Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 07:53:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CVE_2026_59774 #Gitea #Path Traversal #rce #Remote Code Execution #Vulnerability
Daily CyberSecurity
Gitea Vulnerability CVE-2026-59774 Enables Unauthenticated Remote Code Execution
TL;DR Gitea 1.27.1 patches a critical Gitea vulnerability, CVE-2026-59774, rated CVSS 9.8. An unauthenticated attacker can read arbitrary server files through a public repository, then escalate to…
13 views
Daily Writeups
⤷ Title: Linux Privilege Escalation: Capabilities & PATH Hijacking | TryHackMe
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 16:28:00 GMT
════════════════════════
⌗ Tags: #ethical_hacking #tryhackme #privilege_escalation #capabilities #path_hijacking
Medium
Linux Privilege Escalation: Capabilities & PATH Hijacking | TryHackMe
In this TryHackMe lab, I explored two important Linux privilege-escalation techniques: Linux Capabilities and PATH Hijacking. I learned how…
21 views
Daily Writeups
⤷ Title: BigBlueButton Fixes Maximum Severity Arbitrary File Read Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 00:09:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BigBlueButton #CVE_2026_XXXX #Path Traversal
Daily CyberSecurity
BigBlueButton Fixes Maximum Severity Arbitrary File Read Flaw
TL;DR BigBlueButton contains a critical path traversal vulnerability within the Etherpad integration. Attackers can perform an unauthenticated arbitrary file read to extract sensitive system files…
16 views
Daily Writeups
⤷ Title: CVE-2026-18051 (CVSS 10): Unauthenticated Arbitrary File Write Hits 900k W3 Total Cache Sites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 08:53:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #CVE_2026_18051 #Path Traversal #W3 Total Cache #wordpress #WordPress Plugin #wpscan
Daily CyberSecurity
CVE-2026-18051 (CVSS 10): Unauthenticated Arbitrary File Write Hits 900k W3 Total Cache Sites
TL;DR A critical W3 Total Cache vulnerability lets unauthenticated attackers write files anywhere on the server. Tracked as CVE-2026-18051, it earns the top CVSS score of 10. The plugin runs on mo…
17 views
Daily Writeups
⤷ Title: IBM Db2 Mirror for i Hit by CVE-2026-17186 RCE Flaw (CVSS 9.9)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 13:15:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Command Injection #CVE_2026_17182 #CVE_2026_17184 #CVE_2026_17186 #Db2 Mirror for i #IBM #IBM i #Path Traversal #Remote Code Execution
Daily CyberSecurity
IBM Db2 Mirror for i Hit by CVE-2026-17186 RCE Flaw (CVSS 9.9)
IBM patched 18 flaws in Db2 Mirror for i this week. The worst bug lets a remote attacker run system commands without logging in. IBM Db2 Mirror RCE risk reaches a CVSS score of 9.9. Also, several …
11 views
Daily Writeups
⤷ Title: CVE-2026 — 75855 : Path Traversal in ArcadeDB - Arbitrary File Write and Delete via Database Names
════════════════════════
𐀪 Author: Pervin Zahidli
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:32:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #cve #vulnerability #path_traversal
Medium
CVE-2026 — 75855 : Path Traversal in ArcadeDB - Arbitrary File Write and Delete via Database Names
ArcadeDB is a multi-model database engine with an HTTP server API. Like most database servers, it lets an admin create and drop databases…
71 views
Daily Writeups
⤷ Title: When a Single Text File Breaks a Trust Boundary (Bug Bounty writeup)
════════════════════════
𐀪 Author: julichaan
════════════════════════
ⴵ Time: Sun, 30 Aug 2026 14:08:06 GMT
════════════════════════
⌗ Tags: #path_traversal #vulnerability_research #bug_bounty #application_security #cybersecurity
Medium
When a Single Text File Breaks a Trust Boundary (Bug Bounty writeup)
When a Single Text File Breaks a Trust Boundary (Bug Bounty writeup) During a recent security review, I encountered an interesting vulnerability in an open-source tool that, at first glance, appeared …
11 views