Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: Critical cPanel Flaw (CVSS 9.3) Allows Directory Traversal LPE for Full Server Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 04:29:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #CPanel #Critical Vulnerability #Directory Traversal #LPE #privilege escalation #Shared Hosting #Team Manager API
Daily CyberSecurity
Critical cPanel Flaw (CVSS 9.3) Allows Directory Traversal LPE for Full Server Takeover
A Critical (CVSS 9.3) LPE flaw in cPanel's Team Manager API allows a standard user to break out of their directory via path traversal and compromise the shared hosting server. Update immediately.
35 views
Daily Writeups
⤷ Title: Student Sells Hacked Sites: Beima Web Shell Undetectable, Targets .Gov & .Edu
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:08:15 +0000
════════════════════════
⌗ Tags: #Malware #Bangladesh #Beima #Compromised Websites #cPanel #cybercrime #cybersecurity #Howler Cell #Telegram #Web Shell #WordPress
Penetration Testing Tools
Student Sells Hacked Sites: Beima Web Shell Undetectable, Targets .Gov & .Edu
Researchers from Howler Cell have detailed an underground marketplace for compromised websites operated by students and freelancers across
27 views
Daily Writeups
⤷ Title: cPanel Issues Emergency Patch for All Supported Versions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:16:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Vulnerability #CPanel #cybersecurity #infosec #Patch Alert #security update #Server Management #Server Security #SysAdmin #Web Hosting #WHM
Daily CyberSecurity
Exploited in the Wild: PoC Released for cPanel CVE-2026-41940 Authentication Bypass Zero-Day
cPanel issues emergency patches for a critical authentication vulnerability affecting all supported versions. Run /scripts/upcp --force immediately to patch.
14 views
Daily Writeups
⤷ Title: 44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 02:04:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CISA KEV #CPanel #CVE_2026_41940 #CVSS 9.8 #cybersecurity #infosec #Mirai botnet #ransomware #Server Security #WebPros #WHM
Daily CyberSecurity
44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge
CISA warns of cPanel CVE-2026-41940 (CVSS 9.8). 44,000 IPs compromised via authentication bypass, fueling ransomware and botnets. Patch by May 3rd!
25 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 01:57:05 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #CPanel #CVE_2026_41940 #CVSS 10 #cybersecurity #Express.js #infosec #patch management #Vulnerability Digest #WHM
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)
Weekly Triage: 1,134 new vulnerabilities found, including a 9.8 critical bypass in cPanel/WHM and active Express.js logic flaws. Patch your systems now.
14 views
Daily Writeups
⤷ Title: cPanel RCE & Critical vulnerability in Gemini CLI
════════════════════════
𐀪 Author: Stanislav Klevtsov
════════════════════════
ⴵ Time: Tue, 05 May 2026 14:14:07 GMT
════════════════════════
⌗ Tags: #cpanel #gemini #infosec #ai #cybersecurity
Medium
cPanel RCE & Critical vulnerability in Gemini CLI
Let’s start with cPanel
11 views
Daily Writeups
⤷ Title: Root Access at Risk: Perl Injection and Symlink Flaws Hit cPanel & WHM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 02:00:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_29202 #CVE_2026_29203 #infosec #Linux Server #Patch Alert #Perl Injection #privilege escalation #Web Hosting Security #WHM #WP Squared
Daily CyberSecurity
Root Access at Risk: Perl Injection and Symlink Flaws Hit cPanel & WHM
Update cPanel immediately! High-severity vulnerabilities (CVSS 8.8) allow Perl injection and privilege escalation. Protect your hosting environment now.
17 views
Daily Writeups
⤷ Title: Critical cPanel Auth Bypass CVE-2026-41940 Exploited by Thousands
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 12:37:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CPanel #CVE_2026_41940 #Cyber Security #Data Breach #infosec #Linux Server #Mr_Rot13 #Patch Alert #WHM #wordpress security #XLab
Daily CyberSecurity
Critical cPanel Auth Bypass CVE-2026-41940 Exploited by Thousands
Urgent: cPanel & WHM hit by global 9.8 CVSS auth bypass. Over 2,000 IPs are actively hijacking servers for data theft and ransomware. Patch immediately!
14 views
Daily Writeups
⤷ Title: cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:22:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CPanel #CVE_2026_29205 #CVE_2026_29206 #Cyber Security #infosec #Patch Alert #Server Security #sql injection #WHM #WP Squared
Daily CyberSecurity
cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi
cPanel & WHM fix 5 critical vulnerabilities (CVE-2026-29205). Fixes for arbitrary file read, SQLi, and privilege escalation are now live. Update now!
21 views
Daily Writeups
⤷ Title: CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:46:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Execution Safety #cPanel Vulnerability #CVE_2026_48172 #Cyber Security #infosec #LiteSpeed Plugin #privilege escalation #redisAble Exploit #Root Server Access #Web Hosting Security #WHM Patch
Daily CyberSecurity
CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
Urgent: Active attacks target the LiteSpeed User-End cPanel Plugin (CVE-2026-48172). Learn how to detect the exploit and secure your server root today.
