Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Intigriti September 2026 CTF Write-Up: Exploiting UNION-Based SQL Injection in Critter Gallery
════════════════════════
𐀪 Author: Zabed Ullah Poyel
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:31:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #ctf_writeup #sql_injection #intigriti
Medium
Intigriti September 2026 CTF Write-Up: Exploiting UNION-Based SQL Injection in Critter Gallery
Challenge: Critter Gallery
Platform: Intigriti
Category: Web Security / SQL Injection
Vulnerability: UNION-Based SQL Injection
Difficulty…
21 views
Daily Writeups
⤷ Title: I Found a LiteLLM API Key in a Publicly Accessible .env File on a NASA Subdomain
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 23:39:08 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #cybersecurity #hacking #artificial_intelligence #web_security
Medium
I Found a LiteLLM API Key in a Publicly Accessible .env File on a NASA Subdomain
Sometimes you don’t need a complicated exploit to find something interesting.
23 views
Daily Writeups
⤷ Title: Authlib Signature Bypass Vulnerability Exposes Apps
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:59:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Authlib #CVE_2026_27962 #CVE_2026_28802 #CVE_2026_96760 #cybersecurity
Daily CyberSecurity
Authlib Signature Bypass Vulnerability Exposes Apps
TL;DR CERT/CC released an advisory warning of an Authlib signature bypass vulnerability tracked as CVE-2026-96760. This flaw allows attackers to forge JSON Web Signatures (JWS) and inject maliciou…
22 views
Daily Writeups
⤷ Title: Critical WatchGuard AP Vulnerabilities Patched in Version 3.4.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:50:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report
Daily CyberSecurity
Critical WatchGuard AP Vulnerabilities Patched in Version 3.4.8
TL;DR On September 29, 2026, WatchGuard disclosed three severe WatchGuard AP vulnerabilities. These flaws allow attackers to bypass authentication and execute arbitrary operating system commands. …
20 views
Daily Writeups
⤷ Title: Portal for ArcGIS Vulnerabilities Fixed in September Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:42:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ArcGIS #CVE_2026_10759 #CVE_2026_69226 #CVE_2026_69227 #cybersecurity #Esri
Daily CyberSecurity
Portal for ArcGIS Vulnerabilities Fixed in September Update
TL;DR On September 24, 2026, Esri released Security Update 4 to patch three Portal for ArcGIS vulnerabilities. The update resolves a critical missing authentication flaw alongside two medium-sever…
13 views
Daily Writeups
⤷ Title: Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security Teams
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:05:24 +0000
════════════════════════
⌗ Tags: #Announcement #CISA KEV #CVE Alerts #CVE_Watch #EPSS #Exploit Intelligence #Free Trial #GitHub Issues #Microsoft Teams #patch management #Reserved CVE #Slack Integration #threat intelligence #vulnerability management
Daily CyberSecurity
Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security Teams
Daily CyberSecurity, the team behind the CVE-Watchtower vulnerability tracking platform on securityonline.info, today announced the general availability of CVE Alerts, a subscription service that …
17 views
Daily Writeups
⤷ Title: Exploited Apple Zero-Day Vulnerability Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:21:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #Arbitrary Code Execution #CVE_2026_86950 #cybersecurity #ios #macOS #zero_day
Daily CyberSecurity
Exploited Apple Zero-Day Vulnerability Patched
TL;DR On September 29, 2026, Apple issued emergency updates to remediate an actively exploited Apple zero-day vulnerability. The critical flaw allows attackers to execute arbitrary code by trickin…
15 views
Daily Writeups
⤷ Title: PostgreSQL RCE Vulnerability Details and PoC Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:19:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_15742 #cybersecurity #database security #fuzzystrmatch #PostgreSQL #Remote Code Execution
Daily CyberSecurity
PostgreSQL RCE Vulnerability Details and PoC Disclosed
TL;DR PostgreSQL developers patched a critical integer wraparound flaw in the fuzzystrmatch module. This PostgreSQL RCE vulnerability permits low-privileged database users to execute arbitrary com…
19 views
Daily Writeups
⤷ Title: Broken Access Control: Unauthenticated Read/Write Access to Every Conversation in an Tiktok AI…
════════════════════════
𐀪 Author: Mostafa Ayed
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:08:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #infosec
Medium
Broken Access Control: Unauthenticated Read/Write Access to Every Conversation in an Tiktok AI Support Chatbot
Summary
13 views
Daily Writeups
⤷ Title: How I Solved Intigriti’s September 2026 Challenge
════════════════════════
𐀪 Author: Ronaldo Shrestha
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #intigriti #ctf_writeup #ctf #bug_bounty
Medium
How I Solved Intigriti’s September 2026 Challenge
Critter Gallery — Boolean-Based Blind SQL Injection
23 views
Daily Writeups
⤷ Title: First Principle Insight #7
════════════════════════
𐀪 Author: Kevin Hagan
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:19:59 GMT
════════════════════════
⌗ Tags: #crime #hacker #cybersecurity #hacking #stock_price
Medium
First Principle Insight #7
Most hackers start out trying to do the right thing by going to bug bounty sites and filling out a report on finds they find. But the…
22 views
Daily Writeups
⤷ Title: The Endpoint Hostage Crisis
════════════════════════
𐀪 Author: Corpburnrate
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:33:18 GMT
════════════════════════
⌗ Tags: #software_engineering #tech_culture #cybersecurity #infosec #devops
Medium
The Endpoint Hostage Crisis
The modern enterprise has a highly contradictory definition of productivity.
