Daily Writeups
@Daily_Writeups
4.1K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.1K subscribers
Daily Writeups
⤷ Title: Years Long Linux Cryptominer Spotted Using Legit Sites to Spread Malware
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Fri, 18 Jul 2025 11:06:24 +0000
════════════════════════
⌗ Tags: #Security #Malware #Cryptominer #Cybersecurity #Linuxsys #Monero #VulnCheck #Vulnerability #Windows #XMR
Hackread
Years Long Linux Cryptominer Spotted Using Legit Sites to Spread Malware
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
32 views
Daily Writeups
⤷ Title: 15,000 Jenkins Servers at Risk from RCE Vulnerability (CVE-2025-53652)
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 08 Aug 2025 19:14:36 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Jenkins #RCE #security #VulnCheck #Vulnerability
Hackread
15,000 Jenkins Servers at Risk from RCE Vulnerability (CVE-2025-53652)
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
57 views
Daily Writeups
⤷ Title: CISA Warns of Active Exploitation in XWiki and VMware Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 02:12:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Broadcom #CISA #CVE_2025_24893 #CVE_2025_41244 #KEV Catalog #privilege escalation #Remote Code Execution #VMware Aria Operations #VMware Tools #VulnCheck #XWiki
Daily CyberSecurity
CISA Warns of Active Exploitation in XWiki and VMware Vulnerabilities
CISA adds XWiki (CVE-2025-24893) and VMware (CVE-2025-41244) to its KEV Catalog after confirming active exploitation in the wild.
3 views
Daily Writeups
⤷ Title: The Ghost in the Router: Hackers Exploit Unpatchable D-Link Zero-Day in 2026
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 08:40:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_0625 #D_Link #DNS hijacking #DSL Gateway #End of Life #network security #RCE #Router Hack #Shadowserver #VulnCheck #zero_day
Information Security News
The Ghost in the Router: Hackers Exploit Unpatchable D-Link Zero-Day in 2026
It appears that antiquated D-Link hardware remains operational in various environments, a persistence that adversaries are now endeavoring to transform into a potent attack vector. Network monitor…
21 views
Daily Writeups
⤷ Title: Silent Intrusion: “Metro4Shell” Exploited in the Wild Since December
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:27:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_11953 #DevSecOps #Exploitation in the Wild #Metro Development Server #Metro4Shell #React Native #VulnCheck #vulnerability management #zero_day
Daily CyberSecurity
Silent Intrusion: “Metro4Shell” Exploited in the Wild Since December
A new report from VulnCheck reveals that CVE-2025-11953, a critical flaw in the Metro development server dubbed “Metro4Shell,” was being actively weaponized in the wild as early as lat…
12 views
Daily Writeups
⤷ Title: Report Finds Just 1% of Security Flaws Drive Most Cyberattacks in 2025
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 13:56:02 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Attack #Cybersecurity #security #VulnCheck #Vulnerability
Hackread
Report Finds Just 1% of Security Flaws Drive Most Cyberattacks in 2025
Security flaws dominate cyber risk as just 1% of vulnerabilities drive most attacks, with rapid exploitation, zero-days, ransomware, and AI noise increasing threats.
25 views
Daily Writeups
⤷ Title: Code Red for AI: CVSS-10 Vulnerability in Flowise Under Active Attack from Starlink IP
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:16:34 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CustomMCP #CVE_2025_59528 #Flowise #InfoSec 2026 #JavaScript Injection #Patch Alert #RCE #remote code execution #VulnCheck #Zero Trust
Penetration Testing Tools
Code Red for AI: CVSS-10 Vulnerability in Flowise Under Active Attack from Starlink IP
A vulnerability garnering the maximum severity rating has already been subjected to active exploitation, despite the remedial patch
12 views
Daily Writeups
⤷ Title: ShowDoc Vulnerability Patched in 2020 Now Used in Active Server Takeovers
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 14:25:37 +0000
════════════════════════
⌗ Tags: #Security #China #Cybersecurity #PHP #RCE #ShowDoc #VulnCheck #Vulnerability
Hackread
ShowDoc Vulnerability Patched in 2020 Now Used in Active Server Takeovers
Hackers are exploiting a 5-year-old ShowDoc vulnerability (CVE-2025-0520) to deploy web shells, enabling RCE and full server takeover worldwide.
