Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Aviation Industry Alert: 50,000+ Azure AD Records Exposed via Misconfigured API
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:33:38 +0000
════════════════════════
⌗ Tags: #Data Leak #API vulnerability #aviation #Azure AD #CloudSEK #cybersecurity #Data Breach #Data Exposure #Microsoft Graph #misconfiguration #PII
Daily CyberSecurity
Aviation Industry Alert: 50,000+ Azure AD Records Exposed via Misconfigured API
Over 50,000 Microsoft Azure AD user records from the aviation industry were exposed due to a misconfigured, unauthenticated API, revealing sensitive data and posing major risks.
16 views
Daily Writeups
⤷ Title: CISA Alert: Critical Flaws in Consilium Safety CS5000 Fire Panel Could Enable Remote Takeover, No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:30:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Consilium Safety #Critical Infrastructure #CS5000 #cybersecurity #default account #fire panel #hardcoded credentials #ICS #industrial control systems #Vulnerability
Daily CyberSecurity
CISA Alert: Critical Flaws in Consilium Safety CS5000 Fire Panel Could Enable Remote Takeover, No Patch
CISA warns of critical flaws (CVE-2025-41438, CVE-2025-46352) in Consilium Safety CS5000 Fire Panels, allowing remote access & disruption. Vendor won't patch.
12 views
Daily Writeups
⤷ Title: Critical Flaws in Veritas DLO Expose Systems to Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:26:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #apache Tomcat #CISA KEV #cybersecurity #data backup #endpoint protection #rce #Remote Code Execution #Veritas DLO
Daily CyberSecurity
Critical Flaws in Veritas DLO Expose Systems to Remote Code Execution
Veritas DLO has critical vulnerabilities (CVE-2024-38475, CVE-2025-24813) in bundled Apache components, leading to RCE. Upgrade immediately to prevent exploitation.
12 views
Daily Writeups
⤷ Title: Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:22:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_48045 #CVE_2025_48046 #CVE_2025_48047 #cybersecurity #default credentials #Enterprise Security #MICI NetFax #Rapid7 #rce #Remote Code Execution #unpatched #Vulnerability
Daily CyberSecurity
Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix
Rapid7 found critical RCE flaws in MICI NetFax (versions < 3.0.1.0) via default credentials & command injection. Vendor refuses to patch, advising no internet exposure.
12 views
Daily Writeups
⤷ Title: PyPI Supply Chain Attack Steals Solana Private Keys via Covert Monkey-Patching
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:19:33 +0000
════════════════════════
⌗ Tags: #Malware #Blockchain #cryptocurrency #cybersecurity #Infostealer #malware #open_source #private keys #PyPI #Python #Socket Security #Solana #supply chain attack
Daily CyberSecurity
PyPI Supply Chain Attack Steals Solana Private Keys via Covert Monkey-Patching
A sophisticated PyPI supply chain attack, "cappership," steals Solana private keys by monkey-patching, leveraging transitive dependencies and blockchain exfiltration.
21 views
Daily Writeups
⤷ Title: NetSPI Details Multiple Local Privilege Escalation Vulnerabilities in SonicWall NetExtender
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:13:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_23009 #CVE_2025_23010 #cybersecurity #LPE #NetExtender #NetSPI #privilege escalation #SonicWall #vpn #Vulnerability #windows
Daily CyberSecurity
NetSPI Details Multiple Local Privilege Escalation Vulnerabilities in SonicWall NetExtender
High-risk LPE vulnerabilities in SonicWall NetExtender for Windows (CVE-2025-23009, CVE-2025-23010) allow SYSTEM access or DoS. Patch immediately to version 10.3.2.
16 views
Daily Writeups
⤷ Title: Path Traversal at Scale: Study Uncovers 1,756 Vulnerable GitHub Projects and LLM Contamination
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:02:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ChatGPT #code reuse #Copilot #CWE_22 #Cybersecurity Research #github #LLM #Node.js #open_source #Path Traversal #security vulnerability #Supply Chain Security
Daily CyberSecurity
Path Traversal at Scale: Study Uncovers 1,756 Vulnerable GitHub Projects and LLM Contamination
A study reveals widespread path traversal (CWE-22) in open-source projects, exacerbated by LLMs generating insecure code. Automated detection and patching are critical.
12 views
Daily Writeups
⤷ Title: Reconocimiento Web con Katana: Guía Completa para Empezar en Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:02:28 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #bug_bounty #penetration_testing #ethical_hacking
Medium
Reconocimiento Web con Katana: Guía Completa para Empezar en Bug Bounty
Aprende a usar Katana para descubrir rutas y endpoints ocultos. Guía ideal para tus inicios en Bug Bounty.
14 views
Daily Writeups
⤷ Title: What is Security Operations Center (SOC)
════════════════════════
𐀪 Author: Abhinav Pathak
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 01:47:32 GMT
════════════════════════
⌗ Tags: #security_operation_center #privacy #security #cybersecurity #hacking
Medium
What is Security Operations Center (SOC)
The first thing that immediately comes to mind when considering protection is the protection of our money, our valuable assets, and stuff…
15 views
Daily Writeups
⤷ Title: Attacking Common Applications — Skills Assessment III
════════════════════════
𐀪 Author: Ibrahima Ndong
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 01:05:18 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #htb #hackthebox #penetration_testing
Medium
Attacking Common Applications — Skills Assessment III
What is the hardcoded password for the database connection in the MultimasterAPI.dll file?
