Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.33K subscribers
1 photo
110K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.33K subscribers
Daily Writeups
⤷ Title: New FreeBSD Vulnerabilities Allow Jail Escapes and Kernel Panics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:57:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chroot Breakout #CVE_2025_15576 #CVE_2026_3038 #Denial of Service #freebsd #infosec #Jail Escape #kernel panic #Nullfs #privilege escalation #Unix Domain Sockets
Daily CyberSecurity
New FreeBSD Vulnerabilities Allow Jail Escapes and Kernel Panics
FreeBSD patches a critical jail escape (CVE-2025-15576) and a kernel heap overflow (CVE-2026-3038). Learn how nullfs and routing sockets put hosts at risk.
21 views
Daily Writeups
⤷ Title: Automation at Risk: Triple 9.4 Severity RCE Flaws Threaten n8n Workflow Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:40:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AppSec #CVE_2026_27495 #CVE_2026_27497 #CVE_2026_27577 #infosec #n8n #Patch Alert #rce #Remote Code Execution #Sandbox Escape #Workflow Automation
Daily CyberSecurity
Automation at Risk: Triple 9.4 Severity RCE Flaws Threaten n8n Workflow Servers
n8n patches three critical 9.4 CVSS vulnerabilities (CVE-2026-27497, 27577, 27495) allowing remote code execution via Merge nodes and sandboxes. Update now!
10 views
Daily Writeups
⤷ Title: Algorithm Confusion: Critical 9.1 Flaw in Parse Server Allows Instant Google Account Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:29:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Algorithm Confusion #CVE_2026_27804 #Express Framework #Google Authentication #infosec #JWT Bypass #Node.js Security #Parse Server #Patch Alert
Daily CyberSecurity
Algorithm Confusion: Critical 9.1 Flaw in Parse Server Allows Instant Google Account Takeover
Parse Server patches a critical 9.1 CVSS vulnerability (CVE-2026-27804). Attackers can forge Google tokens using "alg: none" to hijack any linked user account.
10 views
Daily Writeups
⤷ Title: Sandbox Escape: Critical 9.2 Severity RCE Flaw Unmasked in ServiceNow AI Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:25:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Platform Security #AI security #Cloud Security #CVE_2026_0542 #infosec #Patch Alert #rce #Remote Code Execution #Sandbox Escape #ServiceNow
Daily CyberSecurity
Sandbox Escape: Critical 9.2 Severity RCE Flaw Unmasked in ServiceNow AI Platform
ServiceNow patches a critical 9.2 CVSS RCE vulnerability (CVE-2026-0542) in its AI sandbox. Unauthenticated users could execute code remotely. Patch now!
8 views
Daily Writeups
⤷ Title: Trend Micro Issues Critical Patch for Apex One: Severe RCE Flaws Addressed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:16:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #critical patch #CVE_2025_71210 #CVE_2025_71211 #Directory Traversal #endpoint security #infosec #Patch Alert #rce #Remote Code Execution #Trend Micro Apex One
Daily CyberSecurity
Trend Micro Issues Critical Patch for Apex One: Severe RCE Flaws Addressed
Trend Micro issues a critical patch for Apex One to fix 9.8 severity vulnerabilities (CVE-2025-71210) that allow remote code execution. Update your console now!
10 views
Daily Writeups
⤷ Title: NVIDIA Issues Patches for High-Severity Flaws in Cumulus Linux and NVOS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:05:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #Cumulus Linux #CVE_2025_33179 #CVE_2025_33180 #CVE_2025_33181 #infosec #network_security #nvidia #NVOS #NVUE #privilege escalation
Daily CyberSecurity
NVIDIA Issues Patches for High-Severity Flaws in Cumulus Linux and NVOS
NVIDIA warns of three high-severity vulnerabilities (CVE-2025-33179, 33180, 33181) in Cumulus Linux. Low-privileged users can escalate to admin control.
