Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: No Password Required: 9.8 Severity ELECOM Router Flaws Allow Total Network Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:02:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_40621 #CVE_2026_42062 #Cyber Security #ELECOM #infosec #os command injection #Patch Alert #router security #WAB_BE Series #WRC_X Series
Daily CyberSecurity
No Password Required: 9.8 Severity ELECOM Router Flaws Allow Total Network Takeover
ELECOM routers hit by critical 9.8 CVSS flaws (CVE-2026-42062). Unauthenticated attackers can execute OS commands and bypass auth. Update firmware now!
18 views
Daily Writeups
⤷ Title: Cisco SD-WAN Manager XXE Flaw Grants Unauthenticated Access to Private Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:46:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Catalyst #Cisco Security #CVE_2026_20224 #Information Disclosure #infosec #network_security #Patch Alert #privilege escalation #SD_WAN Manager #vManage #XXE Injection
Daily CyberSecurity
Cisco SD-WAN Manager XXE Flaw Grants Unauthenticated Access to Private Files
Cisco fixes a critical 8.6 CVSS XXE flaw (CVE-2026-20224) in Catalyst SD-WAN Manager. Unauthenticated attackers can read arbitrary files. Patch now!
19 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:36:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Redshift #aws security #CVE_2026_8178 #Cyber Security #Data Warehouse #database security #infosec #Java security #JDBC Driver #Patch Alert #rce
Daily CyberSecurity
Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
CVE-2026-8178 in Amazon Redshift JDBC Driver allows RCE via unsafe class loading. Protect your data warehouse and update to version 2.2.2 now!
14 views
Daily Writeups
⤷ Title: Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:20:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_7813 #Cyber Security #database security #infosec #Patch Alert #pgAdmin 4 #pgAdmin 9.15 #PostgreSQL #rce #sql injection
Daily CyberSecurity
Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution
pgAdmin 4 v9.15 fixes a 9.4 CVSS auth bypass and multiple RCE flaws. Attackers can execute OS commands via SQL tools. Upgrade your pgAdmin server now!
23 views
Daily Writeups
⤷ Title: Kubernetes Alert: 9.4 Severity RCE in CloudNativePG Enables PostgreSQL Superuser Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:01:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloud_native #CloudNativePG #CVE_2026_44477 #database security #infosec #Kubernetes Security #Patch Alert #PostgreSQL #privilege escalation #rce
Daily CyberSecurity
Kubernetes Alert: 9.4 Severity RCE in CloudNativePG Enables PostgreSQL Superuser Takeover
CVE-2026-44477 in CloudNativePG allows low-privilege users to gain root-level RCE via metrics exporters. Update to version 1.29.1 or 1.28.3 now!
26 views
Daily Writeups
⤷ Title: Prompt Injection : Tryhackme Walkthrough
════════════════════════
𐀪 Author: Mukund
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:25:13 GMT
════════════════════════
⌗ Tags: #tryhackme #agentic_ai #cybersecurity #llm #ai_security
Medium
Prompt Injection : Tryhackme Walkthrough
If you’ve explored the field of AI security, even at a surface level, before taking on this learning path or room, it’s very likely you…
32 views
Daily Writeups
⤷ Title: BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:49:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure AD #BAADTokenBroker #cloud security #Device_Bound Keys #Kerberos #Microsoft Entra ID #NT Hash #post_exploitation #PRT Cookie #red teaming #TGT
Penetration Testing Tools
BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
Master Microsoft Entra ID post-exploitation with BAADTokenBroker. Learn how to request PRT cookies and abuse Entra Kerberos to acquire TGTs and NT hashes.
32 views
Daily Writeups
⤷ Title: From Lost to Found: How Claude AI Helped a Student Recover $400,000 in Forgotten Bitcoin After 11 Years
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:20:41 +0000
════════════════════════
⌗ Tags: #Technology #5 BTC #Anthropic #Bitcoin Recovery #Blockchain Forensic #BTC Wallet #BTCRecover #Claude AI #cryptocurrency security #Lost Crypto Password #Wallet.dat
Penetration Testing Tools
From Lost to Found: How Claude AI Helped a Student Recover $400,000 in Forgotten Bitcoin After 11 Years
An antiquated laptop from one’s collegiate years may occasionally harbor more than mere vestiges of social gatherings; it
29 views
Daily Writeups
⤷ Title: The $10.5 Billion Shield: How Binance AI Thwarted 22 Million Cyberattacks in a Single Year
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:19:48 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Fraud Prevention #Binance #Binance AI Pro #Blockchain Intelligence #Crypto Security #Cybersecurity 2026 #Deepfake Detection #KYC AI #P2P Fraud #Social Engineering Defense
Penetration Testing Tools
The $10.5 Billion Shield: How Binance AI Thwarted 22 Million Cyberattacks in a Single Year
Adversaries are increasingly weaponizing artificial intelligence to orchestrate sophisticated offensives against participants in the cryptocurrency ecosystem. The synthesis
23 views
Daily Writeups