12 views
Daily Writeups
⤷ Title: Can a Penetration Test Prevent Ransomware? What Most Companies Miss
════════════════════════
𐀪 Author: Jason
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 21:35:48 GMT
════════════════════════
⌗ Tags: #it_security #active_directory #cybersecurity #penetration_testing #infosec
Medium
Can a Penetration Test Prevent Ransomware? What Most Companies Miss
TL;DR:
13 views
Daily Writeups
⤷ Title: Inside the Lab: My Hands-On Guide to Building a Malware Analysis Environment
════════════════════════
𐀪 Author: Ebenezer Hans Mensah
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 01:31:33 GMT
════════════════════════
⌗ Tags: #flarevm #cybersecurity #malware_analysis #digital_forensics #remnux
Medium
Inside the Lab: My Hands-On Guide to Building a Malware Analysis Environment
Setting up a malware analysis lab is one of the best ways to learn how malicious software really works without putting your main system at…
17 views
Daily Writeups
⤷ Title: Cybersecurity Lexicon
════════════════════════
𐀪 Author: Dr. Prashant Sawant
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 01:04:24 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #artificial_intelligence #cybersecurity #information_technology
Medium
Cybersecurity Lexicon
A
16 views
Daily Writeups
⤷ Title: Satellite & Spaceborne Infrastructure Cybersecurity: Securing the Final Frontier
════════════════════════
𐀪 Author: A-STAR7_DOCTOR
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:27:56 GMT
════════════════════════
⌗ Tags: #programming #business #data_science #cybersecurity #technology
Medium
Satellite & Spaceborne Infrastructure Cybersecurity: Securing the Final Frontier
By Aditiya Widodo Putra, Cybersecurity & Blockchain Consultant
19 views
Daily Writeups
⤷ Title: TryHackMe- Hydra walk through
════════════════════════
𐀪 Author: Kumari Amita Kishore
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:26:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #hydra #penetration_testing #ethical_hacking #tryhackme
Medium
TryHackMe- Hydra walk through
Learn how to crack login credentials using Hydra in a hands-on lab through TryHackMe.
19 views
Daily Writeups
⤷ Title: Red Teaming in the Modern Enterprise: Cybersecurity Strategies for Banking, Healthcare, and Retail
════════════════════════
𐀪 Author: John The CEO, Cloud And Social Thought Leader
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:12:27 GMT
════════════════════════
⌗ Tags: #cybersecurity_awareness #cybersecurity #red_team
Medium
Red Teaming in the Modern Enterprise: Cybersecurity Strategies for Banking, Healthcare, and Retail
ing their defenses to be strong enough to withstand evolving threats.
29 views
Daily Writeups
⤷ Title: How I Brute-Forced My Way Through a Broken Login Gate
════════════════════════
𐀪 Author: Muthu
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:32:28 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #bug_bounty_writeup #brute_force_attack #rate_limit_bypass #bug_bounty_tips
Medium
How I Brute-Forced My Way Through a Broken Login Gate
A Lazy Evening… With a Side of Brute-Force
36 views
Daily Writeups
⤷ Title: MediaTek’s June 2025 Security Bulletin: High-Severity Flaw & Multiple Medium Risks Uncovered
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 03:42:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bluetooth #Chipset #CVE #cybersecurity #dos #EoP #IMS #MediaTek #MT7902 #MT7921 #MT7922 #MT7925 #MT7927 #patch #rce #Security Bulletin #Vulnerability #WLAN
Daily CyberSecurity
MediaTek's June 2025 Security Bulletin: High-Severity Flaw & Multiple Medium Risks Uncovered
MediaTek's June 2025 Security Bulletin reveals a high-severity Bluetooth flaw & multiple medium risks across chipsets, affecting WLAN & IMS. Update your devices!
26 views
Daily Writeups
⤷ Title: Critical RCE Flaw Patched in Roundcube Webmail: Update Immediately!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 03:06:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cybersecurity #Deserialization #Email #firs0v #IMAP #patch #php #rce #Remote Code Execution #Roundcube #security #Vulnerability #webmail
Daily CyberSecurity
Critical RCE Flaw Patched in Roundcube Webmail: Update Immediately!
Roundcube Webmail has patched a critical RCE vulnerability (CVE-2025-49113) allowing remote code execution post-authentication. Update to 1.6.2 or 1.5.10 immediately!
23 views
Daily Writeups
⤷ Title: Meta’s Q1 2025 Report: Dismantling Covert Influence Campaigns from China, Iran, and Romania
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 02:57:53 +0000
════════════════════════
⌗ Tags: #Cyber Security #AI_generated #china #CIB #Covert Influence #Disinformation #Fake Accounts #Iran #Meta #Q1 2025 #Romania #Social Media #Threat Report
Daily CyberSecurity
Meta's Q1 2025 Report: Dismantling Covert Influence Campaigns from China, Iran, and Romania
Meta's Q1 2025 report details the takedown of covert influence campaigns from China, Iran, and Romania, utilizing AI and fake accounts to manipulate public discourse.
31 views