Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: AI Notepad: Rewrite Your Text, Windows 11 Gets Smarter
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 04:19:55 +0000
════════════════════════
⌗ Tags: #Windows #Notepad AI #Windows 11 #Windows 11 Notepad AI
Daily CyberSecurity
AI Notepad: Rewrite Your Text, Windows 11 Gets Smarter
Microsoft had previously been testing an AI-powered version of Notepad through the Windows Insider Preview program. Following successful trials, this feature is now being rolled out to the stable …
17 views
Daily Writeups
⤷ Title: Pixel Power-Ups: AI Avatars, Watch Alerts, & Android 15’s Big Leap
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 04:01:39 +0000
════════════════════════
⌗ Tags: #Android #Android 15 #Google Messages #Pixel #Pixel 9 #Pixel 9 series
Daily CyberSecurity
Pixel Power-Ups: AI Avatars, Watch Alerts, & Android 15’s Big Leap
Google has recently unveiled four major updates for Android 15, including AI-powered fraud detection in Google Messages, real-time location sharing for users via the Find My Device feature, gaming…
17 views
Daily Writeups
⤷ Title: HPE Insight RS Flaw: CVE-2024-53676 PoC Exploit Published, RCE Risk Looms
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:47:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_53676 #Insight Remote Support
Daily CyberSecurity
HPE Insight RS Flaw: CVE-2024-53676 PoC Exploit Published, RCE Risk Looms
Explore CVE-2024-53676 PoC and its implications for HPE Insight Remote Support security vulnerabilities and remote code execution risks.
16 views
Daily Writeups
⤷ Title: CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:39:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #ADSelfService Plus #CVE_2025_1723
Daily CyberSecurity
CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus • Daily CyberSecurity
CVE-2025-1723 poses a significant risk for Zoho ADSelfService Plus users. Discover how to secure your data and avoid account takeover.
14 views
Daily Writeups
⤷ Title: Malicious Go Packages Target Developers with Hidden Loader Malware on Linux and macOS
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:33:11 +0000
════════════════════════
⌗ Tags: #Malware #Linux #macOS #Malicious Go Packages
Cybersecurity News
Malicious Go Packages Target Developers with Hidden Loader Malware on Linux and macOS
Uncover the threat of malicious Go packages targeting developers through typosquatting. Stay informed to protect your projects.
31 views
Daily Writeups
⤷ Title: Vim Users Warned: Crafted TAR Files Could Trigger Code Execution (CVE-2025-27423)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:20:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_27423 #vim #Vim vulnerability
Cybersecurity News
Vim Users Warned: Crafted TAR Files Could Trigger Code Execution (CVE-2025-27423)
Explore CVE-2025-27423, a Vim vulnerability that allows arbitrary code execution. Learn how to protect your systems.
16 views
Daily Writeups
⤷ Title: LummaStealer Expands Attack Surface with Fake Booking Sites and CAPTCHA Tricks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:14:50 +0000
════════════════════════
⌗ Tags: #Malware #LummaStealer #Malware_as_a_Service
Cybersecurity News
LummaStealer Expands Attack Surface with Fake Booking Sites and CAPTCHA Tricks
Uncover the LummaStealer Attack and its new malvertising tactics using fake booking websites to distribute info-stealer malware.
20 views
Daily Writeups
⤷ Title: CVE-2024-0114: NVIDIA Addresses High-Severity HMC Vulnerability
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:59:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_0114 #Hopper HGX #nvidia
Daily CyberSecurity
CVE-2024-0114: NVIDIA Addresses High-Severity HMC Vulnerability
Learn about CVE-2024-0114, a high-severity vulnerability in Nvidia's Hopper HGX, risking code execution and privilege escalation.
17 views
Daily Writeups
⤷ Title: Operation Sea Elephant Cyber-Espionage Campaign Targeting South Asia
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:56:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #CNC group #cyber_espionage #data exfiltration #Github API i #Government Organizations #malware #Operation Sea Elephant #Remote Command Execution #Research Institutions #South Asia #Universities
Daily CyberSecurity
Operation Sea Elephant Cyber-Espionage Campaign Targeting South Asia
Uncover the tactics of the CNC group in Operation Sea Elephant targeting academic and research institutions in South Asia.
