Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: LiteSpeed Cache Flaw (CVE-2025-12450): 7 Million WordPress Sites Exposed to XSS Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 10:57:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cybersecurity #LiteSpeed #LSCWP #Plugin Vulnerability #Web Security #wordpress #XSS
Daily CyberSecurity
LiteSpeed Cache Flaw (CVE-2025-12450): 7 Million WordPress Sites Exposed to XSS Attack
LiteSpeed Cache for WordPress (LSCWP) versions 7.5.0.1 are vulnerable to a Reflected XSS flaw, exposing 7M sites to account takeover. Update to 7.6 now.
37 views
Daily Writeups
⤷ Title: High-Severity Flaw Exposes LiteSpeed Web Servers to OS Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 12:31:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_31386 #CVSS 8.6 #cybersecurity #infosec #LiteSpeed Web Server #OpenLiteSpeed #os command injection #privilege escalation #Server Security #WebAdmin
Daily CyberSecurity
High-Severity Flaw Exposes LiteSpeed Web Servers to OS Command Injection
A significant security warning has been issued for administrators utilizing LiteSpeed Web Server, a popular high-performance replacement for Apache. According to a vulnerability note from JPCERT/C…
15 views
Daily Writeups
⤷ Title: CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:46:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Execution Safety #cPanel Vulnerability #CVE_2026_48172 #Cyber Security #infosec #LiteSpeed Plugin #privilege escalation #redisAble Exploit #Root Server Access #Web Hosting Security #WHM Patch
Daily CyberSecurity
CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
Urgent: Active attacks target the LiteSpeed User-End cPanel Plugin (CVE-2026-48172). Learn how to detect the exploit and secure your server root today.
15 views
Daily Writeups
⤷ Title: Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:37:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #cpanel_jsonapi_func=redisAble log grep #CVE_2026_48172 root access #David Strydom security researcher #LiteSpeed cPanel plugin exploit #LiteSpeed WHM Plugin 5.3.1.0 update #lsws.redisAble logic error #remove LiteSpeed cPanel plugin #shared hosting privilege escalation #shared hosting sandbox escape #WebPros ecosystem defense
Information Security News
Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
Perimeter Compromise and Systemic Risk LiteSpeed recently resolved a critical privilege escalation vulnerability within its user-facing cPanel plugin. This severe security defect is tracked global…
12 views
Daily Writeups
⤷ Title: LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 00:00:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CageFS #CloudLinux #CPanel #CVE_2026_54420 #LiteSpeed #privilege escalation #Shared Hosting
Daily CyberSecurity
LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
CVE-2026-54420, a LiteSpeed cPanel privilege escalation flaw, is exploited in the wild to gain root on shared hosting. Patch to plugin v2.4.8 now.
12 views
Daily Writeups
⤷ Title: 2,060 New CVEs and 4 Actively Exploited Flaws (June 15-21, 2026)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 03:13:03 +0000
════════════════════════
⌗ Tags: #Weekly Recap #Actively Exploited #CISA KEV #CVE #LiteSpeed #Oracle #Splunk #Vulnerability Roundup #Weekly CVE Report
Daily CyberSecurity
2,060 New CVEs and 4 Actively Exploited Flaws (June 15-21, 2026)
This weekly CVE report covers 2,060 new vulnerabilities from June 15-21, including 358 critical flaws and 4 actively exploited CVEs now in CISA KEV.
21 views
Daily Writeups
⤷ Title: Critical Privilege Escalation Discovered in LiteSpeed Enterprise
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:24:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cyber Security #LiteSpeed #privilege escalation #Web Hosting
Information Security News
Critical Privilege Escalation Discovered in LiteSpeed Enterprise
The boundary separating an individual client account from the entire server infrastructure within LiteSpeed Web Server Enterprise has proven alarmingly fragile. Recently, cPanel issued a stark war…
14 views
Daily Writeups
⤷ Title: LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:44:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_113499 #CVE_2026_113500 #CVE_2026_113501 #LiteSpeed Cache #Stored XSS #WordPress Plugin #wpscan
Daily CyberSecurity
LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
TL;DR LiteSpeed Cache 7.9.2, released October 20, 2026, fixes three LiteSpeed Cache vulnerabilities disclosed by WPScan on October 23. Two flaws let unauthenticated commenters plant stored XSS tha…
11 views