11 views
Daily Writeups
⤷ Title: Writing Code in Concrete: Why Solidity Breaks Web2 Developers
════════════════════════
𐀪 Author: Tabrez Mukadam
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:31:01 GMT
════════════════════════
⌗ Tags: #web3 #cybersecurity #bug_bounty #solidity #smart_contracts
Medium
Writing Code in Concrete: Why Solidity Breaks Web2 Developers
You can’t just “push a hotfix” when your smart contract holds $10 million.
7 views
Daily Writeups
⤷ Title: The USB Port Is the Most Trusted Interface in Computing — And We Barely Use It
════════════════════════
𐀪 Author: Harshal Vij
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:19:48 GMT
════════════════════════
⌗ Tags: #open_source #hardware #hacking #makers #automation
Medium
The USB Port Is the Most Trusted Interface in Computing — And We Barely Use It
The USB port is trusted more than almost any interface in modern computing. Plug in a keyboard or mouse, and the operating system accepts…
8 views
Daily Writeups
⤷ Title: Fortress (THM) Tryhackme Only Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:15:35 GMT
════════════════════════
⌗ Tags: #tryhackme #hacking #privilege_escalation #tryhackme_walkthrough #cybersecurity
Medium
Fortress (THM) Tryhackme Only Answer
Denoscription : Hack this machine and reclaim the fortress from the Evil Overlord!
8 views
Daily Writeups
⤷ Title: The Million-Dollar Gaps in Cybersecurity No One Is Filling
════════════════════════
𐀪 Author: J.C. James
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 00:22:28 GMT
════════════════════════
⌗ Tags: #investment #cybersecurity #infosec #ai
Medium
5 Million-Dollar Gaps in Cybersecurity No One Is Filling
Every post, commit, transaction, login, and API call is a strand of digital DNA. If you’re reading this, you have an imprint in that…
13 views
Daily Writeups
⤷ Title: Wormable XMRig BYOVD Cryptomining Campaign
════════════════════════
𐀪 Author: Threatsys Technologies Pvt Ltd
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:07:22 GMT
════════════════════════
⌗ Tags: #compliance #penetration_testing #cybersecurity #ethical_hacking #vapt_services
Medium
Wormable XMRig BYOVD Cryptomining Campaign
Threat Intelligence Report on Multi-Stage Crypto jacking &
17 views
Daily Writeups
⤷ Title: Saldırganın Gözüyle Savunmak: Penetration Testi
════════════════════════
𐀪 Author: Buğra Melih Yenice
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:03:30 GMT
════════════════════════
⌗ Tags: #penetration_testing
Medium
Saldırganın Gözüyle Savunmak: Penetration Testi
Bir sistemi gerçekten koruyabilmek için önce onu kırmayı bilmek gerekir. Penetration testi — ya da kısaca pentest — tam da bu felsefeye…
6 views
Daily Writeups
⤷ Title: TryHackMe — Principles of Security (Walkthrough)
════════════════════════
𐀪 Author: Hudson Lois Marcus
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 08:37:02 GMT
════════════════════════
⌗ Tags: #threat_modeling #tryhackme #tryhackme_writeup #principles_of_security #tryhackme_walkthrough
Medium
TryHackMe — Principles of Security (Walkthrough)
In this room, we will learn about the fundamental principles of information security as well as the frameworks used to protect data and…
10 views
Daily Writeups
⤷ Title: Advent of The Relics 2 — Operation Winter Blackout — HTB
════════════════════════
𐀪 Author: xiel
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:00:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint #hackthebox_writeup #hackthebox
Medium
Advent of The Relics 2 — Operation Winter Blackout — HTB
Lab ini adalah lanjutan dari lab sebelumnya (AoTR 1), setelah menyelesaikan lab pertama, terlihat bahwa rangkaian kejadian tidak berhenti…
18 views
Daily Writeups
⤷ Title: Why Some Hackers Choose the Dark Path When They Could Get Paid Legitimately
════════════════════════
𐀪 Author: Travis Ray Caverhill
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 08:16:42 GMT
════════════════════════
