Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: FireEye Fallout Part II: The Plot Thickens
════════════════════════
𐀪 Author: Kalpitha S
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 16:51:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #solarwinds_hack #supply_chain_attack #fireeye #threat_intelligence
Medium
FireEye Fallout Part II: The Plot Thickens
This article was originally published on Jan 26, 2021, written by Sarah King
21 views
Daily Writeups
⤷ Title: Supply Chain Attacks: The Hidden Cyber Threat Targeting Trust
════════════════════════
𐀪 Author: Md Shafiqul Baten Sumon
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 00:17:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #zero_trust #supply_chain_security #infosec #solarwinds
Medium
Supply Chain Attacks: The Hidden Cyber Threat Targeting Trust
In the ever-evolving world of cybersecurity, a new form of attack is gaining momentum — one that doesn’t directly target the victim but…
14 views
Daily Writeups
⤷ Title: SolarWinds Issues Advisory on Salesforce Data Breach Linked to Salesloft Drift
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 08:46:31 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber Security #Data Breach #OAuth tokens #Salesforce #Salesloft Drift #security advisory #sensitive data #SolarWinds
Daily CyberSecurity
SolarWinds Issues Advisory on Salesforce Data Breach Linked to Salesloft Drift
SolarWinds alerts on a Salesforce data breach impacting numerous companies. The breach exploited compromised OAuth tokens via the Salesloft Drift integration, exposing sensitive customer data.
48 views
Daily Writeups
⤷ Title: CVE-2025-26399 (CVSS 9.8): SolarWinds Web Help Desk Hit by Critical RCE Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 08:47:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_26399 #cybersecurity #patch bypass #rce #SolarWinds #Vulnerability #Web Help Desk
Daily CyberSecurity
CVE-2025-26399 (CVSS 9.8): SolarWinds Web Help Desk Hit by Critical RCE Vulnerability
SolarWinds has released a hotfix for its Web Help Desk (WHD) software after the discovery of a critical remote code execution (RCE) vulnerability tracked as CVE-2025-26399. The flaw, rated CVSS 9.…
8 views
Daily Writeups
⤷ Title: Critical SolarWinds Serv-U Flaws (CVSS 9.1) Allow Authenticated Admin RCE and Path Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 02:12:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authenticated RCE #Critical Vulnerability #CVE_2025_40547 #Path Bypass #rce #SolarWinds Serv_U
Daily CyberSecurity
Critical SolarWinds Serv-U Flaws (CVSS 9.1) Allow Authenticated Admin RCE and Path Bypass
SolarWinds patched three Critical RCE flaws (CVSS 9.1) in Serv-U. An authenticated admin can exploit them for code execution and directory path bypass. Update to v15.5.3 immediately.
14 views
Daily Writeups
⤷ Title: PoC Public & Exploited: Critical SolarWinds Help Desk Flaw Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 09:31:54 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2025_40551 #Exploit in the Wild #metasploit #Patch Alert #proof_of_concept #Rapid7 #Remote Code Execution #SolarWinds #Web Help Desk
Daily CyberSecurity
PoC Public & Exploited: Critical SolarWinds Help Desk Flaw Exploited in the Wild
33 views
Daily Writeups
⤷ Title: Virtual Invasion: SolarWinds WHD Exploited to Host Hidden QEMU VMs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 00:31:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_40551 #cyberattack #DLL Sideloading #Microsoft Defender #persistence #QEMU #SolarWinds #SysAdmin #virtualization #Web Help Desk
Daily CyberSecurity
Virtual Invasion: SolarWinds WHD Exploited to Host Hidden QEMU VMs
Microsoft finds hackers using SolarWinds WHD to run hidden QEMU VMs. The attack uses DLL sideloading for full domain compromise. Patch immediately.