19 views
Daily Writeups
⤷ Title: Shells & Payloads — A Practitioner’s Reference
════════════════════════
𐀪 Author: Gabriel D. Vincent
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 00:11:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #information_security #penetration_testing #linux #cybersecurity
Medium
Shells & Payloads — A Practitioner’s Reference
A reference for establishing shell access and delivering payloads. Organized by use case, not theory.
23 views
Daily Writeups
⤷ Title: Hack The Box Trick Write-Up: From DNS Zone Transfer to Fail2Ban Root
════════════════════════
𐀪 Author: ZeroByte
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 01:23:50 GMT
════════════════════════
⌗ Tags: #hackthebox #cybersecurity #lfi #fail2ban #sql_injection
Medium
Hack The Box Trick Write-Up: From DNS Zone Transfer to Fail2Ban Root
A Step-by-Step Walkthrough of DNS Enumeration, Blind SQL Injection, Local File Inclusion, SSH Key Disclosure, and Fail2Ban Privilege…
30 views
Daily Writeups
⤷ Title: Citrix NetScaler Zero-Day Flaws Exploited: Patch Now
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 03:49:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV #Citrix #CVE_2026_88771 #CVE_2026_88772 #NetScaler #remote code execution #VPN Security #zero_day
Information Security News
Citrix NetScaler Zero-Day Flaws Exploited: Patch Now
Attackers Need No Password The latest attacks on Citrix NetScaler require no password at all. Citrix has disclosed two critical zero-day flaws in NetScaler ADC and NetScaler Gateway. Attackers can…
27 views
Daily Writeups
⤷ Title: wolfSSL 5.9.4 Fixes 10 Vulnerabilities, Including TLS Authentication Bypass Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 03:55:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Certificate Validation #CVE_2026_89102 #CVE_2026_89136 #CVE_2026_93302 #Embedded Security #TLS authentication bypass #wolfSSL #wolfSSL vulnerabilities
Daily CyberSecurity
wolfSSL 5.9.4 Fixes 10 Vulnerabilities, Including TLS Authentication Bypass Flaws
TL;DR wolfSSL shipped version 5.9.4 on September 25, 2026, fixing 10 wolfSSL vulnerabilities. Three are rated High, and each lets a malicious peer bypass TLS authentication or forge certificates i…
24 views
Daily Writeups
⤷ Title: OpenAI Delays GPT-6.1 Astra Release Over Safety Concerns
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 03:25:18 +0000
════════════════════════
⌗ Tags: #Technology #AI safety #GPT_6 #OpenAI #Tech News
Daily CyberSecurity
OpenAI Delays GPT-6.1 Astra Release Over Safety Concerns
OpenAI initially planned to release the upgraded GPT-6.1 Astra model soon. However, internal security evaluations revealed a significant problem. The model fell short of deployment standards in sp…
14 views
Daily Writeups
⤷ Title: Google Outlines ChromeOS Sunset and Transition Plan
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 03:15:10 +0000
════════════════════════
⌗ Tags: #Technology #ChromeOS #enterprise IT #google #Googlebook OS
Daily CyberSecurity
Google Outlines ChromeOS Sunset and Transition Plan
As the highly anticipated “Googlebooks” laptop product line prepares for its official market debut on October 4th, Google has definitively clarified the retirement timeline for its ven…
13 views
Daily Writeups
⤷ Title: Critical LXD Vulnerabilities Let Container Users Write Files as Root on the Host
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 02:09:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #btrfs #Canonical #container security #CVE_2026_85526 #CVE_2026_87799 #LXD #LXD vulnerabilities #Path Traversal
Daily CyberSecurity
Critical LXD Vulnerabilities Let Container Users Write Files as Root on the Host
TL;DR Canonical has patched three critical LXD vulnerabilities rated CVSS 9.6 to 9.9. Each one lets a low-privileged user or a rogue migration source write or delete files as root on the host. Fix…
15 views
Daily Writeups
⤷ Title: Your AI Agent Just Leaked Your Email — And a Fake Restaurant Review Did It
════════════════════════
𐀪 Author: gopi
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 03:46:05 GMT
════════════════════════
⌗ Tags: #bug_bounty #ai #ai_agent #cybersecurity #infosec
Medium
Your AI Agent Just Leaked Your Email — And a Fake Restaurant Review Did It
If you’re not a Medium paid member, click here to read this post for free with a friend link.
16 views