Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: Weaponizing HTTP Headers: The Reconnaissance Phase
════════════════════════
𐀪 Author: Martin Simonyan
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 01:51:19 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #web_development #osint #information_security
Medium
Weaponizing HTTP Headers: The Reconnaissance Phase
This is Part 1 of a series on offensive HTTP header exploitation. For the complete technical breakdown with detailed examples and…
46 views
Daily Writeups
⤷ Title: New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 10:38:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: The Installer Trap: New SetupHijack Tool Bypasses Windows UAC via Race Conditions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:16:34 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Authenticode #Cybersecurity 2026 #MSBuild #MSI Exploitation #privilege escalation #Race Condition #red teaming #SetupHijack #UAC bypass #Windows Security
Information Security News
The Installer Trap: New SetupHijack Tool Bypasses Windows UAC via Race Conditions
SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or upda…
38 views
Daily Writeups
⤷ Title: The Visa Trap: Dubai Police Warn of Deepfake-Driven Work Permit Scams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:12:48 +0000
════════════════════════
⌗ Tags: #Cybercriminals ##BewareOfFraud #2026 News #deepfakes #Dubai Police #Fraud Alert #GDRFA #MoHRE #Recruitment Fraud #Scam Prevention #UAE Jobs #Work Visa
Information Security News
The Visa Trap: Dubai Police Warn of Deepfake-Driven Work Permit Scams
Dubai has seen a surge in fraud schemes involving fake job offers and visa arrangements. Local police warn that criminals are actively using forged employment guarantees and fictitious sponsorship…
17 views
Daily Writeups
⤷ Title: The Trojan in the Living Room: How the Kimwolf Botnet Hijacked 2 Million Android Devices
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:10:25 +0000
════════════════════════
⌗ Tags: #Malware #ADB Exploit #Android TV Box #BOTNET #Brian Krebs #Cybersecurity 2026 #IoT Security #IPIDEA #Kimwolf #Residential Proxies #Synthient #XLab
Information Security News
The Trojan in the Living Room: How the Kimwolf Botnet Hijacked 2 Million Android Devices
More than two million infected devices worldwide—this is the scale of the new botnet known as Kimwolf, according to an assessment published by Synthient. The countries reporting the highest number…
17 views
Daily Writeups
⤷ Title: The 20-Year Showdown: Why Windows 8.1 Just Beat Windows 11 in a Massive Speed Test
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:07:45 +0000
════════════════════════
⌗ Tags: #Technology #Windows #Benchmarks #Microsoft #RAM Management #Speed Test #Tech News 2026 #ThinkPad X220 #TrigrZolt #Windows 11 #WIndows 8.1 #Windows XP
12 views
Daily Writeups
⤷ Title: The Digital Insider: Why Autonomous AI Agents Are 2026’s Biggest Security Risk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:02:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Agentic AI #AI Agents #cybersecurity #Enterprise AI #Gartner 2026 #Insider Threat #Palo Alto Networks #Prompt Injection #Superuser Problem #Wendi Whitmore
Information Security News
The Digital Insider: Why Autonomous AI Agents Are 2026’s Biggest Security Risk
Artificial intelligence, now an indispensable assistant in business, is increasingly being viewed as a potential source of internal threats. According to Wendy Whitmore, head of security research …
15 views
Daily Writeups
⤷ Title: The Rubin Era: NVIDIA’s Next-Gen AI Factory Chips Enter Mass Production
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:30:33 +0000
════════════════════════
⌗ Tags: #Technology #3nm Process #Agentic AI #AI Factory #Blackwell #CES 2026 #DGX SuperPOD #MoE Models #nvidia #NVLink 6 #Olympus Cores #Rubin GPU #Vera CPU
Daily CyberSecurity
The Rubin Era: NVIDIA’s Next-Gen AI Factory Chips Enter Mass Production
Following the Blackwell architecture, NVIDIA formally announced at CES 2026 that its next-generation AI computing platform, codenamed “Rubin,” has entered full-scale mass production. NVIDIA CEO Je…