15 views
Daily Writeups
⤷ Title: Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:37:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #cpanel_jsonapi_func=redisAble log grep #CVE_2026_48172 root access #David Strydom security researcher #LiteSpeed cPanel plugin exploit #LiteSpeed WHM Plugin 5.3.1.0 update #lsws.redisAble logic error #remove LiteSpeed cPanel plugin #shared hosting privilege escalation #shared hosting sandbox escape #WebPros ecosystem defense
Information Security News
Remediation of the Critical Privilege Escalation Flaw in LiteSpeed’s cPanel Extension
Perimeter Compromise and Systemic Risk LiteSpeed recently resolved a critical privilege escalation vulnerability within its user-facing cPanel plugin. This severe security defect is tracked global…
12 views
Daily Writeups
⤷ Title: LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 00:00:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CageFS #CloudLinux #CPanel #CVE_2026_54420 #LiteSpeed #privilege escalation #Shared Hosting
Daily CyberSecurity
LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)
CVE-2026-54420, a LiteSpeed cPanel privilege escalation flaw, is exploited in the wild to gain root on shared hosting. Patch to plugin v2.4.8 now.
12 views
Daily Writeups
⤷ Title: GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 02:29:19 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cPanel and WHM exploitation #Credential Theft #CVE_2026_41940 #GitHub Actions abuse #Packagist #supply chain attack
Daily CyberSecurity
GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign
At a Glance Actor or group Unattributed threat actor; no group name published Activity type GitHub Actions abuse, internet scanning, credential theft Targets Internet-facing cPanel and WHM servers…
19 views
Daily Writeups
⤷ Title: CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 01:01:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_58047 #CVE_2026_58048 #database security #http_request_smuggling #privilege escalation #Web Hosting Security #WHM
Daily CyberSecurity
CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
TL;DR: cPanel patched a cPanel root SQL execution flaw tracked as CVE-2026-58048, rated CVSS 9.4. A second, lower-severity bug, CVE-2026-58047, allows HTTP request smuggling under limited conditio…
31 views
Daily Writeups
⤷ Title: CVE-2026-67401: cPanel Flaw Grants Full Control of the Server
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 01:46:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_67401 #sql injection #Vulnerability
Daily CyberSecurity
CVE-2026-67401: cPanel Flaw Grants Full Control of the Server
A newly discovered cPanel SQL injection flaw exposes web hosting environments to total compromise. Threat actors can exploit this vulnerability to execute arbitrary code and take full control of t…
20 views
Daily Writeups
⤷ Title: Acronis cPanel Plugin Flaw Exploited in the Wild, Patch Now
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 07:29:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Acronis #Acronis Backup plugin #Backup Security #CPanel #exploited in the wild #Web Hosting Security #WHM
Daily CyberSecurity
Acronis cPanel Plugin Flaw Exploited in the Wild, Patch Now
TL;DR Acronis fixed a high-severity Acronis cPanel plugin vulnerability in its Backup plugin for cPanel and WHM. Attackers are already exploiting it in the wild. All users should update to a fixed…
13 views
Daily Writeups
⤷ Title: The $4 Hosting Account That Could Root an Entire Server
════════════════════════
𐀪 Author: Xpert4Cyber
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 18:51:10 GMT
════════════════════════
⌗ Tags: #web_development #infosec #cpanel #vulnerability #cybersecurity
Medium
The $4 Hosting Account That Could Root an Entire Server
The $4 Hosting Account That Could Root an Entire Server
15 views
Daily Writeups
⤷ Title: Critical cPanel Security Vulnerabilities Allow Root Escalation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 01:09:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_68490 #CVE_2026_87899 #CVE_2026_87900 #cybersecurity #privilege escalation #WHM #WP Toolkit
Daily CyberSecurity
Critical cPanel Security Vulnerabilities Allow Root Escalation
TL;DR On September 22, 2026, cPanel published security advisories addressing three security flaws across its hosting platform. These cPanel security vulnerabilities allow authenticated attackers t…
18 views
Daily Writeups
⤷ Title: cPanel Security Vulnerabilities Expose WHM Web Servers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 02:20:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #cybersecurity #privilege escalation #Vulnerability #WHM
Daily CyberSecurity
cPanel Security Vulnerabilities Expose WHM Web Servers
TL;DR cPanel published security advisories addressing three critical cPanel security vulnerabilities across supported server platforms. Specifically, these flaws permit stored cross-site scripting…
12 views
Daily Writeups
⤷ Title: cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:46:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_107663 #CVE_2026_109618 #CVE_2026_109619 #PHP2Shell #Web Hosting #WP Toolkit
Daily CyberSecurity
cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers
TL;DR cPanel has issued two security updates covering three CVEs. A cPanel PHP update fixes the critical PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, across EasyApache4 builds. Separately…
8 views