Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: What Your Website Style Reveals About You
════════════════════════
𐀪 Author: Er Raj Aryan
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 02:42:06 GMT
════════════════════════
⌗ Tags: #ux #css #ui #web_development #cybersecurity
Medium
What Your Website’s Style Says About You — And How Hackers Can Use It Against You
Your site’s design speaks volumes — and hackers know it. Learn how CSS can hide malware and protect your website from attacks.
14 views
Daily Writeups
⤷ Title: CSS Injection Can Now Steal Data with Just One Line of Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Sep 2025 04:25:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #Chromium #CSS injection #cybersecurity #Data Exfiltration #hacking #PortSwigger #web security
Penetration Testing Tools
CSS Injection Can Now Steal Data with Just One Line of Code
A new technique allows attackers to steal data directly from HTML attributes using just a single line of inline CSS, without relying on external style sheets.
9 views
Daily Writeups
⤷ Title: Blurred Deception: Russian APT Targets Transnistria and NATO with High-Pressure Phishing Lures
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:37:04 +0000
════════════════════════
⌗ Tags: #Cyber Security #Credential Harvesting #CSS Blur #HTML Malware #NATO #phishing #Russian APT #social engineering #StrikeReady Labs #Transnistria
Daily CyberSecurity
Blurred Deception: Russian APT Targets Transnistria and NATO with High-Pressure Phishing Lures
A Russian APT is targeting Transnistria and NATO entities using blurred HTML attachments to harvest credentials. The 2025 campaign mimics official presidential decrees.
15 views
Daily Writeups
⤷ Title: Roundcube Alert: High-Severity SVG XSS and CSS Sanitizer Flaws Threaten Webmail Privacy
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 19 Dec 2025 00:38:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CSS Sanitizer #CVE_2025_68460 #CVE_2025_68461 #Email Security #Information Disclosure #Roundcube #SVG #webmail #XSS
Daily CyberSecurity
Roundcube Alert: High-Severity SVG XSS and CSS Sanitizer Flaws Threaten Webmail Privacy
Roundcube patches two High-severity flaws: an SVG-based XSS and a CSS sanitizer bypass. Protect your inbox—update to v1.6.12 or v1.5.12 now.
14 views
Daily Writeups
⤷ Title: PicoCTF — Scavenger Hunt | Web Exploitation | Easy
════════════════════════
𐀪 Author: kingc06bra
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 10:11:54 GMT
════════════════════════
⌗ Tags: #hacking #ctf #css #js #red_teaming
33 views
Daily Writeups
⤷ Title: Chrome 145 Patches 3 High-Severity Flaws in CSS & Codecs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 02:34:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome 145 #CSS Vulnerability #CVE_2026_2313 #google chrome #Linux #Mac #Patch Alert #security update #WebGPU #windows
Daily CyberSecurity
Chrome 145 Patches 3 High-Severity Flaws in CSS & Codecs
Google Chrome 145 patches 11 security flaws, including 3 high-severity bugs in CSS & Codecs. Update to v145.0.7632.45 now to stay safe.
8 views
Daily Writeups
⤷ Title: Critical Alert: Chrome Zero-Day (CVE-2026-2441) Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 01:47:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #CSS Vulnerability #CVE_2026_2441 #exploited in the wild #google chrome #infosec #Patch Alert #Remote Code Execution #use after free #zero_day
Daily CyberSecurity
Critical Alert: Chrome Zero-Day (CVE-2026-2441) Exploited in the Wild
Google patches critical zero-day CVE-2026-2441. Attackers are exploiting this CSS use-after-free flaw in the wild. Update to Chrome 145 immediately.
18 views
Daily Writeups
⤷ Title: The Designer in the Machine: How WordPress’s New AI Concierge is Killing Layout Frustration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 15:26:52 +0000
════════════════════════
⌗ Tags: #Technology #AI Site Editor #Automattic #Block Themes #CSS automation #Generative AI #Persistent AI Assistant #Site Editor #Tech News 2026 #web design #wordpress #WordPress Business
Daily CyberSecurity
The Designer in the Machine: How WordPress’s New AI Concierge is Killing Layout Frustration
WordPress.com launches a Persistent AI Assistant to handle CSS, font styling, and image editing. Turn natural language into a professional site design instantly.
