Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: CVSS 10 RCE in Wing FTP Server (CVE-2025-47812) Allows Full Server Takeover, PoC Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 02 Jul 2025 02:56:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_47812 #cybersecurity #File Transfer #FTP Server #Lua Injection #Null Byte #rce #Remote Code Execution #unauthenticated #Vulnerability #Wing FTP Server
Daily CyberSecurity
CVSS 10 RCE in Wing FTP Server (CVE-2025-47812) Allows Full Server Takeover, PoC Releases
A critical RCE flaw (CVE-2025-47812, CVSS 10.0) in Wing FTP Server allows unauthenticated attackers to execute arbitrary Lua code via NULL byte injection, compromising the server
33 views
Daily Writeups
⤷ Title: Critical Wing FTP Server RCE (CVE-2025-47812) Actively Exploited In The Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 00:38:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_47812 #cybersecurity #Exploited in Wild #FTP Server #Huntress #Lua #Null Byte Injection #rce #Remote Code Execution #Vulnerability #Wing FTP Server
Daily CyberSecurity
Critical Wing FTP Server RCE (CVE-2025-47812) Actively Exploited In The Wild
Huntress witnessed active exploitation of a critical RCE flaw (CVE-2025-47812) in Wing FTP Server, allowing root/SYSTEM access via null byte injection and Lua code execution.
19 views
Daily Writeups
⤷ Title: Suricata 8.0 Unleashed: Faster, Safer Network Defense with Rust & New Protocols
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:21:51 +0000
════════════════════════
⌗ Tags: #Open Source Tool #detection #firewall #IDS #IPS #Lua #network protocols #network security #open source #performance #Rust #Suricata
Penetration Testing Tools
Suricata 8.0 Unleashed: Faster, Safer Network Defense with Rust & New Protocols
Suricata 8.0 is here! This major update brings enhanced performance, Rust rewrites for security, new protocol support, and an experimental firewall mode to network defense.
18 views
Daily Writeups
⤷ Title: CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:55:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_47812 #cybersecurity #Exploited in Wild #FTP Server #Huntress #Lua #Null Byte Injection #rce #Remote Code Execution #Vulnerability #Wing FTP Server
Daily CyberSecurity
CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
CISA adds critical Wing FTP Server RCE flaw (CVE-2025-47812, CVSS 10.0) to KEV. Actively exploited via null byte and Lua code injection; patch to 7.4.4 immediately!
12 views
Daily Writeups
⤷ Title: “Pls Donate” schemes leads to stolen Robux through simple Lua scripts
════════════════════════
𐀪 Author: Haitham Aljabbari
════════════════════════
ⴵ Time: Sun, 17 Aug 2025 07:00:05 GMT
════════════════════════
⌗ Tags: #forensics #lua #hacking #gaming #roblox
Medium
“Pls Donate” schemes leads to stolen Robux through simple Lua scripts
My friends plays Roblox a lot. I do mean a lot. Well not THAT much some times. But anyways, just recently, he bought 1000 Robux. The next…
23 views
Daily Writeups
⤷ Title: Critical Flaw CVE-2025-49844 (CVSS 10.0) Allows Remote Code Execution in Redis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 00:01:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_49844 #database #Lua #rce #Redis #Remote Code Execution #security alert #use after free
Daily CyberSecurity
Critical Flaw CVE-2025-49844 (CVSS 10.0) Allows Remote Code Execution in Redis
Redis patched a Critical (CVSS 10.0) RCE flaw (CVE-2025-49844) in Lua scripting. An authenticated attacker can exploit a Use-After-Free bug to gain code execution.
15 views
Daily Writeups
⤷ Title: 13-Year-Old RediShell Vulnerability Puts 60,000 Redis Servers at Risk
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 07 Oct 2025 17:37:28 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Lua #Redis #RediShell #Vulnerability
Hackread
13-Year-Old RediShell Vulnerability Puts 60,000 Redis Servers at Risk
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
38 views
Daily Writeups
⤷ Title: Critical 10/10 Flaw in Redis Existed Undetected for 13 Years
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Oct 2025 08:40:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_49844 #cybersecurity #database #in_memory #Lua #redis #vulnerability #zero_day
Penetration Testing Tools
Critical 10/10 Flaw in Redis Existed Undetected for 13 Years
A critical 10/10 RCE flaw (CVE-2025-49844) has been found in Redis. The flaw, active for 13 years, allows unauthenticated attackers to execute arbitrary code.
18 views
Daily Writeups
⤷ Title: Critical Redis Lua Flaw (CVE-2025-49844) Rated CVSS 10.0 Allows Remote Code Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Oct 2025 02:39:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #Critical Vulnerability #CVE_2025_49844 #Database Security #Lua #RCE #redis #UAF #use_after_free
Penetration Testing Tools
Critical Redis Lua Flaw (CVE-2025-49844) Rated CVSS 10.0 Allows Remote Code Execution
A Critical (CVSS 10.0) Use-After-Free flaw (CVE-2025-49844) in Redis's Lua parser allows authenticated attackers to achieve Remote Code Execution. Update immediately to v8.2.2.