13 views
Daily Writeups
⤷ Title: The Reasoning Car: NVIDIA Launches Alpamayo to Give AI Vehicles Human Logic
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:26:51 +0000
════════════════════════
⌗ Tags: #Technology #Alpamayo #AlpaSim #Autonomous Driving #CES 2026 #DRIVE Hyperion #Level 4 Autonomy #Mercedes_Benz CLA #nvidia #Open_Source AI #Physical AI #VLA Model
Daily CyberSecurity
The Reasoning Car: NVIDIA Launches Alpamayo to Give AI Vehicles Human Logic
At CES 2026 this year, NVIDIA once again demonstrated its technological prowess in the autonomous driving arena, unveiling a new suite of open-source AI models and simulation tools under the name …
12 views
Daily Writeups
⤷ Title: The Desk-Side Revolution: NVIDIA’s DGX Spark Update Delivers 2.5× AI Speed Boost
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:22:22 +0000
════════════════════════
⌗ Tags: #Technology #Agentic AI #AI Development #Blackwell GPU #CES 2026 #DGX Spark #MacBook Pro M4 #Nsight Copilot #nvidia #PyTorch #Qwen_235B #RTX 5090 #TRT_LLM
Daily CyberSecurity
The Desk-Side Revolution: NVIDIA’s DGX Spark Update Delivers 2.5× AI Speed Boost
As downloads of open-source AI models and frameworks are expected to surge explosively in 2026, NVIDIA announced a major update to its desktop AI development platform, DGX Spark, at CES 2026. This…
12 views
Daily Writeups
⤷ Title: The Open Door: Critical 9.8 Severity Flaw in Harvester Lets Hackers Hijack New Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:43:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bare Metal #Bootstrapping Vulnerability #default credentials #Harvester HCI #information_security #Infrastructure as Code #Kubernetes #Rancher #SSH security #virtualization
Daily CyberSecurity
The Open Door: Critical 9.8 Severity Flaw in Harvester Lets Hackers Hijack New Servers
Harvester, the open-source hyperconverged infrastructure (HCI) solution built on Kubernetes, has hit a critical bug. A new vulnerability, tracked as CVE-2025-62877, exposes a dangerous timing wind…
14 views
Daily Writeups
⤷ Title: CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 03:18:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_68428 #data exfiltration #Information Disclosure #JavaScript Security #jsPDF #lfi #local file inclusion #Node.js #Patch Alert #Path Traversal #PDF Generation
Daily CyberSecurity
CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
A critical vulnerability has been discovered in jsPDF, one of the most popular JavaScript libraries for generating PDF documents. The flaw, assigned a scorching CVSS score of 9.2, allows attackers…
13 views
Daily Writeups
⤷ Title: Aiohttp Patches Seven Vulnerabilities Including High-Severity DoS Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 02:23:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #aiohttp #Asyncio #CVE_2025_69224 #CVE_2025_69227 #CVE_2025_69228 #Denial of Service #dos #Infinite Loop #infosec #memory exhaustion #Python #request smuggling #web development
Daily CyberSecurity
Aiohttp Patches Seven Vulnerabilities Including High-Severity DoS Risks
Maintainers of aiohttp, the popular asynchronous HTTP client/server framework for Python, have released a sweeping security update addressing seven distinct vulnerabilities. The update, version 3.…
13 views
Daily Writeups
⤷ Title: Apache SIS Patch Blocks XML Attack That Leaks Server Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 02:07:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache SIS #Apache Software Foundation #CVE_2025_68280 #Geospatial Security #GeoTIFF #GML #GPX #Information Disclosure #Java security #Metadata Security #XML Injection #xxe
Daily CyberSecurity
Apache SIS Patch Blocks XML Attack That Leaks Server Files
The Apache Software Foundation has issued a security advisory for the Apache Spatial Information System (SIS), a key Java library used for developing geospatial applications. A newly discovered vu…
14 views
Daily Writeups