⤷ Title: The Rise of the Oligopoly: How Qilin, LockBit, and The Gentlemen Dominate the 2026 Ransomware Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:15:59 +0000
════════════════════════
⌗ Tags: #Malware #Akira #Check Point Research #cybercrime trends #FortiGate CVE_2024_55591 #Industrial Manufacturing Security #LockBit 5.0 #Qilin #Ransomware 2026 #The Gentlemen #threat intelligence
Penetration Testing Tools
The Rise of the Oligopoly: How Qilin, LockBit, and The Gentlemen Dominate the 2026 Ransomware Landscape
The ransomware landscape is undergoing a period of significant consolidation as major syndicates reassert their dominance. After two
20 views
Daily Writeups
⤷ Title: Iranian Seedworm Group Infiltrates South Korean Tech Titan in Global Espionage Surge
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:13:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ChromElevator #Credential Harvesting #DLL Sideloading #Industrial Espionage #Iranian MOIS #MuddyWater #Node.js Malware #Seedworm #South Korea Cyberattack #Symantec #threat intelligence
Penetration Testing Tools
Iranian Seedworm Group Infiltrates South Korean Tech Titan in Global Espionage Surge
The Iranian threat collective Seedworm maintained a clandestine presence within the infrastructure of a prominent South Korean electronics
25 views
Daily Writeups
⤷ Title: OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 04:00:50 +0000
════════════════════════
⌗ Tags: #Data Leak #Atlas Browser #ChatGPT #Code_Signing Certificate #Codex #Cybersecurity 2026 #InfoSec News #macOS security #npm Supply Chain Attack #OpenAI #software update #TanStack
Daily CyberSecurity
OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach
OpenAI rotates code signing certificates following the TanStack npm breach. macOS users must update ChatGPT and Codex manually before June 12, 2026.
21 views
Daily Writeups
⤷ Title: Desktop Power, Mobile Control: OpenAI Brings Remote Codex Management to the ChatGPT App
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 03:57:18 +0000
════════════════════════
⌗ Tags: #Technology #android #ChatGPT Mobile #Code Review #Codex #DevOps 2026 #ios #macOS #mobile coding #OpenAI #remote development #Secure Relay
Daily CyberSecurity
Desktop Power, Mobile Control: OpenAI Brings Remote Codex Management to the ChatGPT App
OpenAI integrates Codex into the ChatGPT app! Monitor tasks, approve code, and manage remote macOS environments from your phone with encrypted secure relays.
20 views
Daily Writeups
⤷ Title: PoC Released: Critical Linux Kernel ptrace Flaw Publicly Disclosed—Unprivileged Root File Access Possible
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 03:50:35 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #CVE_2026_ptrace #Cyber Security #File Descriptor Theft #infosec #Linus Torvalds #Linux Kernel #Patch Alert #PoC Exploit #privilege escalation #ptrace #root access
Daily CyberSecurity
PoC Released: Critical Linux Kernel ptrace Flaw Publicly Disclosed—Unprivileged Root File Access Possible
Technical details and PoC exploits disclosed for Linux Kernel ptrace flaw. Unprivileged users can steal root file descriptors. Patch to May 14 release!
23 views
Daily Writeups
⤷ Title: HSC RTV CTF — TAG (Forensics — 200pts)
════════════════════════
𐀪 Author: Life of a Pentester
════════════════════════
ⴵ Time: Fri, 15 May 2026 04:49:55 GMT
════════════════════════
⌗ Tags: #infosec #forensics #ctf_writeup #ctf #hacking
Medium
HSC RTV CTF — TAG (Forensics — 200pts)
First of all. Spectrum Sucks.
28 views
Daily Writeups
⤷ Title: pwning Facts
════════════════════════
𐀪 Author: pwnedByJT
════════════════════════
ⴵ Time: Fri, 15 May 2026 04:38:26 GMT
════════════════════════
⌗ Tags: #hackthebox #penetration_testing #privilege_escalation #cybersecurity #infosec
Medium
pwning Facts
nmap scan results noticed two port are open which are 22 ssh and 80 which is http
29 views
Daily Writeups
⤷ Title: Small Engineering Mistakes That Cause Major Security Breaches
════════════════════════
𐀪 Author: Hardik Patel
════════════════════════
ⴵ Time: Fri, 15 May 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #software_engineering #engineering_mindset #cyber_security_awareness
Medium
Small Engineering Mistakes That Cause Major Security Breaches
How seemingly harmless actions create real-world cybersecurity incidents inside organizations.
34 views
Daily Writeups
⤷ Title: How Security Engineers Think About Risk in Real Systems
════════════════════════
𐀪 Author: Hardik Patel
════════════════════════
ⴵ Time: Fri, 15 May 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #software_engineering #cyber_security_awareness #engineering_mindset #cybersecurity #infosec
Medium
How Security Engineers Think About Risk in Real Systems
Developing the mindset required to recognize, evaluate, and reduce security risks during everyday engineering work.
56 views
Daily Writeups
⤷ Title: On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 15 May 2026 11:49:04 +0530
════════════════════════
⌗ Tags: No_Tags
46 views
Daily Writeups
⤷ Title: CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 15 May 2026 10:58:03 +0530
════════════════════════
⌗ Tags: No_Tags
40 views