Daily Writeups
@Daily_Writeups
4.08K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.08K subscribers
Daily Writeups
⤷ Title: Bypassing the Guardrails: New “DirtyDecrypt” Linux Flaw Overwrites Root Files in Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:02:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #CONFIG_RXGK Kernel Parameter #Container Escape Exploit #Copy_on_Write Bypass #CVE_2026_31635 #Fedora Arch Linux Vulnerable #Linux DirtyDecrypt Vulnerability #Linux Kernel Sasha Levin #RxGK Page Cache Corruption #rxgk_decrypt_skb Local Privilege Escalation #Zellic Threat Research
Penetration Testing Tools
Bypassing the Guardrails: New "DirtyDecrypt" Linux Flaw Overwrites Root Files in Memory
The Linux ecosystem has been destabilized by successive operational waves for several weeks; scarcely had the industry turbulence
21 views
Daily Writeups
⤷ Title: Host-Root Escape Vulnerability Uncovered in Kata Containers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 01:00:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Security #container escape #CVE_2026_47243 #Kata Containers #PoC Exploit #virtualization #vulnerability disclosure
Daily CyberSecurity
Host-Root Escape Vulnerability Uncovered in Kata Containers
Explore the critical Kata Containers container escape vulnerability (CVE-2026-47243). Technical details and PoC exploit code are now fully public.
26 views
Daily Writeups
⤷ Title: KubeVirt Privilege Escalation Flaw Exposes Kubernetes Clusters to Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:15:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Container Runtime Hijacking #CVE_2026_7374 #Kubernetes Security #KubeVirt #OpenShift Flaw #privilege escalation #Symlink Validation
Daily CyberSecurity
KubeVirt Privilege Escalation Flaw Exposes Kubernetes Clusters to Takeover
Discover how the critical KubeVirt privilege escalation flaw (CVE-2026-7374) allows container runtime hijacking and creates a cluster takeover risk.
18 views
Daily Writeups
⤷ Title: Apple Container Machines Bring Linux to Mac
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 02:31:45 +0000
════════════════════════
⌗ Tags: #Apple #Apple Container #Apple Silicon #Container Machines #developer tools #Linux on Mac #macOS 26 #WWDC 2026
Information Security News
Apple Container Machines Bring Linux to Mac
Apple's WWDC reveal of Container Machines brings persistent Linux VMs to Mac, though memory handling and graphics support need work.
13 views
Daily Writeups
⤷ Title: Containerd Critical Vulnerabilities Expose Host Servers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 24 Jun 2026 01:20:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #containerd #CVE_2026_50195 #CVE_2026_53488 #CVE_2026_53492
Daily CyberSecurity
Containerd Critical Vulnerabilities Expose Host Servers
Three containerd critical vulnerabilities, including CVE-2026-53492, allow attackers to execute host commands and poison image caches. Patch immediately.
21 views
Daily Writeups
⤷ Title: Thousands Affected by NVIDIA 9.8 Auth Bypass
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 10:23:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AIStore #Container Toolkit #CVE_2026_24270 #nvidia #Triton Inference Server
Daily CyberSecurity
Thousands Affected by NVIDIA 9.8 Auth Bypass
TL;DR NVIDIA patched several severe vulnerabilities across its AI platforms. The most critical flaw is a 9.8 CVSS authentication bypass in AIStore. Administrators must apply these NVIDIA security …
28 views
Daily Writeups
⤷ Title: Six Critical Incus Vulnerabilities Patched in v7.2.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 02:10:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #CVE_2026_48749 #CVE_2026_48750 #CVE_2026_48751 #CVE_2026_48752 #CVE_2026_48755 #CVE_2026_48769 #Incus
Daily CyberSecurity
Six Critical Incus Vulnerabilities Patched in v7.2.0
TL;DR The Incus team patched six critical flaws in version 7.2.0. Each one scores 9.9 on the CVSS scale. Most let a malicious image or input write files as root, which can lead to command executio…
18 views
Daily Writeups
⤷ Title: Public Exploit for GhostLock (CVE-2026-43499) Enables Linux Privilege Escalation and Container Escape
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 02:14:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container escape #CVE_2026_43499 #GhostLock #kernelCTF #Linux Kernel #privilege escalation #rtmutex #use after free
Daily CyberSecurity
Public Exploit for GhostLock (CVE-2026-43499) Enables Linux Privilege Escalation and Container Escape
TL;DR Researchers have published full details and proof-of-concept code for GhostLock. This Linux kernel bug, tracked as CVE-2026-43499, hid in the code for over 15 years. It lets an unprivileged …
23 views
Daily Writeups
⤷ Title: Neden Her Kurumun Bir Golden Image Stratejisine İhtiyacı Var?
