Daily Writeups
@Daily_Writeups
4.08K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.08K subscribers
Daily Writeups
⤷ Title: When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 06:02:19 GMT
════════════════════════
⌗ Tags: #user_input #injection #content_security_policy #bug_bounty #htmli
Medium
When “Safe” Isn’t Safe: Turning a Simple HTML Injection into a Real Security Story.
In bug bounty hunting, not every vulnerability needs flashy payloads or JavaScript execution to matter. Sometimes, the simplest flaws —…
20 views
Daily Writeups
⤷ Title: Freedom to Reboot: Microsoft Finally Separates Windows 11 Updates from the Power Menu
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 15:07:29 +0000
════════════════════════
⌗ Tags: #Windows #Build 26300.8289 #Microsoft Insider #Operating Systems #PC Performance #Power Menu #Tech News 2026 #User Experience #Windows 11 #Windows 11 26H2 #Windows Update
Daily CyberSecurity
Freedom to Reboot: Microsoft Finally Separates Windows 11 Updates from the Power Menu
Microsoft is fixing the most frustrating part of Windows 11. Build 26300.8289 separates updates from standard restart/shutdown and allows indefinite pauses.
14 views
Daily Writeups
⤷ Title: The End of Forced Reboots: Microsoft Grants Windows 11 Users Indefinite Update Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:35:15 +0000
════════════════════════
⌗ Tags: #Windows #Build 26300.8289 #Microsoft Insider #Operating Systems #PC Maintenance #Secure Future Initiative #Tech News 2026 #User Experience #Windows 11 #Windows 11 26H2 #Windows Update
Penetration Testing Tools
The End of Forced Reboots: Microsoft Grants Windows 11 Users Indefinite Update Control
Microsoft has resolved to render Windows updates significantly less intrusive, empowering users to defer installations with greater frequency,
13 views
Daily Writeups
⤷ Title: The 1.6 Billion User Pivot: Satya Nadella’s Plan to Fix Windows 11 and Save the 8GB PC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 08:39:04 +0000
════════════════════════
⌗ Tags: #Windows #8GB RAM #bing search #Microsoft #microsoft edge #OEM Partners #OS Performance #RAM Optimization #Satya Nadella #Tech Economics 2026 #User Engagement #Windows 10 #Windows 11
Daily CyberSecurity
The 1.6 Billion User Pivot: Satya Nadella’s Plan to Fix Windows 11 and Save the 8GB PC
Microsoft CEO Satya Nadella reveals a pivot to optimize Windows 11 for low-memory devices and reclaim user trust as active Windows users hit 1.6 billion.
13 views
Daily Writeups
⤷ Title: The SNEK Initiative Drops “Eris”: New Post-Exploit Framework Abuses Windows Fax Service for SYSTEM Root
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:29:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Session Takeover #Eris Exploit #local privilege escalation #MinGW_w64 Compilation #Post_Exploitation Tool #Registry Hijack #Silent Cleanup Task #The SNEK Initiative #User Account Control Bypass #Windows Fax Service
Penetration Testing Tools
The SNEK Initiative Drops "Eris": New Post-Exploit Framework Abuses Windows Fax Service for SYSTEM Root
A novel exploitation framework designed to escalate execution privileges within the Windows environment, designated as Eris, has emerged
15 views
Daily Writeups
⤷ Title: VoIP Backbone Exposed: Critical FreePBX Flaw (CVE-2026-46376) Allows Unauthenticated Access to User Portals
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:53:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_46376 #Cyber Security #FreePBX #Hard_coded Credentials #infosec #Patch Alert #Telecom Security #User Control Panel #User Management #VoIP Security
Daily CyberSecurity
VoIP Backbone Exposed: Critical FreePBX Flaw (CVE-2026-46376) Allows Unauthenticated Access to User Portals
FreePBX fixes critical 9.1 CVSS flaw (CVE-2026-46376) where hardcoded credentials grant unauthenticated portal access. Update your modules now!