⌗ Tags: #grey_hat_hacker #black_hat_hacker #ethical_hacking #cybersecurity #white_hat_hacker
Medium
Why Some Hackers Choose the Dark Path When They Could Get Paid Legitimately
From the outside, it looks like a simple decision. On one side sits a legitimate career with certifications, conference badges, and a…
25 views
Daily Writeups
⤷ Title: How AI-Powered Cyber Attacks Are Driving Demand for Ethical Hacking
════════════════════════
𐀪 Author: Francycthomas
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:45:00 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
How AI-Powered Cyber Attacks Are Driving Demand for Ethical Hacking
The rapid growth of Artificial Intelligence (AI) is transforming industries across the world.The future of AI is the most essential part in…
31 views
Daily Writeups
⤷ Title: $1,500 PII Leak via GraphQL Field-Level Permission Bypass
════════════════════════
𐀪 Author: tinopreter
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 08:59:52 GMT
════════════════════════
⌗ Tags: #graphql #hackerone #hacking #bugbounty_writeup #api
Medium
$1,500 PII Leak via GraphQL Field-Level Permission Bypass
Akwaaba! I’ve been having some luck with GraphQL API vulnerabilities lately and this would be the first writeup on an incoming series. I…
38 views
Daily Writeups
⤷ Title: Stealth & Control: Mastering Linux Post-Exploitation with the Eden-RAT GUI
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 09:29:58 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Command Execution #cybersecurity tools 2026 #Eden_RAT #File manager #interactive shell #Linux RAT #Linux Security #Penetration Testing #red teaming #remote access tool
Penetration Testing Tools
Stealth & Control: Mastering Linux Post-Exploitation with the Eden-RAT GUI
Eden-RAT is a lightweight Linux remote access tool featuring a GUI, file manager, and a powerful interactive shell for seamless command execution.
27 views
Daily Writeups
⤷ Title: The Rogue Peer Threat: CISA Issues Emergency Directive to Thwart Global Cisco SD-WAN Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 09:18:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #Cisco Catalyst #CVE_2022_20775 #CVE_2026_20127 #Cyber Espionage #Emergency Directive 26_03 #Five Eyes #NCSC #rogue peer #SD_WAN #Tech News 2026 #UAT_8616
Penetration Testing Tools
The Rogue Peer Threat: CISA Issues Emergency Directive to Thwart Global Cisco SD-WAN Hijacking
The offensives targeting Cisco networking infrastructure have reached such a critical magnitude that United States authorities have invoked
20 views
Daily Writeups
⤷ Title: The Chatbot Saboteur: How Claude Was Coerced into a 150GB Heist of Mexican State Intelligence
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 09:17:04 +0000
════════════════════════
⌗ Tags: #Data Leak #Anthropic #ChatGPT #Claude Opus 4.6 #Data Exfiltration #Gambit Security #Jalisco #Mexico Cyberattack #National Digital Agency #OpenAI #Prompt Engineering #State_Sponsored Hacking #Tech News 2026
Penetration Testing Tools
The Chatbot Saboteur: How Claude Was Coerced into a 150GB Heist of Mexican State Intelligence
An unidentified adversary manipulated the Claude chatbot, developed by Anthropic, to orchestrate a series of surgical strikes against
14 views
Daily Writeups
⤷ Title: The Spreadsheet Spy: How a Decadelong Chinese Espionage Campaign Hijacked Google Sheets to Bypass Global Defenses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 09:15:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #China_linked APT #Cyber Espionage 2026 #Google Sheets C2 #Google Threat Intelligence #GRIDTIDE #Mandiant #Salt Typhoon #SoftEther VPN #telecommunications espionage #UNC2814 #xapt malware
Penetration Testing Tools
The Spreadsheet Spy: How a Decadelong Chinese Espionage Campaign Hijacked Google Sheets to Bypass Global Defenses
An international cyber-espionage campaign that languished in the shadows for a decade has abruptly surfaced across dozens of
12 views