Daily Writeups
@Daily_Writeups
4.09K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.09K subscribers
Daily Writeups
⤷ Title: Attackers Weaponize Legitimate RMM Tools via Fake PDFs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 02:12:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASEC #cyber attacks #living_off_the_land #Malware Analysis #NinjaOne #NSIS #PDF Malware #phishing #RMM Abuse #ScreenConnect #SuperOps #Syncro
Daily CyberSecurity
Attackers Weaponize Legitimate RMM Tools via Fake PDFs
In a new report, the AhnLab Security Intelligence Center (ASEC) warns of a rising trend where threat actors are hijacking powerful Remote Monitoring and Management (RMM) software to infiltrate vic…
18 views
Daily Writeups
⤷ Title: Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 19:30:37 +0000
════════════════════════
⌗ Tags: #Phishing Scam #Security #Cyber Attack #Cybersecurity #Dropbox #Fraud #Password #PDF #Phishing #Privacy #Scam
Hackread
Phishing Scam Uses Clean Emails and PDFs to Steal Dropbox Logins
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
40 views
Daily Writeups
⤷ Title: Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:11:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cloud Security #Credential Harvesting #Dropbox Impersonation #Email Security #PDF Phishing #phishing #social engineering #Telegram bot #Vercel Blob #X_Labs
Daily CyberSecurity
Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
Phishing attacks have evolved from simple “click here” links to complex, multi-stage puzzles designed to baffle security scanners. A new report from the X-Labs team uncovers a sophisti…
15 views
Daily Writeups
⤷ Title: “PDF” Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:07:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroForm #BMPDecoder #CVE_2026_24133 #CVE_2026_24737 #Denial of Service #Front_end Development #JavaScript Library #jsPDF #PDF Generation #Web Security #XSS
Daily CyberSecurity
"PDF" Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
Critical jsPDF flaws (CVE-2026-24133) allow XSS & DoS via malicious BMPs. Update to v4.1.0 immediately to prevent browser crashes and code injection.
27 views
Daily Writeups
⤷ Title: How to Securely Edit and Redact Sensitive PDFs: A Cybersecurity Guide
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 11:12:30 +0000
════════════════════════
⌗ Tags: #Security #Privacy #Cybersecurity #Data Redaction #Data Security #PDF #pdfFiller
Hackread
How to Securely Edit and Redact Sensitive PDFs: A Cybersecurity Guide
PDF security guide covering redaction, metadata risks, compliance standards, and safe editing of password-protected files to prevent data leaks.
37 views
Daily Writeups
⤷ Title: Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:17:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroJS Bypass #AppSec #CVE_2026_25755 #Cyber Security #infosec #JavaScript Security #jsPDF #npm Vulnerability #Patch Alert #PDF Object Injection
Daily CyberSecurity
Sandbox Bypassed: jsPDF Flaw Exposes Millions to Object Injection
A critical PDF Object Injection flaw (CVE-2026-25755) in jsPDF allows attackers to bypass AcroJS sandboxes. Update to version 4.2.0 immediately.
9 views
Daily Writeups
⤷ Title: PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 04:54:58 GMT
════════════════════════
⌗ Tags: #application_security #devsecops #secure_coding #cybersecurity #pdf
Medium
PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
How malicious content can hide in PDFs through template injection, JavaScript execution, and user input vulnerabilities — and how to…
17 views
Daily Writeups
⤷ Title: The MuPDF Vulnerability Turning “Safe” PDFs into System Hijackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 12:00:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Artifex #CVE_2026_3308 #heap overflow #infosec #integer overflow #Linux Security #Memory Management #MuPDF #PDF Security #rce #Vulnerability
Daily CyberSecurity
The MuPDF Vulnerability Turning "Safe" PDFs into System Hijackers
Artifex MuPDF faces a 7.8 CVSS integer overflow (CVE-2026-3308) allowing RCE via "crafted" PDFs. With no official patch, sandboxing is vital. Update now.
4 views
Daily Writeups
⤷ Title: Zero-Day Alert: Sophisticated PDF Exploit Targets Adobe Reader for Massive Data Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:21:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe Reader #Adobe Security #cybersecurity #EXPMON #file theft #infosec #Malware Analysis #PDF Exploit #rce #Sandbox Escape #zero_day
Daily CyberSecurity
Zero-Day Alert: Sophisticated PDF Exploit Targets Adobe Reader for Massive Data Theft
A critical Adobe Reader zero-day allows attackers to steal local files and achieve system control via malicious PDFs. Learn how the unpatched exploit works.
15 views
Daily Writeups
⤷ Title: Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 16:45:40 +0000
════════════════════════
⌗ Tags: #Security #0day #Adobe #Adobe Reader #Cyber Attack #Cybersecurity #EXPMON #Haifei Li #PDF #Vulnerability
Hackread
Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs
An Adobe Reader zero-day vulnerability is being actively exploited via malicious PDFs, allowing hackers to steal data without user interaction, with no patch available.
19 views
Daily Writeups
⤷ Title: Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:48:03 +0000
════════════════════════
⌗ Tags: #Data Leak #Cloudinary #cybersecurity #Data Exposure #data leak #Fiverr #freelance security #Google Indexing #infosec #PDF Security #Privacy Breach
Daily CyberSecurity
Open Access: How a Simple Fiverr Config Error Exposed 30,000 Private Documents to Google
Fiverr fails to fix a critical flaw exposing 30,000+ private PDFs, including taxpayer info, to Google Search. Learn how public Cloudinary URLs caused the leak.