19 views
Daily Writeups
⤷ Title: Chrome 134 Update Addresses High-Risk Vulnerability (CVE-2025-1914)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:47:30 +0000
════════════════════════
⌗ Tags: #Vulnerability #Chrome 134 #CVE_2025_1914 #CVE_2025_1915 #javascript #V8
Daily CyberSecurity
Chrome 134 Update Addresses High-Risk Vulnerability (CVE-2025-1914)
Discover how CVE-2025-1914 impacts Google Chrome and the urgent security patches included in the latest Chrome 134 update.
20 views
Daily Writeups
⤷ Title: CVE-2025-0912: Critical Flaw Exposes Over 100,000 WordPress Donation Sites to RCE
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:35:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_0912 #GiveWP #wordpress
Daily CyberSecurity
CVE-2025-0912: Critical Flaw Exposes Over 100,000 WordPress Donation Sites to RCE
Learn about CVE-2025-0912, a severe security vulnerability in GiveWP affecting over 100,000 WordPress sites.
25 views
Daily Writeups
⤷ Title: SharePoint Shadow: Havoc’s FUD Malware Conceals Cyber Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 00:25:32 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Campaign #FUD Malware #Havoc C2 #Microsoft Graph API #Sharepoint #SharePointC2Init #Undetectable
Daily CyberSecurity
SharePoint Shadow: Havoc's FUD Malware Conceals Cyber Attacks
Explore the latest insights on FUD Malware and how the Havoc framework enables undetectable cyber operations.
23 views
Daily Writeups
⤷ Title: Finding jwt tokens that lead to PII data leakage.
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:20:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #bug_bounty #bug_bounty_tips #ethical_hacking
Medium
Finding jwt tokens that lead to PII data leakage.
Check the JWT tokens carefully for those that contain sensitive information
18 views
Daily Writeups
⤷ Title: Able to create an account without a phone number. (unique bug)
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:16:31 GMT
════════════════════════
⌗ Tags: #tips #bug_bounty_tips #ethical_hacking #cybersecurity #bug_bounty
Medium
Able to create an account without a phone number. (unique bug)
Enter anything in the phone number field, and I’m still able to create an account
14 views
Daily Writeups
⤷ Title: Find new apex domains that are related to your bug bounty target.
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:14:11 GMT
════════════════════════
⌗ Tags: #tips #penetration_testing #bug_bounty #cybersecurity #programming
Medium
Find new apex domains that are related to your bug bounty target.
Learn how to do it by reading this article.
16 views
Daily Writeups
⤷ Title: A Logical Bug That Slipped Through
════════════════════════
𐀪 Author: callgh0st
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:12:44 GMT
════════════════════════
⌗ Tags: #bug_bounty #burpsuite #genocide #logic #hacking
Medium
A Logical Bug That Slipped Through
In the Name of Allah, the Most Beneficent, the Most Merciful. All the praises and thanks be to Allah, the Lord of the ‘Alamin (mankind…
18 views
Daily Writeups
⤷ Title: Command Injection: The Ultimate Guide to Exploiting and Preventing OS Command Execution
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 09:45:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #injection_payloads #prevent_injection #command_injection #os_injection
Medium
Command Injection: The Ultimate Guide to Exploiting and Preventing OS Command Execution
✨ Free Link in the first comment
17 views
Daily Writeups
⤷ Title: $50-$100 worth Sensitive Leaks via Google Dorks | Part 2
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 09:18:40 GMT
════════════════════════
⌗ Tags: #google #secrets #bug_bounty #google_hacking #google_dork
Medium
$50-$100 worth Sensitive Leaks via Google Dorks | Part 2
Part 2: Learn practical and hidden dorks to target sensitive bounty earning leaks and sensitive files.
18 views
Daily Writeups
⤷ Title: How i Bypass 403 and earn bounty $$$$
════════════════════════
𐀪 Author: Rishav anand
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 08:53:57 GMT
════════════════════════
⌗ Tags: #servers #cybersecurity #money #bug_bounty #hacking
Medium
How i Bypass 403 and earn bounty $$$$
Bypassing a 403 Forbidden error during bug bounty hunting can be tricky, but there are multiple techniques you can try, depending on the…
15 views
Daily Writeups
⤷ Title: The Curious Case of an Insecure Password Reset Flaw
════════════════════════
𐀪 Author: Sapienshack
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 07:58:30 GMT
════════════════════════
⌗ Tags: #pentesting #penetration_testing #bug_bounty #application_security #bug_bounty_writeup
Medium
The Curious Case of an Insecure Password Reset Flaw
During our penetration testing journey, we encounter numerous test cases. Recently, I came across a unique scenario that I felt was worth…
11 views