Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: The Recon Habit That Separates Paid Hackers From Tool Users
════════════════════════
𐀪 Author: Yamini Yadav_369
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:45:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #medium #writing #hacking
Medium
The Recon Habit That Separates Paid Hackers From Tool Users
Recon From Zero: The 7 Part Hunter’s Map. From your first subdomain to your first bounty, one step at a time
25 views
Daily Writeups
⤷ Title: Fixing Frida LIBUSB_TRANSFER_STALL by Switching from USB to Wi-Fi
════════════════════════
𐀪 Author: Sid Joshi
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:44:13 GMT
════════════════════════
⌗ Tags: #mobile_pentesting #ios_penetration_testing #bug_bounty #bug_bounty_tips #android_pentesting
22 views
Daily Writeups
⤷ Title: When the Wall Has a Door: A Bug Hunter’s Guide to CSP Bypass
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:39:21 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #bug_bounty_writeup #bug_bounty_tips #hacking
Medium
When the Wall Has a Door: A Bug Hunter’s Guide to CSP Bypass
Here’s a moment every hunter hits eventually: you’ve found the injection, your payload lands in the page, and then… nothing. No alert box…
21 views
Daily Writeups
⤷ Title: Intigriti September 2026 CTF Write-Up: Exploiting UNION-Based SQL Injection in Critter Gallery
════════════════════════
𐀪 Author: Zabed Ullah Poyel
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:31:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #ctf_writeup #sql_injection #intigriti
Medium
Intigriti September 2026 CTF Write-Up: Exploiting UNION-Based SQL Injection in Critter Gallery
Challenge: Critter Gallery
Platform: Intigriti
Category: Web Security / SQL Injection
Vulnerability: UNION-Based SQL Injection
Difficulty…
21 views
Daily Writeups
⤷ Title: I Found a LiteLLM API Key in a Publicly Accessible .env File on a NASA Subdomain
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:39:08 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #cybersecurity #hacking #artificial_intelligence #web_security
Medium
I Found a LiteLLM API Key in a Publicly Accessible .env File on a NASA Subdomain
Sometimes you don’t need a complicated exploit to find something interesting.
23 views
Daily Writeups
⤷ Title: Authlib Signature Bypass Vulnerability Exposes Apps
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:59:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Authlib #CVE_2026_27962 #CVE_2026_28802 #CVE_2026_96760 #cybersecurity
Daily CyberSecurity
Authlib Signature Bypass Vulnerability Exposes Apps
TL;DR CERT/CC released an advisory warning of an Authlib signature bypass vulnerability tracked as CVE-2026-96760. This flaw allows attackers to forge JSON Web Signatures (JWS) and inject maliciou…
22 views
Daily Writeups
⤷ Title: Critical WatchGuard AP Vulnerabilities Patched in Version 3.4.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:50:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report
Daily CyberSecurity
Critical WatchGuard AP Vulnerabilities Patched in Version 3.4.8
TL;DR On September 29, 2026, WatchGuard disclosed three severe WatchGuard AP vulnerabilities. These flaws allow attackers to bypass authentication and execute arbitrary operating system commands. …
20 views
Daily Writeups
⤷ Title: Portal for ArcGIS Vulnerabilities Fixed in September Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:42:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ArcGIS #CVE_2026_10759 #CVE_2026_69226 #CVE_2026_69227 #cybersecurity #Esri
Daily CyberSecurity
Portal for ArcGIS Vulnerabilities Fixed in September Update
TL;DR On September 24, 2026, Esri released Security Update 4 to patch three Portal for ArcGIS vulnerabilities. The update resolves a critical missing authentication flaw alongside two medium-sever…
14 views
Daily Writeups
⤷ Title: Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security Teams
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:05:24 +0000
════════════════════════
⌗ Tags: #Announcement #CISA KEV #CVE Alerts #CVE_Watch #EPSS #Exploit Intelligence #Free Trial #GitHub Issues #Microsoft Teams #patch management #Reserved CVE #Slack Integration #threat intelligence #vulnerability management
Daily CyberSecurity
Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security Teams
Daily CyberSecurity, the team behind the CVE-Watchtower vulnerability tracking platform on securityonline.info, today announced the general availability of CVE Alerts, a subscription service that …
17 views
Daily Writeups
⤷ Title: Exploited Apple Zero-Day Vulnerability Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:21:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #Arbitrary Code Execution #CVE_2026_86950 #cybersecurity #ios #macOS #zero_day
Daily CyberSecurity
Exploited Apple Zero-Day Vulnerability Patched
