Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: Microsoft Details Support Lifecycle for Windows 11 Version 26H2
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:36:55 +0000
════════════════════════
⌗ Tags: #Windows #IT Administration #Microsoft #OS Update #Windows 11 #Windows 11 version 26H2
Daily CyberSecurity
Microsoft Details Support Lifecycle for Windows 11 Version 26H2
Microsoft outlines the official support lifecycle and deployment guidelines for Windows 11 version 26H2, urging IT admins to prepare.
28 views
Daily Writeups
⤷ Title: Mastering Command Injection: A Complete PortSwigger Web Security Academy Walkthrough for Bug Bounty…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 10:28:17 GMT
════════════════════════
⌗ Tags: #web_security #os_command_injection #ethical_hacking #bug_bounty #cybersecurity
Medium
Mastering Command Injection: A Complete PortSwigger Web Security Academy Walkthrough for Bug Bounty…
From simple OS command injection to blind, out-of-band, and data-exfiltration techniques — a hands-on journey through all five PortSwigger…
19 views
Daily Writeups
⤷ Title: Lab 1: OS Command Injection — PortSwigger Web Security Academy Walkthrough (Part 1 of 5)
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 13:19:57 GMT
════════════════════════
⌗ Tags: #pentesting #ethical_hacking #bug_bounty #cybersecurity #os_command_injection
Medium
Lab 1: OS Command Injection — PortSwigger Web Security Academy Walkthrough (Part 1 of 5)
Starting the Command Injection series: how unsanitized shell input leads to direct, visible Remote Code Execution — a beginner-friendly…
22 views
Daily Writeups
⤷ Title: Lab 3: Blind OS Command Injection with Output Redirection — PortSwigger Web Security Academy…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 10:26:41 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #os_command_injection #ethical_hacking #cybersecurity
Medium
Lab 3: Blind OS Command Injection with Output Redirection — PortSwigger Web Security Academy Walkthrough (Part 3 of 5)
Turning a silent vulnerability into a readable one: how redirecting command output into a public directory lets you read RCE results…
11 views
Daily Writeups
⤷ Title: Lab 2: Blind OS Command Injection with Time Delays — PortSwigger Web Security Academy Walkthrough…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 10:18:51 GMT
════════════════════════
⌗ Tags: #os_command_injection #cybersecurity #bug_bounty #pentesting #ethical_hacking
Medium
Lab 2: Blind OS Command Injection with Time Delays — PortSwigger Web Security Academy Walkthrough (Part 2 of 5)
When the server stays silent: how to prove Remote Code Execution using nothing but a stopwatch and the Linux sleep command.
10 views
Daily Writeups
⤷ Title: Lab 5: Blind OS Command Injection with Out-of-Band Data Exfiltration — PortSwigger Web Security…
════════════════════════
𐀪 Author: Nitish Mukhiya
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 14:03:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #os_command_injection #portswigger_lab #bug_bounty #cybersecurity
Medium
Lab 5: Blind OS Command Injection with Out-of-Band Data Exfiltration — PortSwigger Web Security Academy Walkthrough (Part 5 of…
The grand finale: smuggling command output inside a DNS query to steal data from a completely silent, fully blind vulnerability.
22 views
Daily Writeups
⤷ Title: Blind OS Command Injection with Time Delays
════════════════════════
𐀪 Author: Ethical Hacker
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 12:19:57 GMT
════════════════════════
⌗ Tags: #bug_bounty #os_command_injection #application_security #blind_command_injection #web_security
Medium
Blind OS Command Injection with Time Delays
Professional write-up and technical documentation for the “Blind OS Command Injection with Time Delays” lab from PortSwigger Web Security…
16 views
Daily Writeups
⤷ Title: How I Found an OS Command Injection (RCE) in Coolify
════════════════════════
𐀪 Author: CyberTechAjju
════════════════════════
ⴵ Time: Sat, 11 Jul 2026 08:22:27 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #bug_bounty #os_command_injection #cve #hacker
Medium
How I Found an OS Command Injection in Coolify
How I Found an OS Command Injection in Coolify A health check that was anything but healthy. Hey everyone, CyberTechAjju here. 👋 So, I got my second CVE — and this time it’s a Remote Code …
21 views
Daily Writeups
⤷ Title: Windows Fundamentals 1: Navigating the Desktop, File System, and Core Utilities
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Sat, 11 Jul 2026 11:56:45 GMT
════════════════════════
⌗ Tags: #windows #ntfs_file_system #cybersecurity #os_fundamentals #tryhackme
Medium
Windows Fundamentals 1: Navigating the Desktop, File System, and Core Utilities
Introduction
31 views
Daily Writeups
⤷ Title: Dell PowerFlex Manager Flaw CVE-2026-56688 Allows Root Command Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 12:38:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_56688 #dell #Dell PowerFlex #os command injection #PowerFlex Manager #rce
Daily CyberSecurity
Dell PowerFlex Manager Flaw CVE-2026-56688 Allows Root Command Execution
TL;DR Dell has patched a batch of flaws in PowerFlex Manager. The most severe, CVE-2026-56688, enables PowerFlex command execution as root. It carries a CVSS score of 9.1. So far, no public exploi…
7 views
Daily Writeups
