Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: 5.7 Million Users at Risk: Multiple 9.8 CVSS Breakthroughs Enable Remote Code Execution in vm2 Sandbox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:33:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_26956 #CVSS 9.8 #infosec #JavaScript Security #Node.js #Patch Alert #rce #Sandbox Escape #V8 Engine #vm2 #WebAssembly
Daily CyberSecurity
5.7 Million Users at Risk: Multiple 9.8 CVSS Breakthroughs Enable Remote Code Execution in vm2 Sandbox
Critical 9.8 CVSS flaws in vm2 affect 5.7M monthly users, allowing RCE via WASM and Promise bypasses. Upgrade to vm2 v3.11.0 immediately to secure your host.
23 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (May 4 – May 10, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:50:50 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #CVSS 10.0 #cyber security 2026 #Gotenberg API #Ivanti EPMM #Linux Dirty Frag #LiteLLM #Palo Alto PAN_OS #threat intelligence #vm2 Sandbox Escape #Vulnerability Digest #Zero_Day Exploits
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (May 4 – May 10, 2026)
Weekly Security Digest: 1,928 new vulnerabilities hit the wire. From Palo Alto firewalls to LiteLLM AI gateways, here is how to prioritize your defense.
11 views
Daily Writeups
⤷ Title: Exploited in the Wild: Maximum CVSS 10 SD-WAN Flaw (CVE-2026-20182) Grants Admin Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 00:07:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Espionage #Cisco Catalyst #Cisco Talos #CVE_2026_20182 #CVSS 10 #Exploit in the Wild #infosec #NETCONF #Patch Alert #SD_WAN #UAT_8616 #XenShell #zero_day
Daily CyberSecurity
Exploited in the Wild: Maximum CVSS 10 SD-WAN Flaw (CVE-2026-20182) Grants Admin Control
Cisco Catalyst SD-WAN CVE-2026-20182 (CVSS 10) exploited in the wild. Attackers bypassing auth to seize admin control. Upgrade your network fabric now!
23 views
Daily Writeups
⤷ Title: CVSS 10 Alert: Quest KACE SMA Auth Bypass Exploited to Hijack Managed Endpoints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 16 May 2026 01:13:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2025_32975 #CVSS 10 #Cyber Security #Endpoint Management #Hunt.io #infosec #K1000 #MSP Breach #Patch Alert #Quest KACE SMA
Daily CyberSecurity
CVSS 10 Alert: Quest KACE SMA Auth Bypass Exploited to Hijack Managed Endpoints
Quest KACE SMA CVE-2025-32975 (CVSS 10) exploited in the wild. Attackers bypass auth to seize admin control. Patch to version 14.1.101 or 14.0.341 now!
27 views
Daily Writeups
⤷ Title: CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:49:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Secure Workload #Cisco Security Advisory #CVE_2026_20223 #CVSS 10 #Cyber Security #infosec #Patch Alert #privilege escalation #REST API Exploit #Tenant Cross_Bypass #Zero_Trust Microsegmentation
Daily CyberSecurity
CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
Cisco drops an urgent advisory for CVE-2026-20223 (CVSS 10.0) in Secure Workload. Unauthenticated remote attackers can steal full Site Admin privileges.
14 views
Daily Writeups
⤷ Title: Windows DNS Client RCE: 9.8 CVSS & Public PoC Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:17:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS 9.8 #heap overflow #Public PoC Exploit #Remote Code Execution #Windows DNS Client
Daily CyberSecurity
Windows DNS Client RCE: 9.8 CVSS & Public PoC Disclosed
A critical Windows DNS Client RCE vulnerability (CVE-2026-41096) with a 9.8 CVSS has public PoC exploit code. Learn how to detect and patch it.
23 views
Daily Writeups
⤷ Title: Samba Fixes Multiple Flaws with Maximum 10.0 CVSS Scores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 01:40:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4408 #CVE_2026_4480 #CVSS 10.0 #Patch Update #Remote Code Execution #samba #security advisory
Daily CyberSecurity
Samba Fixes Multiple Flaws with Maximum 10.0 CVSS Scores
The Samba Team dropped fixes for critical Samba vulnerabilities. Read about the remote code execution flaws carrying perfect 10.0 CVSS scores.
17 views
Daily Writeups
⤷ Title: Architectural Vulnerabilities in Notepad++: Arbitrary Code Execution Risks Unmasked
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_48778 commandLineInterpreter #CVSS 7.8 flaw remediation #malicious AppData config overwrites #Notepad++ 8.9.6.1 security patch #Notepad++ config.xml code execution #Open Containing Folder in cmd exploit #OS command injection CWE_78 #shortcuts.xml parsing bug CVE_2026_48800 #text editor arbitrary code execution #Windows text editor vulnerability
Information Security News
Notepad++ Config.xml Code Execution Flaw Patched: Update Now
Notepad++ patches a critical config.xml code execution flaw (CVE-2026-48778) alongside two other security bugs. Upgrade to version 8.9.6.1 immediately.
10 views
Daily Writeups
⤷ Title: Liquidjs CVSS 10 RCE Threatens 7.3M Monthly Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 02:30:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVSS 10 #Liquidjs #Node.js #rce #security patch
Daily CyberSecurity
Liquidjs CVSS 10 RCE Threatens 7.3M Monthly Users
A maximum-severity Liquidjs remote code execution flaw impacts millions. Learn about this template engine vulnerability and update now.
20 views
Daily Writeups
⤷ Title: Critical Wazuh CVSS 10 Vulnerability Details and Proof-of-Concept Released
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 01:48:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVSS 10 #OpenSearch #vulnerability disclosure #wazuh
Daily CyberSecurity
Critical Wazuh CVSS 10 Vulnerability Details and Proof-of-Concept Released
Public details and PoC exploit code expose a critical Wazuh CVSS 10 vulnerability allowing attackers to smuggle OpenSearch bulk operations.
