Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:16:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASUS #ASUSWRT #Driver Vulnerability #router security
Daily CyberSecurity
ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
TL;DR ASUS has published five security advisories covering seven vulnerabilities. They span router firmware, MyASUS driver components, Aura Wallpaper, and GameSDK. The most severe, CVE-2026-13385 …
16 views
Daily Writeups
⤷ Title: Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:20:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42980 #LPE #Microsoft #Patch Tuesday #proof_of_concept #Windows Kernel #Windows Privilege Escalation #WMI vulnerability
Daily CyberSecurity
Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
TL;DR A public proof-of-concept now targets CVE-2026-42980, a Windows privilege escalation flaw in the NT kernel. The bug lets a local, low-privileged user reach SYSTEM. Microsoft patched it in th…
14 views
Daily Writeups
⤷ Title: Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:15:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Fineract #Core Banking #sql injection
Daily CyberSecurity
Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
TL;DR Apache has patched three SQL injection flaws in Fineract, the open-source core banking platform. The Apache Fineract SQL injection bugs, CVE-2026-57821, CVE-2026-56287, and CVE-2026-35152, a…
12 views
Daily Writeups
⤷ Title: Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic Web Client #mail forwarding bypass #SNMP command injection #ssrf #XSS #ZCS #Zimbra #Zimbra 10.1.20 #Zimbra vulnerabilities
Daily CyberSecurity
Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
TL;DR Zimbra released Collaboration Suite 10.1.20 on July 20, 2026. The update fixes several Zimbra vulnerabilities, including a critical SNMP command injection flaw and multiple XSS bugs. Zimbra …
15 views
Daily Writeups
⤷ Title: CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:45:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_50522 #CVE_2026_58644 #Deserialization #DEVCORE #exploited in the wild #Microsoft #proof_of_concept #Remote Code Execution #Sharepoint #SharePoint RCE
Daily CyberSecurity
CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
TL;DR CVE-2026-50522 is a critical SharePoint RCE flaw rated CVSS 9.8. Researchers report active exploitation attempts, and a public proof-of-concept exploit is now available. Microsoft patched th…
16 views
Daily Writeups
⤷ Title: CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:25:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache OpenMeetings #Arbitrary File Read #Path Traversal
Daily CyberSecurity
CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
TL;DR Apache has patched a critical OpenMeetings vulnerability tracked as CVE-2026-49488. The path traversal flaw grants arbitrary file read to any user with moderator rights in a room. Version 9.…
17 views
Daily Writeups
⤷ Title: The File Is Lying to You: 10 Steganography Methods That Hide Secrets in Plain Sight
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:31:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #ethical_hacking #blog #cybersecurity
Medium
The File Is Lying to You: 10 Steganography Methods That Hide Secrets in Plain Sight
A normal photograph can contain a confidential document.
26 views
Daily Writeups
⤷ Title: How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:28:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #application_security #java #spring_boot
Medium
How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
BOLA/IDOR is the #1 API vulnerability on OWASP’s list. Most backend developers ship it constantly without knowing its name.
19 views
Daily Writeups
⤷ Title: Crocc Crew (THM) Tryhackme Hard Challenge
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:45:21 GMT
════════════════════════
⌗ Tags: #linux #tryhackme #privilege_escalation #cybersecurity #hacking
Medium
Crocc Crew (THM) Tryhackme Hard Challenge
Description : Crocc Crew has created a backdoor on a Cooctus Corp Domain Controller. We’re calling in the experts to find the real back…
17 views
Daily Writeups
⤷ Title: How Hackers Hack Your Android Phone Using BTMOB 4.5.2 — And How to Protect Yourself
════════════════════════
𐀪 Author: Hackers Things
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:13:26 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #android #penetration_testing
Medium
How Hackers Hack Your Android Phone Using BTMOB 4.5.2 — And How to Protect Yourself
A complete walkthrough of BTMOB 4.5.2 server setup from a cybersecurity perspective. Learn how remote Android attacks work so you can…
18 views
Daily Writeups
⤷ Title: Linux Shells: Terminal Interfaces, Shell Environments, and Automation
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:38:50 GMT
