Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Critical cPanel Auth Bypass CVE-2026-41940 Exploited by Thousands
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 12:37:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CPanel #CVE_2026_41940 #Cyber Security #Data Breach #infosec #Linux Server #Mr_Rot13 #Patch Alert #WHM #wordpress security #XLab
Daily CyberSecurity
Critical cPanel Auth Bypass CVE-2026-41940 Exploited by Thousands
Urgent: cPanel & WHM hit by global 9.8 CVSS auth bypass. Over 2,000 IPs are actively hijacking servers for data theft and ransomware. Patch immediately!
14 views
Daily Writeups
⤷ Title: 200K Sites at Risk: 9.8 CVSS RCE via Burst Statistics Auth Bypass Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 02:01:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Burst Statistics #CVE_2026_8181 #Cyber Security #Exploit in the Wild #infosec #MainWP #Patch Alert #rce #Wordfence #wordpress security
Daily CyberSecurity
200K Sites at Risk: 9.8 CVSS RCE via Burst Statistics Auth Bypass Exploited in the Wild
200,000+ sites hit by CVE-2026-8181. A 9.8 CVSS Burst Statistics flaw allows RCE via auth bypass. 5,000+ attacks blocked. Update to 3.4.2 immediately!
19 views
Daily Writeups
⤷ Title: Magecart Attack: Critical Flaw in FunnelKit Plugin Sparks Credit Card Skimming on 40,000+ WooCommerce Sites
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 07:02:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #Checkout Script Injection #Credit Card Theft #E_commerce Security 2026 #Funnel Builder Plugin #FunnelKit Vulnerability #Google Tag Manager Spoof #Magecart Attack #Sansec Report #WooCommerce Skimming #WordPress Security
Penetration Testing Tools
Magecart Attack: Critical Flaw in FunnelKit Plugin Sparks Credit Card Skimming on 40,000+ WooCommerce Sites
Proprietors of WordPress e-commerce platforms have fallen under siege due to a critical vulnerability discovered in the Funnel
13 views
Daily Writeups
⤷ Title: VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:20:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Attack Surface Management #Cisco Catalyst Zero Day #CVE_2026_20182 #NGINX CVE_2026_42945 #Probllama CVE_2024_37032 #ProFTPD SQL Injection #threat intelligence 2026 #UAT_8616 #VulnCheck Report #WordPress Security
Penetration Testing Tools
VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
A constellation of severe vulnerabilities sweeping across ubiquitous server frameworks and third-party extensions has emerged as the focal
15 views
Daily Writeups
⤷ Title: How a Single Vulnerable WordPress Plugin Led to Full System Compromise: My MegaQuagga Pentest…
════════════════════════
𐀪 Author: Aktiaasrafunnesa
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:09:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #wordpress_security #infosec #ethical_hacking
Medium
How a Single Vulnerable WordPress Plugin Led to Full System Compromise: My MegaQuagga Pentest…
A step‑by‑step walkthrough of exploiting CVE‑2019‑9978 on a WordPress server
16 views
Daily Writeups
⤷ Title: Critical WP Maps Pro Vulnerability Actively Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 23:32:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #administrator account creation flaw #CVE_2026_8732 #Wordfence #wordpress security #WP Maps Pro
Daily CyberSecurity
Critical WP Maps Pro Vulnerability Actively Exploited in the Wild
The critical WP Maps Pro vulnerability is actively exploited in the wild. Learn how this flaw allows full site takeover and how to patch it now.
15 views
Daily Writeups
⤷ Title: How I Independently Compromised Mr. Robot in 2 Hours — Complete Walkthrough
════════════════════════
𐀪 Author: Youseff mohamed kamal
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:24:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #wordpress_security #cybersecurity #ctf
Medium
How I Independently Compromised Mr. Robot in 2 Hours — Complete Walkthrough
Introduction:
12 views
Daily Writeups
⤷ Title: How I Independently Compromised Mr. Robot in a short period of time — Complete Walkthrough
════════════════════════
𐀪 Author: Youseff mohamed kamal
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:24:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #wordpress_security #cybersecurity #ctf
Medium
How I Independently Compromised Mr. Robot in 2 Hours — Complete Walkthrough
Introduction:
18 views
Daily Writeups
⤷ Title: Valve Platform Exploited to Distribute WordPress Web Shells
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 06:01:20 +0000
════════════════════════
⌗ Tags: #Malware #backdoor malware #GoDaddy Security #Steam Community #steganography #web protection #wordpress security
Daily CyberSecurity
Valve Platform Exploited to Distribute WordPress Web Shells
A sneaky Steam profile malware campaign targets WordPress. Attackers use invisible Unicode steganography to hide malicious command strings.
20 views
Daily Writeups
⤷ Title: OptinMonster Supply Chain Attack Hits 1.2M Sites
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 07:27:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CDN Compromise #OptinMonster #PushEngage #supply chain attack #TrustPulse #WordPress Security
Information Security News
OptinMonster Supply Chain Attack Hits 1.2M Sites
Sansec found a supply chain attack on Awesome Motive's OptinMonster, TrustPulse, and PushEngage plugins that planted backdoors on WordPress sites.
