Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Kubernetes Security Alert: “Ingress-Nginx” Injection Flaw Risks Cluster-Wide Secret Exposure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 02:23:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #container security #CVE_2026_3288 #Data Leakage #infosec #ingress_nginx #Kubernetes Security #nginx #Patch Alert #Vulnerability
Daily CyberSecurity
Kubernetes Security Alert: "Ingress-Nginx" Injection Flaw Risks Cluster-Wide Secret Exposure
A high 8.8 CVSS flaw (CVE-2026-3288) in ingress-nginx allows arbitrary code execution and massive Kubernetes secret leakage. Patch immediately.
16 views
Daily Writeups
⤷ Title: Developer Alert: “CursorJack” Technique Weaponizes Deeplinks to Hijack Cursor IDE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 08:03:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #Cursor IDE #CursorJack #cybersecurity #developer security #infosec #MCP Deeplinks #Proofpoint #supply chain attack #threat intelligence
Daily CyberSecurity
Developer Alert: "CursorJack" Technique Weaponizes Deeplinks to Hijack Cursor IDE
Proofpoint details 'CursorJack', a novel exploit using malicious MCP deeplinks in the Cursor AI editor to execute arbitrary code on developer machines.
36 views
Daily Writeups
⤷ Title: High-Severity ingress-nginx Flaw Exposes Kubernetes Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 12:05:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #cloud_native #CVE_2026_4342 #cybersecurity #infosec #ingress_nginx #Kubernetes Secrets #Kubernetes Security #nginx #Vulnerability
Daily CyberSecurity
High-Severity ingress-nginx Flaw Exposes Kubernetes Secrets
A high-severity 8.8 CVSS flaw (CVE-2026-4342) in ingress-nginx allows attackers to inject malicious code and steal Kubernetes Secrets. Patch immediately.
34 views
Daily Writeups
⤷ Title: High-Severity Patches: NVIDIA Secures DALI and Triton Inference Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 14:49:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Arbitrary Code Execution #CVE_2026_24156 #cybersecurity #Denial of Service #infosec #Machine Learning Security #NVIDIA DALI #NVIDIA Patch #Triton Inference Server
Daily CyberSecurity
High-Severity Patches: NVIDIA Secures DALI and Triton Inference Server
NVIDIA patches high-severity flaws in DALI and Triton Inference Server. Prevent arbitrary code execution and DoS—upgrade to DALI v2.0 and Triton r26.02 now.
25 views
Daily Writeups
⤷ Title: 220 Million at Risk: Critical 9.4 CVSS Remote Code Execution Hits protobuf.js
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 02:54:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVSS 9.4 #infosec #JavaScript Security #Node.js Security #Patch Alert #protobuf.js #Protocol Buffers #rce #web development
Daily CyberSecurity
220 Million at Risk: Critical 9.4 CVSS Remote Code Execution Hits protobuf.js
A critical 9.4 CVSS vulnerability in protobuf.js puts 220 million monthly downloads at risk of RCE. Patch your Node.js and browser apps to version 8.0.1+.
25 views
Daily Writeups
⤷ Title: Critical MongoDB Flaw CVE-2026-8053 Paves the Way for Server Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 01:09:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_8053 #Cyber Security #database security #infosec #Mongod #mongodb #Patch Alert #rce #Time_Series Data
Daily CyberSecurity
Critical MongoDB Flaw CVE-2026-8053 Paves the Way for Server Takeover
Urgent: A memory corruption flaw in MongoDB time-series collections (CVE-2026-8053) enables server takeover. Patch to versions 8.3.2, 8.0.23, or 7.0.34 now.
10 views
Daily Writeups
⤷ Title: Critical Policy Bypass Flaw Threatens OpenStack Mistral Workflow Environments
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 02:02:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #Cloud Security #CVE_2026_41283 #OpenStack Mistral #Policy Enforcement Bypass #Workflow Service Security
Daily CyberSecurity
Critical Policy Bypass Flaw Threatens OpenStack Mistral Workflow Environments
Add as a preferredsource on Google Insufficient Access Controls inside Mistral API OpenStack Mistral workflow service users must
7 views
Daily Writeups
⤷ Title: CodeIgniter Vulnerability Enables Arbitrary Code Execution (CVSS 9.8)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 00:54:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CodeIgniter #CVE_2026_48062 #File Upload Vulnerability #PHP Security #rce
Daily CyberSecurity
CodeIgniter Vulnerability Enables Arbitrary Code Execution (CVSS 9.8)
A serious CodeIgniter vulnerability has put many PHP web applications at risk. Tracked as CVE-2026-48062, the flaw carries a critical CVSS score of 9.8. Moreover, it can hand attackers full arbitr…
11 views
Daily Writeups
⤷ Title: Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 17:13:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Adobe Security #APSB26_68 #Arbitrary Code Execution #ColdFusion vulnerability #CVE_2026_48276 #CVSS 10 #rce
Daily CyberSecurity
Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution
TL;DR Adobe shipped fixes for 11 Adobe ColdFusion vulnerabilities on 30 June 2026. Six earn a perfect CVSS score of 10.0 and allow arbitrary code execution. Adobe rates the update priority 1, its …
12 views
Daily Writeups
⤷ Title: Active ColdFusion Arbitrary Code Execution Flaw Scores CVSS 10
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 04:09:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #ColdFusion #CVE_2026_48282 #Path Traversal
Daily CyberSecurity