TL;DR On September 29, 2026, Apple issued emergency updates to remediate an actively exploited Apple zero-day vulnerability. The critical flaw allows attackers to execute arbitrary code by trickin…
15 views
Daily Writeups
⤷ Title: PostgreSQL RCE Vulnerability Details and PoC Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:19:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_15742 #cybersecurity #database security #fuzzystrmatch #PostgreSQL #Remote Code Execution
Daily CyberSecurity
PostgreSQL RCE Vulnerability Details and PoC Disclosed
TL;DR PostgreSQL developers patched a critical integer wraparound flaw in the fuzzystrmatch module. This PostgreSQL RCE vulnerability permits low-privileged database users to execute arbitrary com…
19 views
Daily Writeups
⤷ Title: Broken Access Control: Unauthenticated Read/Write Access to Every Conversation in an Tiktok AI…
════════════════════════
𐀪 Author: Mostafa Ayed
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:08:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #infosec
Medium
Broken Access Control: Unauthenticated Read/Write Access to Every Conversation in an Tiktok AI Support Chatbot
Summary
13 views
Daily Writeups
⤷ Title: How I Solved Intigriti’s September 2026 Challenge
════════════════════════
𐀪 Author: Ronaldo Shrestha
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #intigriti #ctf_writeup #ctf #bug_bounty
Medium
How I Solved Intigriti’s September 2026 Challenge
Critter Gallery — Boolean-Based Blind SQL Injection
23 views
Daily Writeups
⤷ Title: First Principle Insight #7
════════════════════════
𐀪 Author: Kevin Hagan
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:19:59 GMT
════════════════════════
⌗ Tags: #crime #hacker #cybersecurity #hacking #stock_price
Medium
First Principle Insight #7
Most hackers start out trying to do the right thing by going to bug bounty sites and filling out a report on finds they find. But the…
22 views
Daily Writeups
⤷ Title: The Endpoint Hostage Crisis
════════════════════════
𐀪 Author: Corpburnrate
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:33:18 GMT
════════════════════════
⌗ Tags: #software_engineering #tech_culture #cybersecurity #infosec #devops
Medium
The Endpoint Hostage Crisis
The modern enterprise has a highly contradictory definition of productivity.
19 views
Daily Writeups
⤷ Title: Shells & Payloads — A Practitioner’s Reference
════════════════════════
𐀪 Author: Gabriel D. Vincent
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:11:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #information_security #penetration_testing #linux #cybersecurity
Medium
Shells & Payloads — A Practitioner’s Reference
A reference for establishing shell access and delivering payloads. Organized by use case, not theory.
23 views
Daily Writeups
⤷ Title: Hack The Box Trick Write-Up: From DNS Zone Transfer to Fail2Ban Root
════════════════════════
𐀪 Author: ZeroByte
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:23:50 GMT
════════════════════════
⌗ Tags: #hackthebox #cybersecurity #lfi #fail2ban #sql_injection
Medium
Hack The Box Trick Write-Up: From DNS Zone Transfer to Fail2Ban Root
A Step-by-Step Walkthrough of DNS Enumeration, Blind SQL Injection, Local File Inclusion, SSH Key Disclosure, and Fail2Ban Privilege…
30 views
Daily Writeups
⤷ Title: Citrix NetScaler Zero-Day Flaws Exploited: Patch Now
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 03:49:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV #Citrix #CVE_2026_88771 #CVE_2026_88772 #NetScaler #remote code execution #VPN Security #zero_day
Information Security News
Citrix NetScaler Zero-Day Flaws Exploited: Patch Now
Attackers Need No Password The latest attacks on Citrix NetScaler require no password at all. Citrix has disclosed two critical zero-day flaws in NetScaler ADC and NetScaler Gateway. Attackers can…
27 views
Daily Writeups
⤷ Title: wolfSSL 5.9.4 Fixes 10 Vulnerabilities, Including TLS Authentication Bypass Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 03:55:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Certificate Validation #CVE_2026_89102 #CVE_2026_89136 #CVE_2026_93302 #Embedded Security #TLS authentication bypass #wolfSSL #wolfSSL vulnerabilities
Daily CyberSecurity
wolfSSL 5.9.4 Fixes 10 Vulnerabilities, Including TLS Authentication Bypass Flaws
TL;DR wolfSSL shipped version 5.9.4 on September 25, 2026, fixing 10 wolfSSL vulnerabilities. Three are rated High, and each lets a malicious peer bypass TLS authentication or forge certificates i…
24 views
Daily Writeups
⤷ Title: OpenAI Delays GPT-6.1 Astra Release Over Safety Concerns
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 03:25:18 +0000
════════════════════════
⌗ Tags: #Technology #AI safety #GPT_6 #OpenAI #Tech News
Daily CyberSecurity
OpenAI Delays GPT-6.1 Astra Release Over Safety Concerns
OpenAI initially planned to release the upgraded GPT-6.1 Astra model soon. However, internal security evaluations revealed a significant problem. The model fell short of deployment standards in sp…
14 views