Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: Chrome 144 Security Alert: V8 & Libvpx Flaws Expose Systems to Hacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 02:05:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome Update #CVE_2026_1861 #CVE_2026_1862 #google chrome #Heap Buffer Overflow #libvpx #Patch Alert #Type Confusion #V8 JavaScript engine
Daily CyberSecurity
Chrome 144 Security Alert: V8 & Libvpx Flaws Expose Systems to Hacks
Google Chrome patches high-severity V8 (CVE-2026-1862) and libvpx (CVE-2026-1861) flaws. Update to version 144.0.7559.132 immediately.
14 views
Daily Writeups
⤷ Title: 30-Year-Old Bug: High-Severity libpng Flaw (CVSS 8.3) Exposes Millions of Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 02:58:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25646 #Denial of Service #Heap Buffer Overflow #image processing #Legacy Vulnerability #libpng #Open Source Security #Patch Alert #PNG #Remote Code Execution
Daily CyberSecurity
30-Year-Old Bug: High-Severity libpng Flaw (CVSS 8.3) Exposes Millions of Apps
A 30-year-old heap overflow in libpng (CVE-2026-25646) exposes apps to DoS & RCE. The flaw affects all versions since inception. Update to v1.6.55 now.
35 views
Daily Writeups
⤷ Title: Urgent Chrome Patch: Google Fixes High-Severity PDF and V8 Engine Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 13:52:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chrome Update #CVE_2026_2648 #CVE_2026_2649 #CVE_2026_2650 #Cyber Security #google chrome #Heap Buffer Overflow #integer overflow #Patch Alert #PDFium #V8 Engine
Daily CyberSecurity
Urgent Chrome Patch: Google Fixes High-Severity PDF and V8 Engine Flaws
Google releases an urgent Chrome update to patch high-severity flaws in PDFium (CVE-2026-2648) and the V8 engine (CVE-2026-2649). Update to 145 now.
23 views
Daily Writeups
⤷ Title: Chrome 146 Arrives with 29 Security Fixes: Critical WebML Flaw Discovered
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:45:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #bug bounty #Chrome 146 #CVE_2026_3913 #cybersecurity #Google Chrome Update #Heap Buffer Overflow #infosec #Patch Alert #WebML Vulnerability
Daily CyberSecurity
Chrome 146 Arrives with 29 Security Fixes: Critical WebML Flaw Discovered
Google releases Chrome 146, fixing 29 vulnerabilities including a critical heap buffer overflow in WebML (CVE-2026-3913). Update your browser immediately.
13 views
Daily Writeups
⤷ Title: The $86,000 Patch: Chrome 147 Crushes “Critical” WebML Memory Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 01:54:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Chrome 147 #CVE_2026_5858 #CVE_2026_5859 #cybersecurity #Google Chrome Update #Heap Buffer Overflow #integer overflow #memory safety #V8 Engine #WebML
Daily CyberSecurity
The $86,000 Patch: Chrome 147 Crushes "Critical" WebML Memory Flaws
Google Chrome 147 is out with critical security fixes for WebML and V8. Protect your browser from overflows and memory leaks—update to version 147 now!
18 views
Daily Writeups
⤷ Title: Critical—9 Vulnerabilities in Orthanc DICOM Servers Threaten Medical Data Integrity
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 14:10:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_5438 #DICOM #healthcare security #Heap Buffer Overflow #Hospital Security #Information Disclosure #infosec #medical imaging #Orthanc #Patch Alert #rce
Daily CyberSecurity
Critical—9 Vulnerabilities in Orthanc DICOM Servers Threaten Medical Data Integrity
Orthanc v1.12.11 patches 9 critical flaws, including RCE risks and "decompression bombs" in DICOM servers. Secure your healthcare data—upgrade now!