28 views
Daily Writeups
⤷ Title: Zero-Trust Voice: Discord Finalizes Mandatory “DAVE” Encryption for All Audio and Video Streams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:49:06 +0000
════════════════════════
⌗ Tags: #Technology #Automated Content Moderation #Client Update Requirements #Discord DAVE Protocol #End_to_End Encryption #Messaging Layer Security #Multi_Party Cryptographic Handshake #Selective Forwarding Unit #Trail of Bits Audit #User Data Sovereignty #WebRTC Encoded Transform
Daily CyberSecurity
Zero-Trust Voice: Discord Finalizes Mandatory “DAVE” Encryption for All Audio and Video Streams
Discord, the widely celebrated communications architecture tailored for the global gaming constituency, has announced the universal initialization of mandatory end-to-end encryption (E2EE) across …
14 views
Daily Writeups
⤷ Title: When “Deleted” Isn’t Deleted: Investigating Context Persistence in ChatGPT Projects
════════════════════════
𐀪 Author: Anikerry
════════════════════════
ⴵ Time: Tue, 26 May 2026 00:23:16 GMT
════════════════════════
⌗ Tags: #glitch #bug_bounty #ai #user_experience #chatgpt
Medium
When “Deleted” Isn’t Deleted: Investigating Context Persistence in ChatGPT Projects
Part 1 – Introduction
21 views
Daily Writeups
⤷ Title: The Algorithmic Illusion: Threat Actors Weaponize Generative AI Shared Tunnels for Phishing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:14:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ad_blocking extension endpoint defense #ChatGPT Canvas phishing campaign #Claude.ai shared conversation exploit #ClickFix terminal command lure #Google Ads malware distribution #MacSync infostealer deployment #malicious browser search redirection #Shared AI chat malvertising #trusted domain signature spoofing #user generated content safety bounds
Information Security News
Shared AI Chat Malvertising: Fraudsters Weaponize ChatGPT & Claude
Hackers are deploying shared AI chat malvertising in Google Ads, exploiting trusted chatgpt.com and claude.ai links to infect users with malware.
21 views
Daily Writeups
⤷ Title: CVE-2026-0288: PAN-OS Buffer Overflow Can Execute Arbitrary Code
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 02:00:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #buffer overflow #CVE_2026_0288 #firewall security #Palo Alto Networks #PAN_OS #User_ID Terminal Server Agent
Daily CyberSecurity
CVE-2026-0288: PAN-OS Buffer Overflow Can Execute Arbitrary Code
TL;DR Palo Alto Networks disclosed a PAN-OS buffer overflow tracked as CVE-2026-0288. It sits in the User-ID Terminal Server Agent. An unauthenticated attacker on the network could crash the firew…
25 views
Daily Writeups
⤷ Title: Electron App Revolution: Enhance with Automatic Updates
════════════════════════
𐀪 Author: Sahil Khurana
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 05:03:26 GMT
════════════════════════
⌗ Tags: #application_security #user_experience #electron_app #delivery_software #automatic_updates
Medium
Electron App Revolution: Enhance with Automatic Updates
Shipping a desktop app is one thing. Keeping it updated across thousands of machines — without asking users to manually download and…
14 views
Daily Writeups
⤷ Title: Server-2: Vulnerable OnlyPhone— VulnerabilityWeb Walkthrough (4 Flags)
════════════════════════
𐀪 Author: Enric-xX
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 09:22:06 GMT
════════════════════════
⌗ Tags: #user_agent #bug_bounty #ctf #web_security #directory_listing
Medium
Server-2: Vulnerable OnlyPhone— VulnerabilityWeb Walkthrough (4 Flags)
Server-2 is a deliberately vulnerable web application designed for practicing User-Agent bypass, directory listing enumeration, CVE…
11 views
Daily Writeups
⤷ Title: CVE-2026-15826: User Profile Builder Bug Under Active Attack, Grants Full Admin Takeover (CVSS 9.8)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 04:03:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Takeover #Authentication Bypass #CVE_2026_15826 #User Profile Builder #WordPress Plugin Vulnerability #wordpress security
Daily CyberSecurity
CVE-2026-15826: User Profile Builder Bug Under Active Attack, Grants Full Admin Takeover (CVSS 9.8)
TL;DR: A critical User Profile Builder vulnerability, carrying a maximum CVSS score of 9.8 and tracked as CVE-2026-15826, now threatens more than 40,000 WordPress sites. It lets unauthenticated at…
21 views
Daily Writeups
⤷ Title: Designing Mobile Experiences That People Actually Want to Use
════════════════════════
𐀪 Author: Bounce Back Technologies
════════════════════════
ⴵ Time: Wed, 02 Sep 2026 06:26:25 GMT
════════════════════════
⌗ Tags: #digital_product #application_security #user_experience #app_design #mobile_technology
Medium
Designing Mobile Experiences That People Actually Want to Use
Mobile applications have become an important part of how people interact with businesses, services, and digital products. From financial…
17 views
Daily Writeups
⤷ Title: I Spent a Year Using AI in My Bug Bounty Work. Here’s What Actually Helped.
