Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: NGINX CVE-2026-42533 Vulnerability Fixed by F5
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:27:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_42533 #Nginx #remote code execution #vulnerability
Information Security News
NGINX CVE-2026-42533 Vulnerability Fixed by F5
NGINX developer F5 recently published a fresh security advisory about a dangerous bug. This flaw receives the tracking number CVE-2026-42533. Under certain settings, a hacker can easily exploit th…
32 views
Daily Writeups
⤷ Title: Ostium Platform Loses $18 Million in Sophisticated Pricing Exploit
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:27:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arbitrum #cybersecurity #DeFi Exploit #Ostium #Smart Contract
Information Security News
Ostium Platform Loses $18 Million in Sophisticated Pricing Exploit
Exploiting Internal Infrastructure A fabricated price arrived with a futuristic timestamp. This allowed a malicious actor to turn ordinary transactions into incredibly profitable trades. Consequen…
16 views
Daily Writeups
⤷ Title: Part II — Understanding the Internet Before You Attack It
════════════════════════
𐀪 Author: Yassin Hamada
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:13:28 GMT
════════════════════════
⌗ Tags: #infosec #hacking #cybersecurity #bug_bounty
Medium
Part II — Understanding the Internet Before You Attack It
“Every vulnerability begins with a request. To understand vulnerabilities, you must first understand the journey that request takes.”
18 views
Daily Writeups
⤷ Title: Web Cache Deception: Exploiting Path Delimiters for Walkthrough (Practitioner)
════════════════════════
𐀪 Author: Rahul M S
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:10:38 GMT
════════════════════════
⌗ Tags: #portswigger #hacking #cybersecurity #bug_bounty #vapt
Medium
Web Cache Deception: Exploiting Path Delimiters for Walkthrough (Practitioner)
Learn how attackers exploit discrepancies in URL path delimiter handling between origin servers and cache servers to steal sensitive user…
15 views
Daily Writeups
⤷ Title: Unauthenticated Upload, Unauthenticated Read: How I Wrote Prescriptions Into Any Patient’s Account
════════════════════════
𐀪 Author: Sarthak Chauhan
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:27:56 GMT
════════════════════════
⌗ Tags: #healthcare #cybersecurity #api_security #bug_bounty #application_security
Medium
Unauthenticated Upload, Unauthenticated Read: How I Wrote Prescriptions Into Any Patient’s Account
A bug bounty writeup on a broken authorization flow in a healthcare mobile API - reported, fixed, and closed through a responsible…
17 views
Daily Writeups
⤷ Title: Python Web Penetration Testing — Day 3
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:20:47 GMT
════════════════════════
⌗ Tags: #bug_bounty #programming #technology #hacking #cybersecurity
Medium
Python Web Penetration Testing — Day 3
Web Crawling with Scrapy — Mapping the Application Like a Digital Cartographer
18 views
Daily Writeups
⤷ Title: Web Cache Deception: Exploiting Path Mapping for Walkthrough (Apprentice)
════════════════════════
𐀪 Author: Rahul M S
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:10:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #vapt #bug_bounty_writeup #portswigger #hacking
Medium
Web Cache Deception: Exploiting Path Mapping for Walkthrough (Apprentice)
Learn how attackers exploit discrepancies between origin servers and cache servers to steal sensitive user data like API keys using Web…
23 views
Daily Writeups
⤷ Title: The 8 Beginner Guide(s) for New Hackers
════════════════════════
𐀪 Author: Antonius W1sdom
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:07:17 GMT
════════════════════════
⌗ Tags: #life_hacking #hacking #hacker
Medium
The 8 Beginner Guide(s) for New Hackers
written by : w1sdom (Antonius)
22 views
Daily Writeups
⤷ Title: Looking Glass — TryHackMe WriteUp with Flags
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:37:02 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #ctf_writeup #ctf #tryhackme
Medium
Looking Glass — TryHackMe WriteUp with Flags
Looking Glass — TryHackMe WriteUp with Flags Date: 17/07/2026 Room Link: https://tryhackme.com/room/lookingglass My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This lab chains a …
35 views
Daily Writeups
⤷ Title: CVE-2026-10123: Fourth Stack Overflow in a Week Confirms Widespread Firmware Failure in TRENDnet…
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:01:04 GMT
════════════════════════
⌗ Tags: #stackoverflow #cwe_119 #ethical_hacking #cwe_121 #cve_2026_10123
Medium
CVE-2026-10123: Fourth Stack Overflow in a Week Confirms Widespread Firmware Failure in TRENDnet Router
A fourth stack-based buffer overflow disclosed in this same week-long wave targets the domain filtering feature of the TRENDnet TEW-432BRP…
40 views
Daily Writeups
⤷ Title: Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 20:27:51 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 19:34:57 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 18:48:31 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:59:43 +0000
════════════════════════
⌗ Tags: #Security #CI/CD #Cybersecurity #Fig #Fig Security #SecOps
Hackread
Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
Learn how Fig adds testing, deployment, and continuous verification to SecOps, helping security teams keep detections reliable as infrastructure evolves. daily.