12 views
Daily Writeups
⤷ Title: Virtual Sabotage: How Attackers Weaponized SolarWinds Help Desks to Hide Malware Inside QEMU
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:41:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Credential Harvesting #CVE_2025_40536 #CVE_2025_40551 #DLL Sideloading #Microsoft Defender #QEMU #RCE #remote code execution #SolarWinds #Tech News 2026 #Web Help Desk
Penetration Testing Tools
Virtual Sabotage: How Attackers Weaponized SolarWinds Help Desks to Hide Malware Inside QEMU
The Microsoft Defender threat intelligence team has documented a series of substantiated offensives targeting internet-facing SolarWinds Web Help
28 views
Daily Writeups
⤷ Title: Root Access Granted: Four Critical RCE Flaws Patched in SolarWinds Serv-U
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 09:41:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_40538 #CVE_2025_40539 #CVE_2025_40540 #CVE_2025_40541 #Cyber Security #Patch Alert #privilege escalation #rce #Remote Code Execution #root access #SolarWinds Serv_U
Daily CyberSecurity
Root Access Granted: Four Critical RCE Flaws Patched in SolarWinds Serv-U
SolarWinds patches four critical 9.1 CVSS RCE vulnerabilities in Serv-U. Attackers can create admin users and execute code as root. Update to 15.5.4 now!
54 views
Daily Writeups
⤷ Title: The ‘Must-Patch’ List: CISA Adds Actively Exploited SolarWinds, Ivanti, and Omnissa Flaws to KEV
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:45:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #CVE_2021_22054 #CVE_2025_26399 #CVE_2026_1603 #cybersecurity #infosec #Ivanti EPM #Omnissa Workspace ONE #Patch Alert #SolarWinds
Daily CyberSecurity
The 'Must-Patch' List: CISA Adds Actively Exploited SolarWinds, Ivanti, and Omnissa Flaws to KEV
CISA adds three actively exploited flaws in SolarWinds, Ivanti, and Omnissa to its KEV catalog. Patch these critical enterprise vulnerabilities immediately.
33 views
Daily Writeups
⤷ Title: CISA’s “Grim Ledger”: Warlock Ransomware and Critical Zero-Days Strike Enterprise Management Tools
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 07:38:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication bypass #CISA KEV #CVE_2021_22054 #CVE_2025_26399 #CVE_2026_1603 #InfoSec 2026 #Ivanti Endpoint Manager #Omnissa #remote code execution #SolarWinds #Warlock Ransomware
31 views
Daily Writeups
⤷ Title: Weekly Threat Intelligence Briefing: Chrome Zero-Days, SolarWinds RCE, and a Surge in Critical PoCs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 02:02:38 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CVE_2025_26399 #CVE_2026_3909 #CVE_2026_3910 #CVSS 10.0 #D_Link DIR_816 #Google Chrome Zero_Day #Honeywell IQ4x #Patch Tuesday 2026 #PoC Exploits #SolarWinds #vulnerability management
Daily CyberSecurity
Weekly Threat Intelligence Briefing: Chrome Zero-Days, SolarWinds RCE, and a Surge in Critical PoCs
Google Chrome zero-days and a CVSS 10.0 building controller flaw top this week's 1,388 new CVEs. Patch the perimeter before threat actors automate the exploit.