27 views
Daily Writeups
⤷ Title: Chrome 147 Update: Google Patches Critical $90,000 ANGLE Flaw and 30 Other Security Gaps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 01:32:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ANGLE #browser security #bug bounty #CVE_2026_6296 #cybersecurity #google chrome #Heap Buffer Overflow #infosec #security update #Skia
Daily CyberSecurity
Chrome 147 Update: Google Patches Critical $90,000 ANGLE Flaw and 30 Other Security Gaps
Google patches 31 Chrome flaws, including a $90K graphics engine bug. Update to version 147.0.7727.101 now to block critical sandbox escapes and RCE risks.
13 views
Daily Writeups
⤷ Title: Critical 18-Year-Old NGINX RCE (CVE-2026-42945) and GitHub PoC Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 00:20:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42945 #Cyber Security #github #Heap Buffer Overflow #infosec #nginx #NGINX Plus #Patch Alert #PoC #proof_of_concept #rce #Rewrite Module
Daily CyberSecurity
Critical 18-Year-Old NGINX RCE (CVE-2026-42945) and GitHub PoC Disclosed
Security researcher Zhenpeng (Leo) Lin of depthfirst has unveiled a critical, 18-year-old vulnerability lurking within NGINX. The flaw, tracked as CVE-2026-42945 (CVSS 9.2), is a deterministic hea…
18 views
Daily Writeups
⤷ Title: NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:51:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Mitigation #CVE_2026_42945 #Denial of Service #F5 Networks #Heap Buffer Overflow #Honeypot Telemetry #NGINX Rift #ngx_http_rewrite_module #Remote Code Execution #VulnCheck
Daily CyberSecurity
NGINX Rift: Critical 18-Year-Old Flaw CVE-2026-42945 Actively Exploited to Crash Servers
Critical 18-year-old "NGINX Rift" flaw CVE-2026-42945 is under active exploitation. Learn how to patch your proxies and block the unauthenticated heap overflow.
13 views
Daily Writeups
⤷ Title: PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:51:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_2005 #database security #Heap Buffer Overflow #infosec #Patch Alert #pgcrypto #PoC Exploit #PostgreSQL #Public Disclosure #rce #Superuser Escalation
Daily CyberSecurity
PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
Technical details and GitHub PoC exploits disclosed for PostgreSQL pgcrypto CVE-2026-2005. Low-privilege users can seize root superuser RCE. Patch now!
11 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 03:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8711 #Denial of Service #F5 Security Advisory #Heap Buffer Overflow #NGINX JavaScript #njs module #Patch Alert #Remote Code Execution #reverse proxy #Web Infrastructure
Daily CyberSecurity
Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
F5 warns of a critical 9.2 CVSS flaw (CVE-2026-8711) in NGINX JavaScript (njs). Unauthenticated attackers can trigger heap overflows and potential RCE.
18 views
Daily Writeups
⤷ Title: New 7-Zip Heap Buffer Overflow Disclosed with Public PoC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 01:00:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #7_Zip #CVE_2026_48095 #cybersecurity news #Exploit #GHSL #Heap Buffer Overflow #Vulnerability
Daily CyberSecurity
New 7-Zip Heap Buffer Overflow Disclosed with Public PoC
Discover the latest 7-Zip heap buffer overflow vulnerability (CVE-2026-48095). Learn how an NTFS exploit allows code execution and how to stay safe.
13 views
Daily Writeups
⤷ Title: CVE-2026–42945: Understanding NGINX Rift
════════════════════════
𐀪 Author: Mr. Spider
════════════════════════
ⴵ Time: Thu, 28 May 2026 13:47:13 GMT
════════════════════════
⌗ Tags: #heap_buffer_overflow #nginx_rift #rce_vulnerability #cve #nginx
Medium
CVE-2026–42945: Understanding NGINX Rift
NGINX Rift is a critical heap buffer overflow in NGINX’s ngx_http_rewrite_module. Under specific rewrite configurations, an unauthenticated…
53 views
Daily Writeups
⤷ Title: FreeSWITCH Heap Buffer Overflow Bugs Expose Servers to Pre-Auth Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 01:01:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_49840 #CVE_2026_49841 #FreeSWITCH #Heap Buffer Overflow #libesl #mod_verto
Daily CyberSecurity
FreeSWITCH Heap Buffer Overflow Bugs Expose Servers to Pre-Auth Attacks
Two pre-auth FreeSWITCH heap buffer overflow bugs (CVE-2026-49841, CVE-2026-49840) hit mod_verto and libesl. Update to v1.11.1 to stay safe.
