Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 01:01:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #Command Injection #CVE_2026_24155 #CVE_2026_24228 #CVE_2026_24252 #Deserialization #NeMo Framework #nvidia
Daily CyberSecurity
NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws
NVIDIA has issued an urgent fix for its NeMo Framework, the popular open-source toolkit for building generative AI models. The update tackles an NVIDIA NeMo vulnerability set spanning three separa…
13 views
Daily Writeups
⤷ Title: Fortra BoKS Vulnerability Opens Door to Remote Command Injection
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 02:30:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BoKS #Command Injection #Core Privileged Access Manager #CVE_2026_9862 #Fortra #PAM
Daily CyberSecurity
Fortra BoKS Vulnerability Opens Door to Remote Command Injection
A critical Fortra BoKS vulnerability (CVE-2026-9862) enables remote OS command injection via the autoregistration service. Mitigate now.
15 views
Daily Writeups
⤷ Title: QNAP Patches 14 Vulnerabilities in QTS, QuTS hero, and QVP Devices
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 09:12:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_66273 #NAS #QNAP #QSA_26_10 #QTS #QuTS hero #Vulnerability
Daily CyberSecurity
QNAP Patches 14 Vulnerabilities in QTS, QuTS hero, and QVP Devices
QNAP patched 14 NAS vulnerabilities in QTS, QuTS hero, and QVP, including command injection and credential-theft flaws. Update your QNAP NAS now.
25 views
Daily Writeups
⤷ Title: Mitel Patches 12 Critical MiCollab Vulnerabilities Rated Up to CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 01:00:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #MiCollab #MISA_2026_0005 #Mitel #MiVoice Business #sql injection
Daily CyberSecurity
Mitel Patches 12 Critical MiCollab Vulnerabilities Rated Up to CVSS 10.0
Mitel patched 12 critical MiCollab vulnerabilities, several at CVSS 10.0. Unauthenticated command injection and SQL injection flaws need urgent updates.
18 views
Daily Writeups
⤷ Title: Windows CLI Basics: Command Prompt Administration and Reconnaissance
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Wed, 24 Jun 2026 02:06:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #windows_cli_basics #command_prompt #windows_administration #tryhackme
Medium
Windows CLI Basics: Command Prompt Administration and Reconnaissance
Introduction
22 views
Daily Writeups
⤷ Title: CVSS 8.7 Unauthenticated RCE Impacts Multiple TP-Link Routers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 00:29:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_11834 #TP_Link
Daily CyberSecurity
CVSS 8.7 Unauthenticated RCE Impacts Multiple TP-Link Routers
A CVSS 8.7 TP-Link router command injection flaw allows unauthenticated remote code execution. Patch CVE-2026-11834 to stop this DHCP option vulnerability.
24 views
Daily Writeups
⤷ Title: Lab 4: Blind OS Command Injection with Out-of-Band Interaction — PortSwigger Web Security Academy…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 13:22:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #portswigger_lab #cybersecurity #command_injection
Medium
Lab 4: Blind OS Command Injection with Out-of-Band Interaction — PortSwigger Web Security Academy Walkthrough (Part 4 of 5)
When there’s no file to read and no time delay to measure: proving Remote Code Execution using Burp Collaborator and DNS callbacks.
23 views
Daily Writeups
⤷ Title: [Silent Monitor] — Breaking an Internal Flask Application via SQLi, Command Injection, and KeePass…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 08:21:03 GMT
════════════════════════
⌗ Tags: #capture_the_flag #sql_injection #privilege_escalation #tryhackme #command_injection
Medium
[Silent Monitor] — Breaking an Internal Flask Application via SQLi, Command Injection, and KeePass Credential Vault Abuse
Internal Application Compromise: SQL Injection, Command Injection, and KeePass-Based Privilege Escalation in a Full Attack Chain.
