Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Critical Versa Director Flaw (CVSS 9.8): Hardcoded Credentials Grant Root Access, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 02:19:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #default credentials #Hardcoded Passwords #Network Management #proof_of_concept #Remote Access #root access #sudo #Versa Director
Daily CyberSecurity
Critical Versa Director Flaw (CVSS 9.8): Hardcoded Credentials Grant Root Access, PoC Available
A critical flaw (CVE-2025-24288, CVSS 9.8) in Versa Director exposes hardcoded default credentials for high-privilege accounts with sudo access. PoC released. Update now
31 views
Daily Writeups
⤷ Title: IBM X-Force Uncovers Azure Arc Flaws: Hybrid-Cloud Tool Becomes Stealthy RCE & Privilege Escalation Vector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:19:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Azure Arc #cybersecurity #DPAPI_NG #Hardcoded Secrets #hybrid cloud #IBM X_Force #Microsoft Azure #persistence #privilege escalation #rce #Remote Code Execution #Service Principal #supply chain attack
Daily CyberSecurity
IBM X-Force Uncovers Azure Arc Flaws: Hybrid-Cloud Tool Becomes Stealthy RCE & Privilege Escalation Vector
IBM X-Force reveals Azure Arc can be exploited for RCE and privilege escalation via hardcoded secrets, recoverable credentials, and overscoped roles, turning it into a stealthy threat vector.
30 views
Daily Writeups
⤷ Title: Hardcoded Credentials & Command Injection Found in HPE Aruba Instant On Access Points
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 09:45:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #Command Injection #cybersecurity #hardcoded credentials #HPE Aruba #Instant On Access Points
Daily CyberSecurity
Hardcoded Credentials & Command Injection Found in HPE Aruba Instant On Access Points
HPE Aruba warns of critical flaws in Instant On Access Points (CVE-2025-37103) allowing unauthenticated admin bypass via hardcoded credentials and authenticated command injection.
28 views
Daily Writeups
⤷ Title: Ruckus Wireless Exposed: 9 Critical Vulnerabilities Leave Wi-Fi Management Systems Wide Open, No Patch!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:38:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cybersecurity #hardcoded credentials #Network Director #rce #Remote Code Execution #RND #Ruckus Wireless #ssh #Virtual SmartZone #vSZ #Vulnerability
Daily CyberSecurity
Ruckus Wireless Exposed: 9 Critical Vulnerabilities Leave Wi-Fi Management Systems Wide Open, No Patch!
Multiple critical flaws (CVE-2025-44954, -44957, -44963, -44955, -6243) in Ruckus vSZ/RND allow unauthenticated RCE, auth bypass via hardcoded SSH keys and JWT.
22 views
Daily Writeups
⤷ Title: CVE-2025-7503 (CVSS 10): Hidden Backdoor in Popular IP Camera Grants Hackers Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 02:38:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_7503 #cybersecurity #hardcoded credentials #IoT security #IP Camera #root access #Shenzhen Liandian #surveillance #Telnet #Vulnerability
Daily CyberSecurity
CVE-2025-7503 (CVSS 10): Hidden Backdoor in Popular IP Camera Grants Hackers Root Access
A critical flaw (CVE-2025-7503, CVSS 10.0) in Shenzhen Liandian IP cameras allows root access via an undocumented, default-enabled Telnet service with hardcoded credentials. No patch available.
21 views
Daily Writeups
⤷ Title: Critical Flaw (CVE-2025-37103) in Aruba Instant On APs: Hardcoded Credentials Allow Full Admin Takeover – Patch Now!
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 23:52:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Access Point #Aruba Instant On #CVE_2025_37103 #cybersecurity #Hardcoded Credentials #HPE #network security #vulnerability
Penetration Testing Tools
Critical Flaw (CVE-2025-37103) in Aruba Instant On APs: Hardcoded Credentials Allow Full Admin Takeover – Patch Now!
HPE warns of a critical vulnerability (CVE-2025-37103, CVSS 9.8) in Aruba Instant On APs with hardcoded credentials, allowing unauthenticated full administrative access. Update immediately!
