Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: SAP Threat Modeling Tool: A New Open-Source Tool to Protect SAP Systems from Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 09:03:06 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity #network security #open source #SAP #Threat Modeling #vulnerability
Penetration Testing Tools
SAP Threat Modeling Tool: A New Open-Source Tool to Protect SAP Systems from Attack
A new open-source tool, the SAP Threat Modeling Tool, helps organizations visualize connections between SAP systems to identify security risks and vulnerabilities.
33 views
Daily Writeups
⤷ Title: Critical SAP Vulnerability CVE-2025-42957 Actively Exploited by Hackers
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 06 Sep 2025 14:10:36 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attack #Cybersecurity #Pathlock #S/4HANA #SAP #Vulnerability
Hackread
Critical SAP Vulnerability CVE-2025-42957 Actively Exploited by Hackers
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
38 views
Daily Writeups
⤷ Title: Critical SAP S/4HANA Flaw Exposes Systems to Full Compromise
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:32:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_42957 #cybersecurity #remote code execution #S/4HANA #SAP #vulnerability
Penetration Testing Tools
Critical SAP S/4HANA Flaw Exposes Systems to Full Compromise
A critical vulnerability (CVE-2025-42957) in SAP S/4HANA with a CVSS score of 9.9 allows attackers with minimal privileges to execute arbitrary code.
14 views
Daily Writeups
⤷ Title: SAP Security Patch Day Fixes Four Critical Flaws, Including a CVSS 10.0 RCE (CVE-2025-42944)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 07:00:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_42944 #CVSS 10.0 #cybersecurity #Deserialization #Directory Traversal #rce #SAP #SAP NetWeaver #Security Patch Day #Vulnerability
Daily CyberSecurity
SAP Security Patch Day Fixes Four Critical Flaws, Including a CVSS 10.0 RCE (CVE-2025-42944)
19 views
Daily Writeups
⤷ Title: SAP Patches Critical Flaws Allowing Full System Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 14 Sep 2025 09:06:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #data breach #enterprise software #NetWeaver #remote code execution #SAP #Security Patch #vulnerability
Penetration Testing Tools
SAP Patches Critical Flaws Allowing Full System Takeover
SAP has released a critical security patch for its NetWeaver Java application server, addressing flaws that could lead to full system compromise.
48 views
Daily Writeups
⤷ Title: SAP Sızma Testi
════════════════════════
𐀪 Author: Fatih Tüzün
════════════════════════
ⴵ Time: Sat, 04 Oct 2025 22:01:34 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #sap #cybersecurity
Medium
SAP Sızma Testi
SAP dünyadaki en büyük iş yönetimi hizmeti sağlayıcısı. dünyada en çok kullanılan ERP sistemi. Öyle ki Forbes 500'deki şirketlerin %83’ü…
9 views
Daily Writeups
⤷ Title: SAP Patches Critical 10.0 Flaw in NetWeaver: Unauthenticated RCE Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Oct 2025 08:27:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_42937 #CVE_2025_42944 #cybersecurity #NetWeaver #rce #SAP #Security Patch Day #Vulnerability
Daily CyberSecurity
SAP Patches Critical 10.0 Flaw in NetWeaver: Unauthenticated RCE Risk
SAP's October 2025 Security Patch Day addressed 13 new notes, including two critical 10.0 flaws in NetWeaver AS Java and Print Service, posing an RCE threat.
14 views
Daily Writeups
⤷ Title: SAP November 2025 Patch Day Fixes 3 Critical Flaws (CVSS 10) — Including Code Injection and Insecure Key Management
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 08:14:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Patch Update #Deserialization #Hard_coded Credentials #NetWeaver #rce #SAP #Solution Manager
Daily CyberSecurity
SAP November 2025 Patch Day Fixes 3 Critical Flaws (CVSS 10) — Including Code Injection and Insecure Key Management
SAP released its Patch Day update fixing 18 flaws, including two Critical (CVSS 10.0) vulnerabilities: RMI-P4 RCE and Hard-Coded Credentials in SQL Anywhere Monitor, risking unauthenticated takeover.