15 views
Daily Writeups
⤷ Title: Critical 9.4 CVSS Flaw Leaves Dolibarr ERP Open to RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 13:13:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CRM #CVE_2026_23500 #cybersecurity #Dolibarr #ERP #infosec #Open Source Security #Patch Alert #PDF Conversion #rce
Daily CyberSecurity
Critical 9.4 CVSS Flaw Leaves Dolibarr ERP Open to RCE
Dolibarr ERP faces a critical 9.4 CVSS RCE flaw (CVE-2026-23500) in its PDF conversion logic. Unsanitized commands allow full system takeover. Upgrade to 23.0!
22 views
Daily Writeups
⤷ Title: Attackers Are Weaponizing Foxit PDF Reader’s Reputation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 06:02:15 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Danish Passport Decoy #Foxit Software #G DATA #infosec #malware #PDF Security #Remote Access Trojan #social engineering #UltraVNC
Daily CyberSecurity
Attackers Are Weaponizing Foxit PDF Reader’s Reputation
G DATA warns Foxit PDF users of a global malware campaign using fake installers and Danish passport decoys to deploy hidden UltraVNC remote access tools.
19 views
Daily Writeups
⤷ Title: Maximum Severity Flaw: How a Newline Character Shattered Gotenberg’s PDF Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 01:00:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40281 #CVSS 10 #Docker Security #ExifTool #Gotenberg #infosec #Patch Alert #PDF API #rce #SSRF Bypass #Web Security
Daily CyberSecurity
Maximum Severity Flaw: How a Newline Character Shattered Gotenberg's PDF Security
Gotenberg PDF API hit with a rare CVSS 10 flaw. Unauthenticated RCE, file overwrites, and SSRF bypasses discovered. Upgrade to version 8.32 immediately.
25 views
Daily Writeups
⤷ Title: Beyond Text: How Google Gemini’s New Multimodal RAG Turns Images and PDFs into Actionable Intelligence
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:54:20 +0000
════════════════════════
⌗ Tags: #Technology #AI Development #AI Studio #enterprise AI #File Search #Gemini Embedding 2 #Google Cloud #Google Gemini API #Knowledge Base #Multimodal RAG #PDF Analysis #RAG Workflow #Vector Search
Daily CyberSecurity
Beyond Text: How Google Gemini’s New Multimodal RAG Turns Images and PDFs into Actionable Intelligence
Google Gemini API expands file search with Multimodal RAG. Featuring image-text retrieval, custom metadata, and page-level citations for enterprise AI.
18 views
Daily Writeups
⤷ Title: Hackers Use Fake Claude Code Guide and AI PDFs to Spread AsyncRAT Malware
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 13:20:34 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Malware #Scams and Fraud #AsyncRAT #Claude Code #Cyber Attack #Cybersecurity #PDF #RAT #Scam #Windows
Hackread
Hackers Use Fake Claude Code Guide and AI PDFs to Spread AsyncRAT Malware
Hackers are using fake Claude Code guide and AI PDFs to spread AsyncRAT malware via Windows attack using PowerShell and Defender exclusions.
31 views
Daily Writeups
⤷ Title: Modern Enterprises: How to Evaluate the Security and Compliance of Office Software
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 16:32:29 +0000
════════════════════════
⌗ Tags: #Software Reviews #Security #Business #Compliance #Cybersecurity #PDF #Technology #UPDF
Hackread
Modern Enterprises: How to Evaluate the Security and Compliance of Office Software
How modern businesses can judge office software for ISO 27001 certification, GDPR-aligned data handling, encryption and safer PDF workflows with clarity.
14 views
Daily Writeups
⤷ Title: AI Can Forge Documents in Minutes – “Looks Right” Is No Longer Enough
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 10:28:11 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Scams and Fraud #Technology #AI #Fraud #PDF #Scam
Hackread
AI Can Forge Documents in Minutes – “Looks Right” Is No Longer Enough
Generative AI is making document fraud faster and harder to spot, pushing security teams to verify provenance, signatures and file integrity at intake securely.
28 views
Daily Writeups
⤷ Title: Foxit PDF Reader Flaws Enable Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 15:34:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_13126 #CVE_2026_57239 #Foxit PDF Editor #Foxit PDF reader #PDF vulnerability #use after free
Daily CyberSecurity
Foxit PDF Reader Flaws Enable Arbitrary Code Execution
TL;DR Foxit shipped Foxit PDF Reader 2026.1.2 and PDF Editor 2026.1.2 for Windows. The release fixes 28 security flaws. Twenty of them can lead to arbitrary code execution when someone opens a cra…
22 views
Daily Writeups
⤷ Title: How to Embed Secure Document Viewing in Your Fintech Application
════════════════════════
𐀪 Author: Isaac Maw
════════════════════════
ⴵ Time: Tue, 01 Sep 2026 13:45:04 GMT
════════════════════════
⌗ Tags: #software_development #infosec #api #pdf #sdk
Medium
How to Embed Secure Document Viewing in Your Fintech Application
Disclaimer: I’m a writer at Apryse Inc.
13 views