30 views
Daily Writeups
⤷ Title: The Chrome Bug That Turns CSS Into a Weapon (And It’s Already Being Exploited)
════════════════════════
𐀪 Author: J.C. James
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 11:37:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #css #hacking #vulnerability
Medium
The Chrome Bug That Turns CSS Into a Weapon (And It’s Already Being Exploited)
Using style sheets as a hacking medium is a funny sentence when you write it out but that there is a vulnerability that is currently being…
17 views
Daily Writeups
⤷ Title: The Ruwiki Sleeper: How a Slumbering JavaScript Worm Paralyzed Wikipedia’s Global Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:22:43 +0000
════════════════════════
⌗ Tags: #Technology #administrator compromise #CSS hijacking #Cybersecurity 2026 #JavaScript worm #Meta_Wiki #ruwiki #security breach #Tech News 2026 #Wikimedia Foundation #Wikipedia
Daily CyberSecurity
The Ruwiki Sleeper: How a Slumbering JavaScript Worm Paralyzed Wikipedia’s Global Infrastructure
A dormant ruwiki script triggered a global Wikipedia lockdown. Discover how a 23-minute JavaScript worm compromised admins and forced a read-only mandate.
10 views
Daily Writeups
⤷ Title: Inside the Arsenal: Exposed Server Reveals APT28’s ‘Roundish’ Toolkit and Advanced Cyber Espionage Tactics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 04:56:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT28 #CSS Side_Channel #cyber_espionage #cybersecurity #Fancy Bear #Hunt Intelligence #malware #Roundcube Vulnerability #Roundish Toolkit #threat intelligence
Daily CyberSecurity
Inside the Arsenal: Exposed Server Reveals APT28's 'Roundish' Toolkit and Advanced Cyber Espionage Tactics
Hunt Intelligence unmasks APT28's 'Roundish' toolkit from an exposed server, revealing advanced CSS side-channel attacks and stealthy Linux implants.
46 views
Daily Writeups
⤷ Title: Reflected XSS
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 16:14:19 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #css #reflected_xss #xss_attack
Medium
Reflected XSS
Hey H@ck3r$ , Hope you are doing well….
40 views
Daily Writeups
⤷ Title: Reflected XSS Context
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 10:26:35 GMT
════════════════════════
⌗ Tags: #css #reflected_xss #xss_attack #xss_vulnerability #xs
Medium
Reflected XSS Context
XSS between HTML tags
34 views
Daily Writeups
⤷ Title: Strored Xss
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:16:16 GMT
════════════════════════
⌗ Tags: #stored_xss #css #csrf #xss_vulnerability #xss_attack
Medium
Strored Xss
Stored XSS, where the malicious script comes from the website’s database, also known as second-order or persistent XSS.
32 views
Daily Writeups
⤷ Title: CSP bypass and Dangling Markup Xss
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 00:58:15 GMT
════════════════════════
⌗ Tags: #xss_attack #css #xs #content_security_policy #cross_site_scripting
Medium
CSP bypass and Dangling Markup Xss
🧠 What is CSP?
20 views
Daily Writeups
⤷ Title: DOM Xss
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 00:57:54 GMT
════════════════════════
⌗ Tags: #xs #jquery #css #xss_attack #dom_xss
Medium
DOM Xss
What is the DOM?
37 views
Daily Writeups
⤷ Title: UNDERSTANDING BASIC SQL
════════════════════════
𐀪 Author: meimisaki
════════════════════════
ⴵ Time: Tue, 19 May 2026 00:57:03 GMT
════════════════════════
⌗ Tags: #sql_injection #css
Medium
UNDERSTANDING BASIC SQL
may 18, This is a small little writeup on sql injections queries and understanding how they process. From John Hammonds HackingHub as this…
26 views
Daily Writeups
⤷ Title: Firefox 158.0 Released: Default JPEG XL Support
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 03:59:38 +0000
════════════════════════
⌗ Tags: #Technology #css #Firefox 158.0 #JPEG_XL #Tech News #web browser
Daily CyberSecurity
Firefox 158.0 Released: Default JPEG XL Support
Mozilla Firefox 158.0 has officially launched globally. The most profound alteration in this update is the default activation of the JPEG XL image format. Previously, the browser housed the requis…
13 views
Daily Writeups
⤷ Title: How I Bypassed a Trusted URL Allowlist to Inject CSS and Trigger External Browser Requests
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 13:49:27 GMT
════════════════════════
⌗ Tags: #css_injection #ethical_hacking #cybersecurity #bug_bounty #penetration_testing
Medium
How I Bypassed a Trusted URL Allowlist to Inject CSS and Trigger External Browser Requests
An in-depth bug bounty case study on client-side CSS injection, weak URL validation, and how a seemingly harmless image parameter became an…
12 views
Daily Writeups
⤷ Title: # 20 Linux Commands That Turn Your Terminal Into a Cybersecurity Powerhouse
════════════════════════
𐀪 Author: MR.Kanishk Meghwal
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 09:03:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #css #ethical_hacking #programmming
Medium
# 20 Linux Commands That Turn Your Terminal Into a Cybersecurity Powerhouse
You don’t need to be a hacker to use Linux. You just need to know where to start.
32 views