37 views
Daily Writeups
⤷ Title: Zero-Day Surge: The MetInfo CMS Flaw That Grants Unauthenticated Root Access to Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 09:24:08 +0000
════════════════════════
⌗ Tags: #Vulnerability #Automated Scanning #China Cyber Security #CMS Security #CVE_2026_29014 #Cyber attack 2026 #MetInfo #PHP Code Injection #RCE #remote code execution #VulnCheck #zero_day
Penetration Testing Tools
Zero-Day Surge: The MetInfo CMS Flaw That Grants Unauthenticated Root Access to Servers
A zero-day vulnerability residing within the Chinese content management system MetInfo has entered a phase of active exploitation
9 views
Daily Writeups
⤷ Title: NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:51:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Mitigation #CVE_2026_42945 #Denial of Service #F5 Networks #Heap Buffer Overflow #Honeypot Telemetry #NGINX Rift #ngx_http_rewrite_module #Remote Code Execution #VulnCheck
Daily CyberSecurity
NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
Critical 18-year-old "NGINX Rift" flaw CVE-2026-42945 is under active exploitation. Learn how to patch your proxies and block the unauthenticated heap overflow.
13 views
Daily Writeups
⤷ Title: VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:20:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Attack Surface Management #Cisco Catalyst Zero Day #CVE_2026_20182 #NGINX CVE_2026_42945 #Probllama CVE_2024_37032 #ProFTPD SQL Injection #threat intelligence 2026 #UAT_8616 #VulnCheck Report #WordPress Security
Penetration Testing Tools
VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
A constellation of severe vulnerabilities sweeping across ubiquitous server frameworks and third-party extensions has emerged as the focal
17 views
Daily Writeups
⤷ Title: Hackers Actively Exploit ‘Nginx Rift’ Vulnerability Affecting NGINX, F5 Products
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 19 May 2026 10:12:20 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attack #Cybersecurity #F5 #NGINX #VulnCheck #Vulnerability
Hackread
Hackers Actively Exploit ‘Nginx Rift’ Vulnerability Affecting NGINX, F5 Products
Hackers are actively exploiting the Nginx Rift vulnerability affecting NGINX and F5 products, exposing servers to denial-of-service attacks.
27 views
Daily Writeups
⤷ Title: libssh2 Vulnerability CVE-2026-58050 Gets Public PoC Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 28 Jun 2026 08:29:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_55200 #CVE_2026_58050 #heap overflow #integer overflow #libssh2 #PoC Exploit #ssh #VulnCheck
Daily CyberSecurity
libssh2 Vulnerability CVE-2026-58050 Gets Public PoC Exploit
TL;DR Researchers publicly disclosed a libssh2 vulnerability tracked as CVE-2026-58050. The flaw lets a malicious SSH server corrupt the heap of a connecting client. Proof-of-concept exploit code …
37 views
Daily Writeups
⤷ Title: libssh2 Flaws Let Malicious SSH Servers Corrupt Client Memory
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 02:19:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_66032 #CVE_2026_66033 #CVE_2026_66034 #CVE_2026_66035 #double_free #Heap Buffer Overflow #libssh2 #libssh2 vulnerabilities #malicious SSH server #SFTP #SSH Client #VulnCheck
Daily CyberSecurity
libssh2 Flaws Let Malicious SSH Servers Corrupt Client Memory
TL;DR Four new libssh2 vulnerabilities put SSH and SFTP clients at risk. Each one lets a malicious SSH server corrupt memory on the machine that connects to it. VulnCheck disclosed the flaws on Ju…
14 views
Daily Writeups
⤷ Title: ENDLESSDOORS: Hidden Remote Control Found in Zbtlink Router Firmware
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 15:02:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #ENDLESSDOORS #Firmware Security #IoT Backdoor #rctl #Router Backdoor #router security #VulnCheck #Zbtlink Backdoor
Information Security News
ENDLESSDOORS: Hidden Remote Control Found in Zbtlink Router Firmware
Chinese router manufacturer Zbtlink has become the focus of a significant dispute following the discovery of a concealed remote management mechanism embedded in its proprietary firmware. Researche…
14 views
Daily Writeups
⤷ Title: Langflow Flaw Exploited to Steal OpenAI and AWS Keys
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 11:31:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Credential Theft #CVE_2026_0768 #Langflow #Unauthenticated RCE #VulnCheck
Information Security News
Langflow Flaw Exploited to Steal OpenAI and AWS Keys
Servers for developing AI applications have become vaults of valuable secrets, accessible through a single unprotected request. Attackers have begun exploiting the critical vulnerability CVE-2026-…
28 views
Daily Writeups
⤷ Title: PHP2Shell ASLR Bypass Enables Remote Code Execution
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:05:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASLR Bypass #PHP Security #PHP2Shell #remote code execution #VulnCheck
Information Security News
PHP2Shell ASLR Bypass Enables Remote Code Execution
Researchers have engineered a reliable exploit against critical memory safety protections. Specifically, cybersecurity analysts at VulnCheck defeated Address Space Layout Randomization (ASLR) on m…
14 views