⤷ Title: CVE-2025-66518: High-Severity Flaw in Apache Kyuubi Exposes Local Server Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Kyuubi #Apache Software Foundation #CVE_2025_66518 #Data Lake Security #Directory Allow_list #Information Disclosure #Path Traversal #Serverless SQL #Spark SQL #Vulnerability
Daily CyberSecurity
CVE-2025-66518: High-Severity Flaw in Apache Kyuubi Exposes Local Server Files
Apache Kyuubi, the distributed gateway designed to provide secure, serverless SQL access to massive data lakes, has patched a high-severity vulnerability that could allow unauthorized access to th…
12 views
Daily Writeups
⤷ Title: Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:28:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Brian Reilly #CAR Deployment #CFAdmin #ColdFusion Archive #CVE_2025_61808 #rce #Remote Code Execution #Server Security #SMB Share #UNC path #Web Shell
Daily CyberSecurity
Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
Adobe has issued critical updates for its ColdFusion platform after security researcher Brian Reilly uncovered a clever logic flaw that allows authenticated administrators to turn a standard maint…
14 views
Daily Writeups
⤷ Title: MediaTek Kicks Off 2026 with Major Security Overhaul for Mobile Chipsets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:22:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #CVE_2025_20794 #Dimensity #firmware update #IoT security #KeyInstall #MediaTek #memory corruption #modem vulnerabilities #Security Bulletin #Smartphone Security #stack overflow
Daily CyberSecurity
MediaTek Kicks Off 2026 with Major Security Overhaul for Mobile Chipsets
MediaTek has kicked off the new year with a critical security bulletin, releasing patches for a slew of high-severity vulnerabilities affecting dozens of its mobile and IoT chipsets. The January 2…
18 views
Daily Writeups
⤷ Title: macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:17:01 +0000
════════════════════════
⌗ Tags: #Malware #AES_256_CBC #AppleScript #Developer Tools #GlassWorm #Hardware Wallets #KOI Security #Ledger #macOS security #malware #supply chain attack #Trezor #VS Code Extensions
Daily CyberSecurity
macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
The resilient “GlassWorm” threat actor, known for embedding malicious code into Visual Studio Code extensions, has returned with a sophisticated fourth wave of attacks. A new report fr…
13 views
Daily Writeups
⤷ Title: Researcher Details Stack Buffer Overflow Flaw in Net-SNMP snmptrapd with PoC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:12:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_68615 #D4mianWayne #Logic Flaw #Net_SNMP #network_security #PoC #proof_of_concept #rce #Remote Code Execution #SNMP Trap #snmptrapd #Stack Buffer Overflow
Daily CyberSecurity
Researcher Details Stack Buffer Overflow Flaw in Net-SNMP snmptrapd with PoC
A critical vulnerability in the widely used Net-SNMP suite has been uncovered, exposing a dangerous logic flaw that could allow attackers to crash servers or execute arbitrary code. Security resea…
23 views
Daily Writeups
⤷ Title: New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:06:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #accessibility #Apple #AppleScript #CVE_2025_43530 #macOS #macOS Sequoia #macOS Sonoma #macOS Tahoe #Mickey Jin #privacy #TCC Bypass #TOCTOU #Voiceover
Daily CyberSecurity
New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
Apple’s privacy fortress, the Transparency, Consent, and Control (TCC) framework, has been breached once again. Security researcher Mickey Jin (@patch1t) has disclosed a sophisticated new vulnerab…
24 views
Daily Writeups
⤷ Title: The Chromebook Killer Fails: Microsoft to Kill Windows 11 SE in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:01:36 +0000
════════════════════════
⌗ Tags: #Windows #Chromebook #EdTech News 2026 #Education Tech #end_of_life #K_12 IT #Microsoft #School Funding #Windows 10 S Mode #Windows 11 SE
Daily CyberSecurity
The Chromebook Killer Fails: Microsoft to Kill Windows 11 SE in 2026
Microsoft has now confirmed that support for Windows 11 SE will be discontinued at the end of 2026. This operating system, developed as a successor to Windows 10 S mode, was designed primarily for…
26 views