14 views
Daily Writeups
⤷ Title: TP-Link Archer C50 (EOL) Exposed: Hardcoded DES Key Allows Sensitive Config Decryption (CVE-2025-6982)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 00:22:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Archer C50 #cybersecurity #DES #encryption #end_of_life #EOL #Hardcoded Key #router #TP_Link #Vulnerability
Daily CyberSecurity
TP-Link Archer C50 (EOL) Exposed: Hardcoded DES Key Allows Sensitive Config Decryption (CVE-2025-6982)
The EOL TP-Link Archer C50 router has a critical hardcoded DES key (CVE-2025-6982), allowing attackers to decrypt sensitive configuration files, including admin credentials and Wi-Fi passwords.
11 views
Daily Writeups
⤷ Title: CISA Alert: Critical Flaws in Tigo Energy Solar Devices Allow Remote Takeover of Solar Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:21:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Command Injection #Critical Infrastructure #CVE_2025_7768 #cybersecurity #Hard_coded Credentials #hardcoded credentials #ICS #IOT #Solar #Solar Systems #Tigo Energy #Vulnerability
Daily CyberSecurity
CISA Alert: Critical Flaws in Tigo Energy Solar Devices Allow Remote Takeover of Solar Systems
In a critical advisory issued by the Cybersecurity and Infrastructure Security Agency (CISA), newly discovered vulnerabilities in Tigo Energy’s Cloud Connect Advanced (CCA) device could allow atta…
14 views
Daily Writeups
⤷ Title: PATCH NOW: Critical Gladinet RCE Flaw Exploits Hardcoded Crypto to Steal Keys
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:25:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #AES #CentreStack #CVE_2025_30406 #cybersecurity #Gladinet #Hardcoded Key #Huntress #RCE #Triofox #ViewState Deserialization
Penetration Testing Tools
PATCH NOW: Critical Gladinet RCE Flaw Exploits Hardcoded Crypto to Steal Keys
Gladinet is facing fresh trouble once again: vulnerabilities have been uncovered in its CentreStack and Triofox products stemming
10 views
Daily Writeups
⤷ Title: Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:11:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_67809 #CVE_2025_68645 #Email Security #hardcoded credentials #infosec #lfi #local file inclusion #Patch Update #ZCS #Zimbra
Daily CyberSecurity
Zimbra Under Siege: High-Severity LFI Vulnerability Exposes Internal Files to Unauthenticated Attackers
Administrators of the popular Zimbra Collaboration Suite (ZCS) are being urged to patch immediately after the discovery of two distinct security vulnerabilities. The most severe of the pair allows…
28 views
Daily Writeups
⤷ Title: CVE-2025-68926: Critical Hardcoded Credential Flaw Exposes RustFS Storage Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 00:05:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #CVE_2025_68926 #Cyber Security #data destruction #gRPC Security #hardcoded credentials #Object Storage #Rust Programming #RustFS
Daily CyberSecurity
CVE-2025-68926: Critical Hardcoded Credential Flaw Exposes RustFS Storage Clusters
RustFS, a distributed object storage system celebrated for leveraging the memory safety and performance of the Rust programming language, has stumbled over a decidedly old-school security hurdle. …
31 views
Daily Writeups
⤷ Title: Double Critical: Hardcoded Secrets Expose Ruckus IoT Controllers to Root RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 00:16:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_69425 #CVE_2025_69426 #Docker escape #hardcoded credentials #IoT security #Root Privilege Escalation #Ruckus Networks #vRIoT Controller
Daily CyberSecurity
Double Critical: Hardcoded Secrets Expose Ruckus IoT Controllers to Root RCE
Two CVSS 10 flaws (CVE-2025-69425 & CVE-2025-69426) hit Ruckus vRIoT. Hardcoded secrets allow attackers to seize root access. Update to v3.0.0.0 now.
11 views
Daily Writeups
⤷ Title: Signage Hijack: Samsung MagicInfo9 Flaws (CVSS 9.8) Expose Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:16:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25200 #CVE_2026_25201 #CVE_2026_25202 #Digital Signage #hardcoded credentials #MagicInfo9 #Patch Alert #rce #samsung #Stored XSS
Daily CyberSecurity
Signage Hijack: Samsung MagicInfo9 Flaws (CVSS 9.8) Expose Servers
Samsung MagicInfo9 has critical flaws (CVSS 9.8) including hardcoded passwords and RCE. Update to v21.1090.1 immediately to secure your digital signage.