27 views
Daily Writeups
⤷ Title: Kemp LoadMaster RCE Vulnerability Exploited in the Wild After Public PoC Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 16:22:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_33691 #CVE_2026_8037 #Kemp LoadMaster #Progress Software #Remote Code Execution
Daily CyberSecurity
Kemp LoadMaster RCE Vulnerability Exploited in the Wild After Public PoC Release
TL;DR Attackers began exploiting the Kemp LoadMaster RCE vulnerability, tracked as CVE-2026-8037, on June 29, 2026. That timing matched the public release of proof-of-concept exploit code. The fla…
18 views
Daily Writeups
⤷ Title: StoneFly Storage Concentrator Flaws Allow Unauthenticated Root Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 00:55:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA ICS advisory #Command Injection #CVE_2026_55721 #CVE_2026_56413 #CVE_2026_56415 #hardcoded credentials #sql injection #Stonefly #StoneFly Storage Concentrator
Daily CyberSecurity
StoneFly Storage Concentrator Flaws Allow Unauthenticated Root Access
TL;DR CISA published an advisory for five StoneFly Storage Concentrator vulnerabilities on 30 June 2026. Two rate a maximum CVSS score of 10.0. Both let an unauthenticated attacker run commands as…
12 views
Daily Writeups
⤷ Title: Critical IBM Power HMC Vulnerability Exposes Systems
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 08:29:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_12943 #IBM #Power HMC #Vulnerability
Daily CyberSecurity
Critical IBM Power HMC Vulnerability Exposes Systems
TL;DR IBM disclosed a critical CVSS 9.8 flaw, tracked as CVE-2026-12943, in its Power Hardware Management Console (HMC). This IBM Power HMC vulnerability allows unauthenticated attackers to run ar…
20 views
Daily Writeups
⤷ Title: Control-M CVE-2026-10539: Unauthenticated Remote Command Injection (CVSS 9.5)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 15:21:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BMC #Command Injection #Control_M #CVE_2026_10539 #Vulnerability
Daily CyberSecurity
Control-M CVE-2026-10539: Unauthenticated Remote Command Injection (CVSS 9.5)
TL;DR BMC disclosed a critical flaw in Control-M/Server tracked as CVE-2026-10539. The Control-M command injection bug scores 9.5 on CVSSv4. It lets an unauthenticated attacker run commands on the…
25 views
Daily Writeups
⤷ Title: Ubiquiti UniFi Security Advisory 066 Fixes 25 Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 13:29:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_50746 #CVE_2026_54402 #CVE_2026_55115 #sql injection #ssrf #Ubiquiti #UniFi #UniFi OS #UniFi Protect
Daily CyberSecurity
Ubiquiti UniFi Security Advisory 066 Fixes 25 Vulnerabilities
Ubiquiti released a UniFi security advisory, Bulletin 066. It fixes 25 flaws in UniFi products. One bug in the UniFi Connect app scores a top mark of 10.0. Several more are critical. They allow co…
14 views
Daily Writeups
⤷ Title: Linux Fundamentals Part 1: Mastering the Command Line
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 13:18:05 GMT
════════════════════════
⌗ Tags: #command_line #linux #tryhackme #infosec #cybersecurity
Medium
Linux Fundamentals Part 1: Mastering the Command Line
Introduction
15 views
Daily Writeups
⤷ Title: Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 13:28:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_54161 #Network UPS Tools #NUT #rce #ups.alarm #upsmon
Daily CyberSecurity
Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet
A remote code execution flaw affects Network UPS Tools, the widely used NUT monitoring suite. The bug, CVE-2026-54161, carries a CVSS score of 8.1. It can run commands as root on the monitoring ho…
9 views
Daily Writeups
⤷ Title: Linux Fundamentals Part 2: Remote Access and Advancing CLI Skills
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 14:01:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #tryhackme #ssh #command_line
Medium
Linux Fundamentals Part 2: Remote Access and Advancing CLI Skills
Introduction
41 views
Daily Writeups
⤷ Title: OverTheWire Bandit Levels 0–10 Walkthrough
════════════════════════
𐀪 Author: Aeman Sajjad
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 06:43:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #command_line #ethical_hacking #bandit_overthewire #linux
Medium
OverTheWire Bandit Levels 0–10 Walkthrough
Introduction
40 views
Daily Writeups
⤷ Title: My Terminal Looks Like a Crime Scene and Works Like a Cockpit
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 22:04:49 GMT
════════════════════════
⌗ Tags: #command_line #terminal #linux #hacking #programming
Medium
My Terminal Looks Like a Crime Scene and Works Like a Cockpit
If your shell still looks like a fresh Ubuntu install, we need to talk.
25 views
Daily Writeups
⤷ Title: Windows Command Line: Navigating and Managing Endpoints with the CLI
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 12:54:15 GMT
════════════════════════
⌗ Tags: #windows #infosec #command_line #sysadmin #cybersecurity
Medium
Windows Command Line: Navigating and Managing Endpoints with the CLI
Introduction
9 views
Daily Writeups
⤷ Title: Decoding the Obfuscated Layer: A Playbook Walkthrough of Command-Line Forensics
════════════════════════
𐀪 Author: Pop123
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 17:00:55 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #forensics #command_line #tutorial
Medium
Decoding the Obfuscated Layer: A Playbook Walkthrough of Command-Line Forensics
A full and detailed insight into CLI forensics, going into depth following a TryHackMe lab
16 views