Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: When a Production Backend Has No Authentication: Internal Disclosure and Unauthenticated State…
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 01:45:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #web_hacking #bug_bounty #ethical_hacking
Medium
When a Production Backend Has No Authentication: Internal Disclosure and Unauthenticated State Changes
Sometimes the most interesting API vulnerabilities aren’t hidden behind complicated authorization logic.
18 views
Daily Writeups
⤷ Title: Explain This: Dependabot’s Cooldown Is a Supply Chain Control, Not a Delay
════════════════════════
𐀪 Author: Karla Ortiz-Flores
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 01:02:02 GMT
════════════════════════
⌗ Tags: #application_security #explain_this #supply_chain
Medium
Explain This: Dependabot’s Cooldown Is a Supply Chain Control, Not a Delay
Dependabot’s three-day pause shows why dependency automation now needs timing controls, evidence, and exception paths. Explain This: Dependabot’s Cooldown Is a Supply Chain Control, Not a …
20 views
Daily Writeups
⤷ Title: How to Choose the Right Penetration Testing Services for Your Business
════════════════════════
𐀪 Author: Accorianglobal
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 00:40:43 GMT
════════════════════════
⌗ Tags: #penetration_testing #pen_testing_service
Medium
How to Choose the Right Penetration Testing Services for Your Business
Cyberattacks are becoming more sophisticated, and organizations can no longer rely solely on firewalls, endpoint protection, or…
25 views
Daily Writeups
⤷ Title: The Rise and Fall of Twitter (X)
════════════════════════
𐀪 Author: Penji
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 01:21:27 GMT
════════════════════════
⌗ Tags: #twitter #branding #xs #graphic_design_services
Medium
The Rise and Fall of Twitter (X)
The late ’00s to early ’10s witnessed the birth of social media platforms. YouTube, Facebook, and Instagram are some of the most notable…
32 views
Daily Writeups
⤷ Title: HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 03:36:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access point security #CVE_2026_76721 #CVE_2026_76722 #HPE #HPE Instant ON vulnerabilities #HPE Networking #Instant On #Remote Code Execution
Daily CyberSecurity
HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical
TL;DR HPE Networking disclosed 18 HPE Instant ON vulnerabilities on September 29, 2026, in its Instant ON access points. Five are rated Critical, and the two worst score CVSS 9.8 with unauthentica…
24 views
Daily Writeups
⤷ Title: WatchGuard Patches 14 Fireware OS Vulnerabilities, Including CVSS 9.2 RCE
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 02:38:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_86131 #Firebox #Fireware OS #Fireware OS vulnerabilities #Remote Code Execution #VPN security #WatchGuard
Daily CyberSecurity
WatchGuard Patches 14 Fireware OS Vulnerabilities, Including CVSS 9.2 RCE
TL;DR WatchGuard disclosed 14 Fireware OS vulnerabilities on September 29, 2026, affecting its Firebox firewalls. The worst, CVE-2026-86131, scores CVSS 9.2 and allows remote code execution in cer…
20 views
Daily Writeups
⤷ Title: Branch Target Reuse Spectre-v2 Attack: Full Details and PoC Code Released
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 02:10:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Branch Target Reuse #CVE_2026_64507 #CVE_2026_64508 #Linux Kernel #side_channel attack #Spectre_v2 #VUSec
Daily CyberSecurity
Branch Target Reuse Spectre-v2 Attack: Full Details and PoC Code Released
TL;DR Researchers at VUSec have published full details and proof-of-concept code for Branch Target Reuse (BTR), a new Spectre-v2 attack on just-in-time (JIT) compilers. Their end-to-end exploit le…
21 views
Daily Writeups
⤷ Title: GeoServer Cloud Fixes CVSS 10 GitHub Actions Flaw That Exposed Repository Secrets
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 02:02:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #GeoServer #GeoServer Cloud #GeoServer Cloud vulnerability #GitHub Actions #pull_request_target #Supply Chain Security
Daily CyberSecurity
GeoServer Cloud Fixes CVSS 10 GitHub Actions Flaw That Exposed Repository Secrets
TL;DR GeoServer maintainers disclosed a CVSS 10 GeoServer Cloud vulnerability in a GitHub Actions workflow. It could have let an outside contributor run code on the build runner and steal reposito…
24 views
Daily Writeups
⤷ Title: nmap 心得筆記
════════════════════════
𐀪 Author: Ken Yu
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 03:14:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #scanning #hacking #networking #nmap
Medium
nmap 心得筆記
什麼是 nmap？
23 views
Daily Writeups
⤷ Title: SOC Metrics and Objectives: SLA, MTTD, MTTA, MTTR, and False Positive Rate
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 03:09:02 GMT
════════════════════════
⌗ Tags: #infosec #blue_team #cybersecurity #security_operations #tryhackme