16 views
Daily Writeups
⤷ Title: Factory Flaw: Critical WAGO Switch Vulnerabilities (CVSS 9.8) Allow Remote Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CERT@VDE #CVE_2026_22904 #CVE_2026_22906 #Hardcoded Encryption Key #ICS security #Industrial Managed Switch #OT Security #SCADA #WAGO 852 Series
Daily CyberSecurity
Factory Flaw: Critical WAGO Switch Vulnerabilities (CVSS 9.8) Allow Remote Takeover
Critical flaws in WAGO 852 switches (CVSS 9.8) allow remote takeover via hardcoded keys & buffer overflows. Update firmware 2.64 immediately.
11 views
Daily Writeups
⤷ Title: Critical Hardcoded Credential Bug Hits Nexus Repository 3
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 14:05:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_5189 #DevSecOps #hardcoded credentials #OrientDB #Patch Alert #rce #Repository Management #Sonatype Nexus #Supply Chain Security #Vulnerability
Daily CyberSecurity
Critical Hardcoded Credential Bug Hits Nexus Repository 3
Sonatype Nexus Repository (CVE-2026-5189) faces a critical 9.2 CVSS flaw. A hardcoded database credential grants full host access. Patch to v3.71.0 now!
16 views
Daily Writeups
⤷ Title: Mass Exploitation Alert: Hardcoded Credentials in Four-Faith Industrial Routers (CVE-2024-9643) Hijacked for Botnets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 02:49:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Botnet Takeover #Crowdsec #CVE_2024_9643 #F3x36 #Four_Faith #hardcoded credentials #Industrial Cellular Router #infosec #IoT security #Mass Exploitation #Nuclei Template
Daily CyberSecurity
Mass Exploitation Alert: Hardcoded Credentials in Four-Faith Industrial Routers (CVE-2024-9643) Hijacked for Botnets
Urgent: CrowdSec warns CVE-2024-9643 in Four-Faith routers has hit mass exploitation phase. Attackers abuse hardcoded logins to build botnets. Patch now!
11 views
Daily Writeups
⤷ Title: Critical Eppendorf Bioreactor Security Flaw Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 00:28:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bioreactor Vulnerability #CVE_2026_7251 #Eppendorf BioFlo 320 #Hardcoded Password #ICS security #Laboratory Security
Daily CyberSecurity
Critical Eppendorf Bioreactor Security Flaw Disclosed
A critical Eppendorf bioreactor security flaw exposes systems via a hard-coded VNC password. Learn how to secure your BioFlo 320 device.
26 views
Daily Writeups
⤷ Title: Acer Router Security Flaws Earn Maximum 10.0 CVSS Scores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 09:38:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #Acer Wave 7 #CVE_2026_49200 #CVE_2026_49201 #Firmware Patch #Hardcoded Key #Router Vulnerabilities
Daily CyberSecurity
Acer Router Security Flaws Earn Maximum 10.0 CVSS Scores
Acer router security flaws expose cleartext credentials. Learn how these critical firmware bugs threaten home networks and how to update.
14 views
Daily Writeups
⤷ Title: UltraVNC Repeater Vulnerabilities Allow Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 02:20:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #buffer overflow #CVE_2026_7839 #CVE_2026_7840 #Hardcoded Password #Remote Access #UltraVNC #UltraVNC repeater
Daily CyberSecurity
UltraVNC Repeater Vulnerabilities Allow Remote Code Execution
TL;DR Researchers disclosed two UltraVNC repeater vulnerabilities in the tool’s HTTP admin server. One allows arbitrary code execution without any login. The other exposes a hardcoded admin …
8 views
Daily Writeups
⤷ Title: StoneFly Storage Concentrator Flaws Allow Unauthenticated Root Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 00:55:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA ICS advisory #Command Injection #CVE_2026_55721 #CVE_2026_56413 #CVE_2026_56415 #hardcoded credentials #sql injection #Stonefly #StoneFly Storage Concentrator
Daily CyberSecurity
StoneFly Storage Concentrator Flaws Allow Unauthenticated Root Access
TL;DR CISA published an advisory for five StoneFly Storage Concentrator vulnerabilities on 30 June 2026. Two rate a maximum CVSS score of 10.0. Both let an unauthenticated attacker run commands as…
12 views