16 views
Daily Writeups
⤷ Title: SAP Pushes Emergency Patch for 9.9 Rated CVE-2025-42887 After Full Takeover Risk
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 13:10:24 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Microsoft #SAP #SecurityBridge #Vulnerability
Hackread
SAP Pushes Emergency Patch for 9.9 Rated CVE-2025-42887 After Full Takeover Risk
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
34 views
Daily Writeups
⤷ Title: Ransomware attacks targeting SAP systems are increasing worldwide, and SAP landscapes are uniquely…
════════════════════════
𐀪 Author: José López
════════════════════════
ⴵ Time: Wed, 26 Nov 2025 22:45:26 GMT
════════════════════════
⌗ Tags: #sap #cybersecurity #ransomware
Medium
Ransomware attacks targeting SAP systems are increasing worldwide, and SAP landscapes are uniquely…
A strong defense requires a multi-layered, SAP-specific security strategy combining hardening, monitoring, network segmentation, incident…
23 views
Daily Writeups
⤷ Title: Final Patch of 2025: Critical SAP Solution Manager Flaw (CVE-2025-42880, CVSS 9.9) Risks Full System Compromise
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 07:31:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #Critical Vulnerability #CVE_2025_42880 #Patch Day #SAP #SAP Commerce Cloud #Solution Manager
Daily CyberSecurity
Final Patch of 2025: Critical SAP Solution Manager Flaw (CVE-2025-42880, CVSS 9.9) Risks Full System Compromise
SAP's final patch of 2025 fixes a Critical Code Injection flaw (CVSS 9.9) in Solution Manager risking full system control. Also patched: Tomcat flaws (9.6) in Commerce Cloud and jConnect RCE.
21 views
Daily Writeups
⤷ Title: Critical SAP Alert: S/4HANA SQL Injection & Wily RCE Threaten Financial Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 01:29:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ABAP Security #CVE_2026_0500 #CVE_2026_0501 #ERP Security #Patch Day #Remote Code Execution #SAP S/4HANA #SAP Security #sql injection #Wily Introscope
Daily CyberSecurity
Critical SAP Alert: S/4HANA SQL Injection & Wily RCE Threaten Financial Data
SAP Jan 2026 update fixes 17 flaws, including S/4HANA SQL Injection (CVSS 9.9) & Wily RCE (CVSS 9.6). Patch now to prevent full system compromise.
19 views
Daily Writeups
⤷ Title: How I Hacked an Enterprise’s Entire User Database with One Hardcoded Credential: SAP IAM Deep Dive
════════════════════════
𐀪 Author: HR
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 16:27:28 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #sap_security
Medium
How I Hacked an Enterprise’s Entire User Database with One Hardcoded Credential: SAP IAM Deep Dive
Introduction
43 views
Daily Writeups
⤷ Title: Critical SAP Alert: Code Injection (CVSS 9.9) Exposes S/4HANA Databases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 07:47:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_0488 #CVE_2026_0509 #database security #ERP Security #NetWeaver #Patch Tuesday #SAP CRM #SAP S/4HANA #SAP Security
Daily CyberSecurity
Critical SAP Alert: Code Injection (CVSS 9.9) Exposes S/4HANA Databases
SAP Feb 2026 update fixes critical CVE-2026-0488 (CVSS 9.9). Code injection in CRM & S/4HANA allows full database compromise. Patch immediately.
29 views
Daily Writeups
⤷ Title: From a Simple Stack Trace to Accessing an SAP Portal.
════════════════════════
𐀪 Author: Gaurang Jethva
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 10:21:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #django #bug_bounty #sap
Medium
From a Simple Stack Trace to Accessing an SAP Portal.
Short Story
41 views
Daily Writeups
⤷ Title: Critical Alert: SAP’s Latest Security Update Fixes 9.8 CVSS RCE and Deserialization Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 07:20:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2019_17571 #CVE_2026_27685 #cybersecurity #Enterprise Security #infosec #Insecure Deserialization #Patch Tuesday #Remote Code Execution #SAP Security #Vulnerability
Daily CyberSecurity
Critical Alert: SAP's Latest Security Update Fixes 9.8 CVSS RCE and Deserialization Flaws
SAP's latest security update addresses 15 flaws, including critical RCE (CVE-2019-17571) and deserialization (CVE-2026-27685) vulnerabilities. Patch now.
16 views
Daily Writeups
⤷ Title: Critical 9.9 Alert: SAP’s April 2026 Patch Day Targets Major SQL Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:03:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Business Warehouse #CVE_2026_27681 #Enterprise Security #ERP Patches #infosec #Patch Day #S/4HANA #SAP Security #sql injection #vulnerability management
Daily CyberSecurity
Critical 9.9 Alert: SAP’s April 2026 Patch Day Targets Major SQL Injection
SAP’s April 2026 updates fix a critical 9.9 CVSS SQL injection in Business Warehouse and 19 other security flaws. Audit your S/4HANA and BPC systems today.
9 views
Daily Writeups
⤷ Title: The “Mini Shai-Hulud” Attack Hijacking SAP Developer Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:04:51 +0000
════════════════════════
⌗ Tags: #Malware #@cap_js/sqlite #aws security #Azure #Bun runtime #CI/CD security #credential stealer #infosec #Kubernetes #mbt #Mini Shai_Hulud #npm malware #SAP #supply chain attack
Daily CyberSecurity
The "Mini Shai-Hulud" Attack Hijacking SAP Developer Pipelines
SAP developers are under attack. A surgical credential stealer hijacks CI/CD runners and cloud tokens via npm preinstall hooks. Rotate all secrets immediately.
26 views