12 views
Daily Writeups
⤷ Title: CVE-2026-56000: Use-After-Free Flaw Hits X.Org Server and Xwayland
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 14:03:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_55999 #CVE_2026_56000 #Heap Buffer Overflow #Linux Security #use after free #X.Org Server #XWayland
Daily CyberSecurity
CVE-2026-56000: Use-After-Free Flaw Hits X.Org Server and Xwayland
TL;DR X.Org shipped fixes for two memory-safety flaws in the X.Org Server and Xwayland. The more severe one, CVE-2026-56000, is a use-after-free rated CVSS 9.0. The second, CVE-2026-55999, is a he…
13 views
Daily Writeups
⤷ Title: 7-Zip Vulnerability CVE-2026-14266 Allows Remote Code Execution Through Crafted XZ Data
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 16:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #7_Zip #CVE_2026_14266 #Heap Buffer Overflow #patch management #Remote Code Execution #XZ #Zero Day Initiative
Daily CyberSecurity
7-Zip Vulnerability CVE-2026-14266 Allows Remote Code Execution Through Crafted XZ Data
TL;DR The Zero Day Initiative published advisory ZDI-26-444 on July 15, 2026. It covers a 7-Zip vulnerability tracked as CVE-2026-14266, scored CVSS 7.0, that can lead to remote code execution. Ve…
10 views
Daily Writeups
⤷ Title: Public PoC Exploit Exposes CVE-2026-44421 FreeRDP Heap Buffer Overflow to Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 15:01:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_44421 #FreeRDP #Heap Buffer Overflow
Daily CyberSecurity
Public PoC Exploit Exposes CVE-2026-44421 FreeRDP Heap Buffer Overflow to Remote Code Execution
FreeRDP developers recently patched a critical flaw affecting numerous workstations worldwide. Security researchers publicly disclosed the details and the proof-of-concept exploit code for this Fr…
12 views
Daily Writeups
⤷ Title: libssh2 Flaws Let Malicious SSH Servers Corrupt Client Memory
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 02:19:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_66032 #CVE_2026_66033 #CVE_2026_66034 #CVE_2026_66035 #double_free #Heap Buffer Overflow #libssh2 #libssh2 vulnerabilities #malicious SSH server #SFTP #SSH Client #VulnCheck
Daily CyberSecurity
libssh2 Flaws Let Malicious SSH Servers Corrupt Client Memory
TL;DR Four new libssh2 vulnerabilities put SSH and SFTP clients at risk. Each one lets a malicious SSH server corrupt memory on the machine that connects to it. VulnCheck disclosed the flaws on Ju…
14 views
Daily Writeups
⤷ Title: Adobe Photoshop APSB26-130: Eight Critical Flaws Including Seven RCEs Patched
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 14:35:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Adobe Photoshop #APSB26_130 #Creative Cloud #CVE_2026_82007 #Heap Buffer Overflow #Integer Overflow #RCE #security update
Information Security News
Adobe Photoshop APSB26-130: Eight Critical Flaws Including Seven RCEs Patched
Photoshop has received an uncommonly weighty patch in which nearly every remediated flaw leads to the execution of foreign code. Adobe has released update APSB26-130 for Photoshop 2025 and 2026 on…
34 views
Daily Writeups
⤷ Title: Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 20:19:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_39919 #Ghostscript #Heap Buffer Overflow #ImageMagick #Linux Security #Remote Code Execution #Wordfence #wordpress security
Daily CyberSecurity
Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution
TL;DR Artifex released Ghostscript 10.08.0 on September 8, 2026, fixing a critical heap buffer overflow rated CVSS 9.8. Wordfence found the Ghostscript vulnerability and turned a crafted PDF into …
26 views