════════════════════════
𐀪 Author: Krishna M S
════════════════════════
ⴵ Time: Wed, 02 Sep 2026 17:33:16 GMT
════════════════════════
⌗ Tags: #red_teaming #bug_bounty #user_experience #cybersecurity #ai_bug_bounty
Medium
I Spent a Year Using AI in My Bug Bounty Work. Here’s What Actually Helped.
Every other post about AI and security either promises that language models will replace hackers or insists they’re useless toys. Neither…
36 views
Daily Writeups
⤷ Title: Designing Mobile Applications Around Real-World User Expectations
════════════════════════
𐀪 Author: Bounce Back Technologies
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 05:51:44 GMT
════════════════════════
⌗ Tags: #mobile_technology #software_development #mobile_app_development #user_experience #application_security
Medium
Designing Mobile Applications Around Real-World User Expectations
A mobile application may begin with a simple idea, but turning that idea into a dependable digital product requires careful decisions at…
26 views
Daily Writeups
⤷ Title: Your Application Shouldn’t Trust the Data It Receives
════════════════════════
𐀪 Author: Abhimanyu
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 18:04:09 GMT
════════════════════════
⌗ Tags: #api_security #validation #backend_development #user_experience
Medium
Your Application Shouldn’t Trust the Data It Receives
Every application accepts data.
37 views
Daily Writeups
⤷ Title: Designing Mobile Applications Around the Way People Actually Work
════════════════════════
𐀪 Author: Bounce Back Technologies
════════════════════════
ⴵ Time: Tue, 15 Sep 2026 06:21:10 GMT
════════════════════════
⌗ Tags: #user_experience #mobile_technology #application_security #digital_transformation #mobile_app_development
Medium
Designing Mobile Applications Around the Way People Actually Work
A mobile application can be technically impressive and still fail to become useful.
16 views
Daily Writeups
⤷ Title: Windows 11 Enhances Mouse Visibility and Customization
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 03:27:36 +0000
════════════════════════
⌗ Tags: #Windows #accessibility #Microsoft #User Interface #Windows 11
Daily CyberSecurity
Windows 11 Enhances Mouse Visibility and Customization
Recent speculation suggested that Microsoft intended to integrate a mouse pointer locator feature directly into Windows 11. This feature draws heavy inspiration from the utility previously offered…
13 views
Daily Writeups
⤷ Title: Adding a User Through NFS Only — Full Walkthrough
════════════════════════
𐀪 Author: NadaAshraf
════════════════════════
ⴵ Time: Sat, 03 Oct 2026 21:32:47 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #penetration_testing #user_experience_design #networking
Medium
Adding a User Through NFS Only — Full Walkthrough
This walkthrough shows how to create a working Linux user account on a remote target without ever logging into it. The only service used is…
23 views