⤷ Title: CVE-2026-16812: VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 15:26:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arista #CVE_2026_16812 #CVE_2026_17191 #CVE_2026_17192 #exploited in the wild #os command injection #ssrf #VCO #VeloCloud #VeloCloud Orchestrator
Daily CyberSecurity
CVE-2026-16812: VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild
TL;DR: Arista confirmed that CVE-2026-16812, a VeloCloud command injection flaw, is under active attack. The bug scores a maximum CVSS 10.0 and needs no credentials. Arista also patched two relate…
13 views
Daily Writeups
⤷ Title: CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 21:52:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arista #CISA KEV #CVE_2025_68686 #CVE_2026_16812 #Fortinet #FortiOS #Known Exploited Vulnerabilities #os command injection #SSL VPN #VeloCloud Orchestrator
Daily CyberSecurity
CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited
TL;DR: On July 27, 2026, CISA made two KEV additions. Both are known exploited vulnerabilities. One is a critical Arista VeloCloud RCE, while the other is a FortiOS persistence bypass. Why These C…
24 views
Daily Writeups
⤷ Title: Progress Patches Five Kemp LoadMaster Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 02:12:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ADC Security #CVE_2026_59686 #CVE_2026_59687 #CVE_2026_59688 #CVE_2026_59689 #CVE_2026_59690 #Kemp LoadMaster #LoadMaster vulnerabilities #os command injection #privilege escalation #Progress Kemp LoadMaster
Daily CyberSecurity
Progress Patches Five Kemp LoadMaster Vulnerabilities
TL;DR Progress fixed five Kemp LoadMaster vulnerabilities in a July 2026 bulletin. Three allow OS command injection, and two allow privilege escalation. Each one can lead to full system compromise…
12 views
Daily Writeups
⤷ Title: One Semicolon. Root Access. No Password.
════════════════════════
𐀪 Author: Nilanjan Chowdhury
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 20:05:03 GMT
════════════════════════
⌗ Tags: #command_injection #ethical_hacking #os_security #cybersecurity #os_command_injection
Medium
One Semicolon. Root Access. No Password.
Author: Nilanjan Chowdhury
43 views
Daily Writeups
⤷ Title: Wireshark Filters Every Beginner Should Know
════════════════════════
𐀪 Author: Hafsamc
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 09:38:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #wireshark #tech #os
Medium
Wireshark Filters Every Beginner Should Know
When you open Wireshark during a incident response investigation or network troubleshooting session, you’re greeted by a chaotic wall of…
20 views
Daily Writeups
⤷ Title: CVE-2026-19188: Haiwell HMI Gateway Flaw Lets Attackers Execute Arbitrary OS Commands With Root Privileges (CVSS 10.0)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 12:56:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_19188 #Haiwell #os command injection
Daily CyberSecurity
CVE-2026-19188: Haiwell HMI Gateway Flaw Lets Attackers Execute Arbitrary OS Commands With Root Privileges (CVSS 10.0)
TL;DR A critical Haiwell HMI Gateway flaw threatens industrial control systems worldwide. Specifically, this vulnerability allows unauthenticated attackers to execute commands directly on the host…
7 views
Daily Writeups
⤷ Title: CVE-2026-20266: Critical OS Command Injection Hits Splunk AI Toolkit (CVSS 9.1)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 02:15:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #btool #CVE_2026_20266 #os command injection #Splunk #Splunk AI Toolkit #Splunk Enterprise
Daily CyberSecurity
CVE-2026-20266: Critical OS Command Injection Hits Splunk AI Toolkit (CVSS 9.1)
TL;DR Splunk patched a critical OS command injection flaw in its AI Toolkit, tracked as CVE-2026-20266. The bug scores 9.1 and lets an admin-role user run arbitrary commands on the host. Splunk al…
29 views
Daily Writeups
⤷ Title: Windows 11 Introduces Native Cloud Rebuild Functionality
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 10:07:21 +0000
════════════════════════
⌗ Tags: #Windows #Cloud Rebuild #Microsoft #OS Recovery #Windows 11
Daily CyberSecurity
Windows 11 Introduces Native Cloud Rebuild Functionality
Historically, when a Windows PC suffered catastrophic system corruption or failed to boot entirely, users faced a daunting ordeal. They typically had to scavenge for a USB flash drive. They also n…
25 views
Daily Writeups
⤷ Title: How a Campaign Name Became a No-Click Data Exfiltration Primitive: A Deep Dive into CSV Formula…
════════════════════════
𐀪 Author: mav3r1ck
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 10:20:25 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #os_command_injection #formula_injection #csv_injection #bug_bounty
Medium
How a Campaign Name Became a No-Click Data Exfiltration Primitive: A Deep Dive into CSV Formula Injection
TL;DR
9 views
Daily Writeups
⤷ Title: SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 04:17:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_106931 #EG Secure Solutions #exploited in the wild #JPCERT/CC #os command injection #SiteGuard #waf
Daily CyberSecurity
SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access
TL;DR JPCERT/CC warned on October 14, 2026, that attackers are exploiting CVE-2026-106931 in SiteGuard Server Edition. The SiteGuard Server Edition vulnerability is an OS command injection flaw th…
14 views