════════════════════════
⌗ Tags: #linux #infosec #cybersecurity #tryhackme #bash
Medium
Linux Shells: Terminal Interfaces, Shell Environments, and Automation
Introduction
16 views
Daily Writeups
⤷ Title: The Lockout That Wasn’t: How a Stateless Brute-Force Test Broke My Own Login Throttle
════════════════════════
𐀪 Author: Pratyay Mukherjee
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:04:45 GMT
════════════════════════
⌗ Tags: #hydra #kali_linux #ethical_hacking #penetration_testing #cybersecurity
Medium
The Lockout That Wasn’t: How a Stateless Brute-Force Test Broke My Own Login Throttle
A real finding from an authorized penetration test against my own production app — and what it taught me about the difference between a…
28 views
Daily Writeups
⤷ Title: Parsing the Payload: A Playbook Walkthrough of Web Server Log Forensics
════════════════════════
𐀪 Author: Pop123
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:08:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #logs #tutorial #tryhackme
Medium
Parsing the Payload: A Playbook Walkthrough of Web Server Log Forensics
Log Forensics: Unmasking SQL Injections, Path Traversals, and RCE Artifacts in Web Infrastructure
26 views
Daily Writeups
⤷ Title: “screenshot” | CyberTalents | Bypass SSRF filters using PHP wrappers | Web Exploitation : Hard
════════════════════════
𐀪 Author: Dr_ro0t
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 21:08:54 GMT
════════════════════════
⌗ Tags: #web_security #ctf_writeup #ssrf #cyber_talents
Medium
“screenshot” | CyberTalents | Bypass SSRF filters using PHP wrappers| Web Exploitation : Hard
Exploiting SSRF vulnerability, bypassing hostname filters, and leaking source code using PHP wrappers to capture the flag.
37 views
Daily Writeups
⤷ Title: The Subdomain Subfinder Missed: How a German Wordlist Led Me to a Hidden Bug (and a CHF 100…
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:34:08 GMT
════════════════════════
⌗ Tags: #subdomains_enumeration #bug_bounty_writeup #subfinder #gobuster #germany
Medium
The Subdomain Subfinder Missed: How a German Wordlist Led Me to a Hidden Bug (and a CHF 100 Surprise)
“Sometimes bug bounty isn’t about finding the biggest vulnerability. Sometimes it’s about finding the application everyone else missed.”
59 views
Daily Writeups
⤷ Title: AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 21:36:12 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 20:39:28 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: SolarWinds Patches Three Critical Serv-U Vulnerabilities Enabling RCE
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 17:21:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #broken access control #CVE_2026_28307 #CVE_2026_28308 #CVE_2026_28321 #File Transfer #IDOR #privilege escalation #rce #SolarWinds #SolarWinds Serv_U
Daily CyberSecurity
SolarWinds Patches Three Critical Serv-U Vulnerabilities Enabling RCE
TL;DR SolarWinds fixed three critical SolarWinds Serv-U vulnerabilities on July 21, 2026. They allow privilege escalation and remote code execution on the file transfer server. SolarWinds rates ea…
28 views
Daily Writeups
⤷ Title: snap-confine Flaw CVE-2026-8933 Lets Any User Get Root on Ubuntu
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 16:47:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_3888 #CVE_2026_8933 #Linux #LPE #privilege escalation #Qualys #snap_confine #snapd #Ubuntu
Daily CyberSecurity
snap-confine Flaw CVE-2026-8933 Lets Any User Get Root on Ubuntu
TL;DR Qualys found a snap-confine privilege escalation flaw, tracked as CVE-2026-8933. It lets any local user reach full root on default Ubuntu Desktop systems. Ubuntu shipped fixes on the July 21…
17 views
Daily Writeups
⤷ Title: CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 16:31:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #CVE_2021_27137 #CVE_2026_0770 #CVE_2026_60137 #CVE_2026_63030 #DD_WRT #Known Exploited Vulnerabilities #Langflow #rce #sql injection #wordpress
Daily CyberSecurity
CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog
TL;DR CISA added four flaws to its KEV catalog on July 21, 2026. The list covers critical WordPress and Langflow bugs plus an older DD-WRT router flaw. CISA lists only bugs with confirmed active e…
12 views
Daily Writeups
⤷ Title: The Night the Air Started Talking: A Technical Journey into Wi-Fi Hacking with Kali Linux
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 17:52:04 GMT
════════════════════════
⌗ Tags: #cyberattack #cybersecurity #ethical_hacking #bug_bounty #hacking
Medium
The Night the Air Started Talking: A Technical Journey into Wi-Fi Hacking with Kali Linux
How wireless frames, monitor mode, handshakes, encryption, and password auditing fit together beneath the network name on your screen.
15 views