17 views
Daily Writeups
⤷ Title: CERT/CC Warns of Code Execution Flaws in Lite XL Text Editor (CVE-2025-12120, CVE-2025-12121)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 00:05:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.lite_project.lua #Arbitrary Code Execution #CVE_2025_12120 #Lite XL #Lua #rce #Supply Chain #text editor
Daily CyberSecurity
CERT/CC Warns of Code Execution Flaws in Lite XL Text Editor (CVE-2025-12120, CVE-2025-12121)
A Critical flaw in Lite XL (CVE-2025-12120) allows RCE when opening a project: the editor automatically executes malicious .lite_project.lua files, risking developer compromise.
11 views
Daily Writeups
⤷ Title: Breaking the Input: Sandbox Escape Hits libinput, Exposing Leading Linux Desktops
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 13:02:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_35093 #CVE_2026_35094 #Fedora #gnome #infosec #kde #KWin #libinput #Linux Security #Lua Vulnerability #Mutter #Patch Alert #Sandbox Escape
Daily CyberSecurity
Breaking the Input: Sandbox Escape Hits libinput, Exposing Leading Linux Desktops
Critical 8.8 CVSS flaw in libinput allows sandbox escape via malicious Lua plugins. Affects GNOME, KDE, and Fedora. Update to 1.31.1 or 1.30.3 now!
5 views
Daily Writeups
⤷ Title: LucidRook: Sophisticated Spear-Phishing Campaign Targets Taiwan with Custom Malware Stack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 06:13:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #Cisco Talos #Gmail Exfiltration #infosec #Lua Malware #LucidKnight #LucidPawn #LucidRook #Rust malware #Taiwan Cyber Attack #threat intelligence #UAT_10362
Daily CyberSecurity
LucidRook: Sophisticated Spear-Phishing Campaign Targets Taiwan with Custom Malware Stack
Cisco Talos reveals UAT-10362’s "Lucid" malware family targeting Taiwan. Using Lua, Rust, and regional locks, this threat prioritizes extreme stealth.
18 views
Daily Writeups
⤷ Title: Beyond Stuxnet: Uncovering fast16, the Apex Saboteur That Rewrites Mathematical Reality
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 08:27:58 +0000
════════════════════════
⌗ Tags: #Malware #Advanced Persistent Threats #APT #Cyber Sabotage #fast16 #High_Precision Computing #infosec #Lua VM #Malware History #SentinelLABS #Shadow Brokers #Stuxnet
Daily CyberSecurity
Beyond Stuxnet: Uncovering fast16, the Apex Saboteur That Rewrites Mathematical Reality
SentinelLABS reveals fast16, a 2005 framework that predates Stuxnet. It sabotages high-precision calculations in nuclear research by patching math in memory.
31 views
Daily Writeups
⤷ Title: Writing Your First NSE Script
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Wed, 06 May 2026 17:03:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ethical_hacking #lua #nmap
Medium
Writing Your First NSE Script
You don’t need to be a developer to write your own Nmap scripts. You just need 30 lines of Lua and something to automate.
12 views
Daily Writeups
⤷ Title: Critical Redis Patches Fix RCE and Memory Corruption Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:25:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25243 #cybersecurity #infosec #Lua Scripting #memory corruption #Patch Alert #rce #Redis #RedisBloom #RedisTimeSeries #Remote Code Execution #use after free
Daily CyberSecurity
Critical Redis Patches Fix RCE and Memory Corruption Flaws
Redis releases critical patches for 5 vulnerabilities, including RCE via the RESTORE command (CVSS 7.7). Secure your self-managed Redis instances immediately!
18 views
Daily Writeups
⤷ Title: I Built a Single Nmap Script That Replaces 8 Pentesting Tools — Meet Reko
════════════════════════
𐀪 Author: NullyBlissful
════════════════════════
ⴵ Time: Tue, 12 May 2026 06:56:34 GMT
════════════════════════
⌗ Tags: #lua #cybersecurity #pentesting #nmap #bug_bounty
Medium
I Built a Single Nmap Script That Replaces 8 Pentesting Tools — Meet Reko
One command. 29 services. Prioritised findings. CTF-ready.
23 views
Daily Writeups
⤷ Title: Predating Stuxnet: How the “fast16” Malware Secretly Sabotaged Nuclear Weapons Simulations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:04:53 +0000
════════════════════════
⌗ Tags: #Malware #AUTODYN #Cyber Sabotage #Equation Group #fast16 #infosec #LS_DYNA #Lua Virtual Machine #Nuclear Weapon Design #Stuxnet #Symantec Threat Hunter #Uranium Compression
Daily CyberSecurity
Predating Stuxnet: How the "fast16" Malware Secretly Sabotaged Nuclear Weapons Simulations
Symantec exposes fast16, a 2005 cyber-sabotage framework designed to inject an in-memory Lua engine and corrupt uranium-compression weapons simulations.
15 views
Daily Writeups
⤷ Title: TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 12:30:07 +0000
════════════════════════
⌗ Tags: #Malware #Agent Tesla #Donut Shellcode #FortiGuard Labs #Lua Loader #phishing #Remcos #Snake Keylogger #TTF Trap #XWorm
Daily CyberSecurity
TTF Trap Campaign Hides a Low-Detection Lua Loader Inside Fake TrueType Font Files
A global phishing campaign hides a low-detection Lua loader inside fake .ttf font files to drop Remcos, XWorm, Agent Tesla, and a Snake Keylogger. #LuaLoader #TTFTrap #Phishing #FortiGuard #Remcos…
17 views