Active ColdFusion Arbitrary Code Execution Flaw Scores CVSS 10
TL;DR CVE-2026-48282, a critical CVSS 10 ColdFusion arbitrary code execution vulnerability, is under active attack. Hackers are exploiting this path traversal flaw in the wild. Administrators must…
10 views
Daily Writeups
⤷ Title: UltraVNC Repeater Vulnerabilities Allow Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 02:20:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #buffer overflow #CVE_2026_7839 #CVE_2026_7840 #Hardcoded Password #Remote Access #UltraVNC #UltraVNC repeater
Daily CyberSecurity
UltraVNC Repeater Vulnerabilities Allow Remote Code Execution
TL;DR Researchers disclosed two UltraVNC repeater vulnerabilities in the tool’s HTTP admin server. One allows arbitrary code execution without any login. The other exposes a hardcoded admin …
8 views
Daily Writeups
⤷ Title: Foxit PDF Reader Flaws Enable Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 15:34:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_13126 #CVE_2026_57239 #Foxit PDF Editor #Foxit PDF reader #PDF vulnerability #use after free
Daily CyberSecurity
Foxit PDF Reader Flaws Enable Arbitrary Code Execution
TL;DR Foxit shipped Foxit PDF Reader 2026.1.2 and PDF Editor 2026.1.2 for Windows. The release fixes 28 security flaws. Twenty of them can lead to arbitrary code execution when someone opens a cra…
21 views
Daily Writeups
⤷ Title: CVE-2026-0288: PAN-OS Buffer Overflow Can Execute Arbitrary Code
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 02:00:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #buffer overflow #CVE_2026_0288 #firewall security #Palo Alto Networks #PAN_OS #User_ID Terminal Server Agent
Daily CyberSecurity
CVE-2026-0288: PAN-OS Buffer Overflow Can Execute Arbitrary Code
TL;DR Palo Alto Networks disclosed a PAN-OS buffer overflow tracked as CVE-2026-0288. It sits in the User-ID Terminal Server Agent. An unauthenticated attacker on the network could crash the firew…
24 views
Daily Writeups
⤷ Title: HPLIP Vulnerability CVE-2026-14544 (CVSS 9.8) Allows Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 06:05:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_14544 #CVE_2026_8631 #CVE_2026_8632 #hpcups #HPLIP #HPLIP vulnerability #integer overflow #Linux printing
Daily CyberSecurity
HPLIP Vulnerability CVE-2026-14544 (CVSS 9.8) Allows Arbitrary Code Execution
TL;DR Red Hat disclosed a critical HPLIP vulnerability, tracked as CVE-2026-14544, with a CVSS score of 9.8. The flaw lets a remote attacker reach arbitrary code execution or privilege escalation …
18 views
Daily Writeups
⤷ Title: Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 08:30:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #APT #Arbitrary Code Execution #Canonical #CVE_2026_11386 #Root Privileges #Ubuntu #Ubuntu Pro Client #ubuntu_advantage_tools #USN_8555_1
Daily CyberSecurity
Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges
TL;DR Canonical shipped fixes for CVE-2026-11386 in USN-8555-1 on July 16, 2026. This Ubuntu Pro Client vulnerability scores CVSS 9.0 and can end in arbitrary code execution with root privileges. …
37 views
Daily Writeups
⤷ Title: Mobile AI Assistant Vulnerabilities Expose Security Flaws
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 13:11:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Assistant #arbitrary code execution #Machine Vision Exploit #mobile security #Smartphone Vulnerability
Information Security News
Mobile AI Assistant Vulnerabilities Expose Security Flaws
The Emergence of a New Attack Vector Mobile artificial intelligence assistants, designed to operate smartphones autonomously, represent a novel tool for cyberattacks. Specialists have demonstrated…
16 views
Daily Writeups
⤷ Title: JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:22:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_64812 #CVE_2026_64813 #CVE_2026_65907 #IntelliJ IDEA #JetBrains #JetBrains vulnerabilities #TeamCity
Daily CyberSecurity
JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development
TL;DR JetBrains fixed 18 vulnerabilities across GoLand, IntelliJ IDEA, PhpStorm, PyCharm, TeamCity, and WebStorm. Two IntelliJ IDEA flaws in Remote Development sessions carry a maximum CVSS score …
13 views
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
21 views
Daily Writeups
⤷ Title: Adobe Campaign Classic CVE-2026-48449 Enables Code Execution at CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 02:41:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe #Adobe Campaign Classic #Arbitrary Code Execution #CVE_2026_48448 #CVE_2026_48449 #rce
Daily CyberSecurity
Adobe Campaign Classic CVE-2026-48449 Enables Code Execution at CVSS 10.0
TL;DR Adobe patched two critical flaws in Adobe Campaign Classic on July 29, 2026. The worst, CVE-2026-48449, scores a perfect CVSS 10.0 and allows arbitrary code execution. A second bug, CVE-2026…
8 views
Daily Writeups
⤷ Title: Adobe Campaign Classic CVE-2026-48331 Scores CVSS 10.0 for Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 02:21:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe #Adobe Campaign Classic #Arbitrary Code Execution #CVE_2026_48331 #patch #sql injection #ssrf #Vulnerability
Daily CyberSecurity
Adobe Campaign Classic CVE-2026-48331 Scores CVSS 10.0 for Arbitrary Code Execution
TL;DR Adobe published a Priority 1 security update for Adobe Campaign Classic. The patch resolves seven severe flaws, including three bugs with a CVSS score of 10.0. Consequently, attackers can ex…
7 views