22 views
Daily Writeups
⤷ Title: VAPT Severity Levels: Critical, High, Medium & Low
════════════════════════
𐀪 Author: Shivani Patel
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 00:46:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #vulnerability_assessment #cvss_risk #severity #vapt
Medium
VAPT Severity Levels: Critical, High, Medium & Low
A simple guide to how security teams rank and fix vulnerabilities using CVSS
23 views
Daily Writeups
⤷ Title: How Security Teams Prioritize Vulnerabilities Using CVSS
════════════════════════
𐀪 Author: Stay Benign Secure
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 16:59:37 GMT
════════════════════════
⌗ Tags: #penetration_testing #cvss_calculator #ethical_hacking #vulnerability_assessment #cybersecurity
Medium
Understanding VAPT Severity Levels
Find out how security teams use CVSS scores and VAPT severity levels to prioritise vulnerabilities before attackers exploit them.
24 views
Daily Writeups
⤷ Title: Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 17:13:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Adobe Security #APSB26_68 #Arbitrary Code Execution #ColdFusion vulnerability #CVE_2026_48276 #CVSS 10 #rce
Daily CyberSecurity
Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution
TL;DR Adobe shipped fixes for 11 Adobe ColdFusion vulnerabilities on 30 June 2026. Six earn a perfect CVSS score of 10.0 and allow arbitrary code execution. Adobe rates the update priority 1, its …
13 views
Daily Writeups
⤷ Title: Veeam ONE CVE-2026-64633 Enables Unauthenticated Remote Code Execution at CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 15:35:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_64633 #CVSS 10 #patch #rce #Remote Code Execution #Veeam #Veeam ONE #Vulnerability
Daily CyberSecurity
Veeam ONE CVE-2026-64633 Enables Unauthenticated Remote Code Execution at CVSS 10.0
TL;DR Veeam patched a maximum-severity Veeam ONE vulnerability. CVE-2026-64633 allows remote unauthenticated code execution and scores a perfect CVSS 10.0. Admins should update to build 13.1.0.703…
11 views
Daily Writeups
⤷ Title: CVE-2026-71319: Nuxt DevTools Flaw With 7.3 Million Monthly Downloads Allows Arbitrary Command Execution, CVSS 9.6
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 13:18:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Command Execution #CVE_2026_71319 #CVSS 9.6 #Nuxt #Nuxt DevTools #RPC #Vue.js
Daily CyberSecurity
CVE-2026-71319: Nuxt DevTools Flaw With 7.3 Million Monthly Downloads Allows Arbitrary Command Execution, CVSS 9.6
TL;DR A critical Nuxt DevTools vulnerability lets an attacker run arbitrary commands on a developer’s machine. Tracked as CVE-2026-71319, it scores 9.6 on CVSS. The Nuxt package sees more th…
33 views
Daily Writeups
⤷ Title: CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 14:38:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_63455 #CVE_2026_63456 #CVSS 9.8 #EdgeConnect #HPE Aruba #SD_WAN Orchestrator
Daily CyberSecurity
CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8
TL;DR HPE Aruba Networking patched two critical flaws in its SD-WAN EdgeConnect Orchestrator. Both carry a CVSS score of 9.8. They let an unauthenticated remote attacker bypass web authentication …
37 views
Daily Writeups
⤷ Title: CVE-2026-85706: GitLab Vulnerability Reach CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 00:14:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_85706 #CVE_2026_87719 #CVE_2026_88765 #CVSS 10 #gitlab #GitLab vulnerabilities #Vulnerability
Daily CyberSecurity
CVE-2026-85706: GitLab Vulnerability Reach CVSS 10.0
GitLab released security updates addressing eighteen security flaws on September 10, 2026. The vendor resolved several severe GitLab vulnerabilities across Community Edition and Enterprise Edition…
19 views
Daily Writeups
⤷ Title: CVE-2026-16338: 9.9 CVSS IBM DataStage Arbitrary File Write Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 03:27:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Pak for Data #CVE_2026_16338 #CVE_2026_82100 #CVSS 9.9 #IBM #IBM DataStage #Vulnerability
Daily CyberSecurity
CVE-2026-16338: 9.9 CVSS IBM DataStage Arbitrary File Write Flaw
IBM released a major security bulletin, resolving twenty-five security flaws. These critical IBM DataStage vulnerabilities allow authenticated attackers to write files and execute arbitrary code. …
20 views
Daily Writeups
⤷ Title: CVE-2026-80462 CVSS 10.0: Progress Software Chef Automate Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 01:41:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chef Automate #CVE_2026_80462 #CVSS 10 #DevOps Security #Progress Software #Vulnerability
Daily CyberSecurity
CVE-2026-80462 CVSS 10.0: Progress Software Chef Automate Vulnerability
Progress Software published a critical security bulletin, disclosing a maximum-severity flaw. The newly identified Chef Automate vulnerability allows unauthenticated attackers to gain elevated pri…
30 views
Daily Writeups
⤷ Title: Signal RingRTC Flaw Can Keep Your Mic Live
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 12:59:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_113380 #CVSS 4.0 #Messenger Security #privacy #RingRTC #Signal #vulnerability #WebRTC
Information Security News
Signal RingRTC Flaw Can Keep Your Mic Live
When Hang Up Does Not Hang Up In Signal, the hang-up button could fail even when a user tried to end a call. A critical bug in the RingRTC library let another call participant block the disconnect…
15 views