28 views
Daily Writeups
⤷ Title: Magnet Forensics Sues Over Stolen iPhone Zero-Day
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:15:30 +0000
════════════════════════
⌗ Tags: #Apple #Information Security #cybersecurity #iOS Exploits #iPhone Zero_Day #Magnet Forensics
Information Security News
Magnet Forensics Sues Over Stolen iPhone Zero-Day
The smartphone hacking market typically operates in absolute secrecy. However, a recent lawsuit has exposed the inner workings of a major firm. The Canadian firm Magnet Forensics recently sued a f…
14 views
Daily Writeups
⤷ Title: TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:57:42 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Elastic Security Labs #Infostealer #MaaS #TELEPUZ #Vidar #WebInject
Daily CyberSecurity
TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
At a glance Malware family TELEPUZ Threat actor Unnamed; suspected solo developer or small team running a MaaS Target / victims Windows users reached through compromised web pages Delivery vector …
18 views
Daily Writeups
⤷ Title: ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:16:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASUS #ASUSWRT #Driver Vulnerability #router security
Daily CyberSecurity
ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
TL;DR ASUS has published five security advisories covering seven vulnerabilities. They span router firmware, MyASUS driver components, Aura Wallpaper, and GameSDK. The most severe, CVE-2026-13385 …
16 views
Daily Writeups
⤷ Title: Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:20:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42980 #LPE #Microsoft #Patch Tuesday #proof_of_concept #Windows Kernel #Windows Privilege Escalation #WMI vulnerability
Daily CyberSecurity
Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
TL;DR A public proof-of-concept now targets CVE-2026-42980, a Windows privilege escalation flaw in the NT kernel. The bug lets a local, low-privileged user reach SYSTEM. Microsoft patched it in th…
14 views
Daily Writeups
⤷ Title: Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:15:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Fineract #Core Banking #sql injection
Daily CyberSecurity
Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
TL;DR Apache has patched three SQL injection flaws in Fineract, the open-source core banking platform. The Apache Fineract SQL injection bugs, CVE-2026-57821, CVE-2026-56287, and CVE-2026-35152, a…
12 views
Daily Writeups
⤷ Title: Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic Web Client #mail forwarding bypass #SNMP command injection #ssrf #XSS #ZCS #Zimbra #Zimbra 10.1.20 #Zimbra vulnerabilities
Daily CyberSecurity
Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
TL;DR Zimbra released Collaboration Suite 10.1.20 on July 20, 2026. The update fixes several Zimbra vulnerabilities, including a critical SNMP command injection flaw and multiple XSS bugs. Zimbra …
15 views
Daily Writeups
⤷ Title: CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:45:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_50522 #CVE_2026_58644 #Deserialization #DEVCORE #exploited in the wild #Microsoft #proof_of_concept #Remote Code Execution #Sharepoint #SharePoint RCE
Daily CyberSecurity
CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
TL;DR CVE-2026-50522 is a critical SharePoint RCE flaw rated CVSS 9.8. Researchers report active exploitation attempts, and a public proof-of-concept exploit is now available. Microsoft patched th…
16 views