16 views
Daily Writeups
⤷ Title: Exploiting vsftpd2.3.4 Backdoor on Metasploitable 2 Complete Walkthrough
════════════════════════
𐀪 Author: Pranav Verma
════════════════════════
ⴵ Time: Tue, 26 May 2026 15:52:19 GMT
════════════════════════
⌗ Tags: #mr_robot #solarwinds_hack #vsftpd234 #cybersecurity #ethical_hacking
Medium
Exploiting vsftpd2.3.4 Backdoor on Metasploitable 2 Complete Walkthrough
Lab Setup
38 views
Daily Writeups
⤷ Title: Exploiting vsftpd 2.3.4 Backdoor on Metasploitable 2 Complete Walkthrough
════════════════════════
𐀪 Author: Pranav Verma
════════════════════════
ⴵ Time: Tue, 26 May 2026 15:52:19 GMT
════════════════════════
⌗ Tags: #mr_robot #solarwinds_hack #vsftpd234 #cybersecurity #ethical_hacking
Medium
Exploiting vsftpd2.3.4 Backdoor on Metasploitable 2 Complete Walkthrough
Lab Setup
36 views
Daily Writeups
⤷ Title: Algorithmic Infiltration: Unveiling the SolarWinds Penetration of the United States Treasury
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 02:26:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #administrative account hijacking telemetry #Bloomberg threat intelligence report #federal cyber espionage timeline #Freedom of Information Act lawsuit #government network persistence bounds #Orion platform supply chain attack #secure mail application exploit #SolarWinds Treasury breach report #Treasury Inspector General audit #treasury.gov email exfiltration
Information Security News
SolarWinds Treasury Breach Report Reveals New Mail Exploit
A newly unredacted SolarWinds Treasury breach report reveals how hackers hijacked a top administrative account to compromise the agency's Secure Mail system.
19 views
Daily Writeups
⤷ Title: SolarWinds Patches Three Critical Serv-U Vulnerabilities Enabling RCE
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 17:21:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #broken access control #CVE_2026_28307 #CVE_2026_28308 #CVE_2026_28321 #File Transfer #IDOR #privilege escalation #rce #SolarWinds #SolarWinds Serv_U
Daily CyberSecurity
SolarWinds Patches Three Critical Serv-U Vulnerabilities Enabling RCE
TL;DR SolarWinds fixed three critical SolarWinds Serv-U vulnerabilities on July 21, 2026. They allow privilege escalation and remote code execution on the file transfer server. SolarWinds rates ea…
32 views
Daily Writeups
⤷ Title: SolarWinds Patches 15 Critical Serv-U Vulnerabilities Enabling Root Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 17:21:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #broken access control #CVE_2026_28307 #CVE_2026_28308 #CVE_2026_28321 #File Transfer #IDOR #privilege escalation #rce #SolarWinds #SolarWinds Serv_U
Daily CyberSecurity
SolarWinds Patches Three Critical Serv-U Vulnerabilities Enabling RCE
TL;DR SolarWinds fixed three critical SolarWinds Serv-U vulnerabilities on July 21, 2026. They allow privilege escalation and remote code execution on the file transfer server. SolarWinds rates ea…
25 views
Daily Writeups
⤷ Title: SolarWinds Web Help Desk SAML Bypass CVE-2026-28323 Scores CVSS 9.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 02:53:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_28299 #CVE_2026_28323 #SAML authentication bypass #SolarWinds #Web Help Desk
Daily CyberSecurity
SolarWinds Web Help Desk SAML Bypass CVE-2026-28323 Scores CVSS 9.8
TL;DR SolarWinds has patched a critical authentication bypass in SolarWinds Web Help Desk. Tracked as CVE-2026-28323, the SAML flaw carries a CVSS score of 9.8. The 2026.2.1 release also fixes a d…
15 views
Daily Writeups
⤷ Title: SolarWinds Observability Vulnerabilities Enable Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 01:00:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_28324 #CVE_2026_28325 #cybersecurity #Remote Code Execution #SolarWinds #SolarWinds Observability
Daily CyberSecurity
SolarWinds Observability Vulnerabilities Enable Remote Code Execution
TL;DR On September 22, 2026, SolarWinds released software updates to resolve critical security flaws. These SolarWinds Observability vulnerabilities allow unauthenticated attackers to execute arbi…
21 views
Daily Writeups
⤷ Title: Splunk, SolarWinds Release Fresh Security Updates
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 10:45:24 +0000
════════════════════════
⌗ Tags: #Vulnerabilities #patches #SolarWinds #Splunk #vulnerability
SecurityWeek
Splunk, SolarWinds Release Fresh Security Updates
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.
29 views