11 views
Daily Writeups
⤷ Title: Operation Endgame Takes Down SocGholish, Amadey, and StealC Malware
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 02:09:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amadey #Europol #Evil Corp #malware takedown #Operation Endgame #SocGholish #StealC #wordpress security
Daily CyberSecurity
Operation Endgame Takes Down SocGholish, Amadey, and StealC Malware
Operation Endgame disrupts the SocGholish malware network, seizing EUR 41M in crypto and 326 servers. WordPress site owners must act now.
7 views
Daily Writeups
⤷ Title: New Critical Zero-Auth Vulnerability in WordPress YMC Filter: CVE-2026–10823
════════════════════════
𐀪 Author: Synthex
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 05:26:00 GMT
════════════════════════
⌗ Tags: #wordpress_security #cybersecurity #wordpress_vulnerabilities #infosec #cve_2026_10823
Medium
New Critical Zero-Auth Vulnerability in WordPress YMC Filter: CVE-2026–10823
The WordPress ecosystem thrives on modular flexibility, but peripheral plugins often introduce unintended paths of least resistance for…
18 views
Daily Writeups
⤷ Title: CVE-2026–10083: Unauthenticated Stored XSS in APCu Manager via Cache Key Pollution
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 13:01:03 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #xs #wordpress_security #cve
Medium
CVE-2026–10083: Unauthenticated Stored XSS in APCu Manager via Cache Key Pollution
When object-cache keys become an attack surface
48 views
Daily Writeups
⤷ Title: CVE-2026–10091: Stored XSS in Email JavaScript Cloak WordPress Plugin
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #wordpress_security #xs #wordpress_security_plugin #security_plugin #cve
Medium
CVE-2026–10091: Stored XSS in Email JavaScript Cloak WordPress Plugin
When a simple shortcode becomes a persistent script injection vector
34 views
Daily Writeups
⤷ Title: CVE-2026–10092: Unauthenticated Stored XSS in Cincopa Video and Media Plug-in
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Sun, 05 Jul 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #security_plugin #wordpress_security_plugin #wordpress_security #cve #xs
Medium
CVE-2026–10092: Unauthenticated Stored XSS in Cincopa Video and Media Plug-in
When WordPress comments become a persistent shortcode execution surface
35 views
Daily Writeups
⤷ Title: WordPress Sites at Risk: Outdated PHP, Plugins, and Default Configs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 03:53:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #censys #End_of_Life Software #MR.GREEN Hack #Outdated PHP #wordpress security #xmlrpc.php #Yoast SEO
Daily CyberSecurity
WordPress Sites at Risk: Outdated PHP, Plugins, and Default Configs
Hundreds of WordPress sites remain easy targets year after year. The cause is rarely a rare zero-day vulnerability. Instead, it is outdated PHP versions, forgotten plugins, and default configurati…
11 views
Daily Writeups
⤷ Title: Breaking Into Internal: Enumeration, Exploitation & Privilege Escalation
════════════════════════
𐀪 Author: Mohamed Sameh
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 05:11:22 GMT
════════════════════════
⌗ Tags: #wordpress_security #penetration_testing #cybersecurity #tryhackme #privilege_escalation
Medium
Breaking Into Internal: Enumeration, Exploitation & Privilege Escalation
Challenge URL : https://tryhackme.com/room/internal
40 views
Daily Writeups
⤷ Title: wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 01:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60137 #CVE_2026_63030 #Pre_Auth RCE #REST API batch #webshell #WordPress Core RCE #wordpress security #wp2shell exploit
Daily CyberSecurity
wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
Attackers are already dropping webshells on WordPress sites through a flaw in WordPress Core itself. The bug chain, named wp2shell, delivers an unauthenticated WordPress Core RCE. No plugin, no th…
30 views
Daily Writeups
⤷ Title: Understanding the WordPress wp2shell Attack
════════════════════════
𐀪 Author: Hitakshi Parmar
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 08:03:33 GMT
════════════════════════
⌗ Tags: #wordpress_security #vulnerability_management #cybersecurity #threat_analysis #ethical_hacking
Medium
Understanding the WordPress wp2shell Attack
Cybersecurity is constantly evolving, and attackers are always looking for new ways to exploit software vulnerabilities. One recent example…
30 views
Daily Writeups
⤷ Title: CVE Weekly Roundup: July 27 – August 2, 2026
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 01:57:54 +0000
════════════════════════
⌗ Tags: #Weekly Recap #Apache Traffic Server #CISA KEV #Cisco FMC #CVE Roundup #Fortinet #VeloCloud #Weekly Report #wordpress security
Daily CyberSecurity
CVE Weekly Roundup: July 27 – August 2, 2026
The CVE WATCHTOWER logged 2,077 new vulnerabilities between July 27 and August 2, 2026. This CVE weekly roundup breaks down the numbers, flags what is under active attack, and highlights the entri…
6 views