Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Tue, 14 Mar 2023 03:44:23 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Linux Privilege Escalation with LD_PRELOAD (Sudo)
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/a13e0b755ede
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cybersecurity #environment_variables #privilege_escalation #hackthebox #linux
Medium
Linux Privilege Escalation with LD_PRELOAD (Sudo)
PREREQUISITE KNOWLEDGE
11 views
Daily Writeups
β€· Title: Why You Should Never Hardcode Secrets in Your Code
════════════════════════
π€ͺ Author: Prasanth Rao
════════════════════════
β΄΅ Time: Fri, 12 Sep 2025 10:33:08 GMT
════════════════════════
βŒ— Tags: #security #dotenv #application_security #best_practices #environment_variables
Medium
Why You Should Never Hardcode Secrets in Your Code
Why managing secrets securely is crucial for building safe, scalable, and maintainable applications
15 views
Daily Writeups
β€· Title: Frontend Secrets: The Good, The Bad, and The Exposed
════════════════════════
π€ͺ Author: Ali Jahangiri
════════════════════════
β΄΅ Time: Thu, 09 Oct 2025 09:02:50 GMT
════════════════════════
βŒ— Tags: #management_secrets #environment_variables #dotenv #api_security #nextjs
Medium
Frontend Secrets: The Good, The Bad, and The Exposed
If you’ve ever pushed an API key to GitHub, struggled to configure different settings for development and production, or wondered why your…
28 views
Daily Writeups
β€· Title: The β€œlc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 25 Dec 2025 00:22:06 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #AI Agents #CVE_2025_68664 #data exfiltration #Environment Variables #Information Disclosure #LangChain #LLM Security #Prompt injection #Python Security #Serialization Injection
Daily CyberSecurity
The β€œlc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
A critical vulnerability was found in LangChain, the popular open-source framework used to power Large Language Model (LLM) agents. The flaw, tracked as CVE-2025-68664, carries a severe CVSS score…
32 views
Daily Writeups
β€· Title: The AI Weak Link: How a Third-Party Breach Exposed Vercel Customer Secrets
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Tue, 21 Apr 2026 09:17:43 +0000
════════════════════════
βŒ— Tags: #Data Leak #API Keys #cloud security #Context.ai #Cybersecurity 2026 #data breach #Environment Variables #Mandiant #Next.js #OAuth Security #supply chain attack #Vercel
Penetration Testing Tools
The AI Weak Link: How a Third-Party Breach Exposed Vercel Customer Secrets
The month of April concluded for the American firm Vercel with a distressing incident that precipitously transcended the
22 views
Daily Writeups
β€· Title: New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 21 May 2026 08:40:14 +0000
════════════════════════
βŒ— Tags: #Malware #.NET malware #Cyber Security #Environment Variables #FortiGuard Labs #infosec #Infostealer #PawsRunner #Phishing Lure #PureLogs #Steganography Loader #TXZ Archive
Daily CyberSecurity
New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer
FortiGuard Labs warns of PawsRunner, a new .NET steganography loader hiding PureLogs infostealer payloads inside cat images to bypass corporate EDR.
16 views
Daily Writeups
β€· Title: Railway Security Incident Exposes Customer Environment Variables and Pauses All Deployments
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Thu, 22 Oct 2026 03:01:35 +0000
════════════════════════
βŒ— Tags: #Data Leak #API keys #Cloud Security #Environment Variables #PaaS #Railway #security incident #supply chain attack
Daily CyberSecurity
Railway Security Incident Exposes Customer Environment Variables and Pauses All Deployments
On October 21, Railway detected anomalous activity in systems that store customer environment variables. In its disclosure of the Railway security incident, the cloud platform warned that an unaut…
20 views
Daily Writeups
β€· Title: Railway Breach Puts Developer Secrets at Risk
════════════════════════
π€ͺ Author: Nam Phong
════════════════════════
β΄΅ Time: Mon, 26 Oct 2026 09:12:00 +0000
════════════════════════
βŒ— Tags: #Data Leak #AI Infrastructure #API Keys #cloud security #Credential Theft #data breach #Environment Variables #Railway #secrets management
Information Security News
Railway Breach Puts Developer Secrets at Risk
Keys to the Cloud, Possibly in Stranger Hands Access keys to cloud services may have fallen into the wrong hands. The cause is a compromise of a platform where developers trusted their secrets to …
12 views