Medium
SOC Metrics and Objectives: SLA, MTTD, MTTA, MTTR, and False Positive Rate
Introduction
30 views
Daily Writeups
⤷ Title: Tryhackme | Brooklyn Nine-Nine| Write-up | Por Kinho0woned
════════════════════════
𐀪 Author: Kinho0Woned
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 04:24:37 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #ethical_hacking #tryhackme #cybersecurity
Medium
Tryhackme | Brooklyn Nine-Nine| Write-up | Por Kinho0woned
room: https://tryhackme.com/room/brooklynninenine
38 views
Daily Writeups
⤷ Title: TeamViewer Fixes Five High-Severity Flaws in Full Client and Host
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 04:31:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_19743 #CVE_2026_92368 #CVE_2026_92370 #privilege escalation #remote access security #TeamViewer #TeamViewer vulnerabilities
Daily CyberSecurity
TeamViewer Fixes Five High-Severity Flaws in Full Client and Host
TL;DR TeamViewer disclosed five TeamViewer vulnerabilities on September 29, 2026, in its Full Client and Host for Windows, Linux, and macOS. All five are rated High, and the worst, CVE-2026-92370,…
34 views
Daily Writeups
⤷ Title: Electron Fixes Five High-Severity Sandbox and Isolation Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 04:10:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_102673 #CVE_2026_102674 #CVE_2026_102676 #desktop app security #Electron #Electron vulnerabilities #javascript #Sandbox Bypass
Daily CyberSecurity
Electron Fixes Five High-Severity Sandbox and Isolation Vulnerabilities
TL;DR Electron maintainers published five Electron vulnerabilities on September 29, 2026, all rated High, with CVSS scores from 7.4 to 8.3. Each flaw lets untrusted content escape a sandbox, an or…
27 views
Daily Writeups
⤷ Title: Reflected XSS in a Public Event Waitlist Application
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 05:48:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #xs #bug_bounty #ethical_hacking #cybersecurity
Medium
Reflected XSS in a Public Event Waitlist Application
Severity: Medium CVSS 3.1: 6.1 CWE: CWE-79 — Cross-Site Scripting Vulnerability Type: Reflected XSS
24 views
Daily Writeups
⤷ Title: Common Ports Are Not Common: Why Port Numbers Matter More Than You Think
════════════════════════
𐀪 Author: Sukhveer Singh
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 04:16:52 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_hunting #cybersecurity #bug_bounty_tips #https
Medium
Common Ports Are Not Common: Why Port Numbers Matter More Than You Think
You see port 22 open. You think SSH.
24 views
Daily Writeups
⤷ Title: I Found Out My Site Could Have Been Hacked By Someone Sharing A Link On Twitter
════════════════════════
𐀪 Author: Rishitak
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 05:53:37 GMT
════════════════════════
⌗ Tags: #security #nodejs #nextjs #hacking
Medium
I Found Out My Site Could Have Been Hacked By Someone Sharing A Link On Twitter
Here’s a sentence that should sound impossible: sharing a link to a website could let someone run code on that website’s server. Not…
20 views
Daily Writeups
⤷ Title: What is ethical hacking?
════════════════════════
𐀪 Author: Karthikanivas
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 05:50:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_hacks #hacking #ethical_hacking
Medium
What is ethical hacking?
Ethical hacking is the authorized process of testing computer systems, networks, websites, or applications to find security weaknesses and…
16 views
Daily Writeups
⤷ Title: Crazy Idea
════════════════════════
𐀪 Author: The Oracle of Mount Faber
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 05:24:41 GMT
════════════════════════
⌗ Tags: #ai #hacking
Medium
Crazy Idea
Here’s a crazy idea — what if all this AI hacking were actually just an elaborate PR scheme to encourage regulations that will create the…
19 views
Daily Writeups
⤷ Title: Bitget’s $388 Million Hack: A Technical Post-Mortem and the Road Ahead
════════════════════════
𐀪 Author: TidoEx Insights
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 04:12:25 GMT
════════════════════════
⌗ Tags: #hacking #bitget #exploit #crypto #cryptocurrency
Medium
Bitget’s $388 Million Hack: A Technical Post-Mortem and the Road Ahead
In one of the most significant security incidents in the cryptocurrency sector this year, centralized exchange Bitget suffered a massive…
20 views
Daily Writeups
⤷ Title: How to Choose the Best Cyber Security Training Institute in Hyderabad
════════════════════════
𐀪 Author: Firewall Zone
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 04:59:57 GMT
════════════════════════
⌗ Tags: #ethical_hacking #network_security #cyber_security_institute
Medium
How to Choose the Best Cyber Security Training Institute in Hyderabad
Choosing the right cybersecurity training institute is an important decision for students and IT professionals who want to develop skills…
27 views