════════════════════════
𐀪 Author: Iremnur Arslan
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 10:16:01 GMT
════════════════════════
⌗ Tags: #security #container_security #base_image #containers #application_security
12 views
Daily Writeups
⤷ Title: CVE-2026-64564: SCTP Flaw Enables Container Escape
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 01:54:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container escape #CVE_2026_64564 #Linux Kernel #privilege escalation #SCTPhantom #use after free
Daily CyberSecurity
CVE-2026-64564: SCTP Flaw Enables Container Escape
TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers demonstrated privilege escalation and container-to-host escape on five dist…
14 views
Daily Writeups
⤷ Title: CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 01:01:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #CVE_2026_44945 #Impersonation #Kubernetes #privilege escalation #Rancher #SUSE
Daily CyberSecurity
CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1
TL;DR A critical flaw lets a low-privileged Rancher user seize full control of the platform. Tracked as CVE-2026-44945, it scores 9.1 on CVSS. This Rancher privilege escalation stems from a cross-…
23 views
Daily Writeups
⤷ Title: Docker CopyEscape Flaw (CVE-2026-17106) Enables Host File Overwrite and Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 14:22:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #Code Execution #container security #CopyEscape #CVE_2026_17106 #docker #Docker Sandboxes
Daily CyberSecurity
Docker CopyEscape Flaw (CVE-2026-17106) Enables Host File Overwrite and Code Execution
TL;DR: Imperva’s Red Team disclosed a Docker CopyEscape vulnerability that turns the ordinary docker cp command into a host file-write primitive. Tracked as CVE-2026-17106, the flaw carries …
20 views
Daily Writeups
⤷ Title: Cloudflare Resolves Cross-Tenant Data Exposure Flaw
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 12:19:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cloudflare #Container Security #cybersecurity #data breach
Information Security News
Cloudflare Resolves Cross-Tenant Data Exposure Flaw
A terminated container is theoretically engineered to vanish entirely, alongside all its ephemeral data. However, within Cloudflare’s sprawling infrastructure, fragments of this sensitive in…
15 views
Daily Writeups
⤷ Title: Linux Container Escape Flaw Details and PoC Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 13:03:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AF_UNIX #container escape #CVE_2026_80521 #cybersecurity #Linux Kernel #privilege escalation
Daily CyberSecurity
Linux Container Escape Flaw Details and PoC Disclosed
TL;DR Security researchers disclosed a critical Linux container escape flaw affecting the core operating system kernel. The vulnerability allows an unprivileged attacker to break out of isolated e…
18 views
Daily Writeups
⤷ Title: Critical LXD Vulnerabilities Let Container Users Write Files as Root on the Host
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 02:09:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #btrfs #Canonical #container security #CVE_2026_85526 #CVE_2026_87799 #LXD #LXD vulnerabilities #Path Traversal
Daily CyberSecurity
Critical LXD Vulnerabilities Let Container Users Write Files as Root on the Host
TL;DR Canonical has patched three critical LXD vulnerabilities rated CVSS 9.6 to 9.9. Each one lets a low-privileged user or a rogue migration source write or delete files as root on the host. Fix…
15 views
Daily Writeups
⤷ Title: Podman Flaw CVE-2026-94603 Lets Container Images Disable Sandboxing
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 01:53:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #CVE_2026_94603 #Linux #OCI images #Podman #Podman vulnerability #Sandbox Bypass
Daily CyberSecurity
Podman Flaw CVE-2026-94603 Lets Container Images Disable Sandboxing
TL;DR A Podman vulnerability, CVE-2026-94603, rated CVSS 10.0, lets a container image switch off nearly all sandboxing when started with podman run. It even overrides restrictions the user asked f…
27 views
Daily Writeups
⤷ Title: Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 00:45:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container escape #CVE_2026_89754 #CVE_2026_98256 #CVE_2026_98260 #Infinity Core #Linux Kernel #privilege escalation #proof_of_concept
Daily CyberSecurity
Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape
TL;DR Researcher Hyunwoo Kim has published full details and proof-of-concept exploits for six Linux kernel vulnerabilities he calls “Infinity Core.” Five of them lead to local privileg…
33 views
Daily Writeups
⤷ Title: Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 10:44:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bind Mount Bypass #container security #CVE_2026_44849 #CVE_2026_44850 #docker #Portainer #privilege escalation
Daily CyberSecurity
Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts
TL;DR Portainer has fixed two critical Portainer vulnerabilities, each rated CVSS 9.4, that let standard users mount host files into containers. One extends a bind mount bypass that survived two e…
9 views
Daily Writeups
⤷ Title: Linux Kernel CVE-2026-43501 (CVSS 9.8) Exploit and Full Details Released for IPv6 RPL Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:00:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container escape #CVE_2026_43501 #IPv6 #kernelCTF #Linux Kernel #proof_of_concept #RPL Source Routing
Daily CyberSecurity
Linux Kernel CVE-2026-43501 (CVSS 9.8) Exploit and Full Details Released for IPv6 RPL Flaw
TL;DR Full technical details and a working exploit are now public for CVE-2026-43501, a Linux kernel IPv6 vulnerability rated CVSS 9.8 by the kernel’s CVE team. The out-of-bounds write sits …
18 views
Daily Writeups
⤷ Title: Exploit and Full Details Released for 20-Year-Old Linux Kernel teql Flaw CVE-2026-23074
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 09:38:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Container Escape #CVE_2026_23074 #kernelCTF #Linux Kernel #privilege escalation #Proof of Concept #teql
Information Security News
Exploit and Full Details Released for 20-Year-Old Linux Kernel teql Flaw CVE-2026-23074
TL;DR A full write-up and exploit are now public for CVE-2026-23074, a Linux kernel privilege escalation flaw in the teql traffic-control scheduler. The use-after-free dates back to Linux 2.6.12, …
14 views