Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: PHP SQL Injection Flaw CVE-2026-17543 Patched in Latest Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 01:58:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BCMath #CVE_2026_17543 #php #PHP Security #PostgreSQL #sql injection
Daily CyberSecurity
PHP SQL Injection Flaw CVE-2026-17543 Patched in Latest Release
TL;DR The PHP project fixed three flaws in its latest releases. The headline bug is a PHP SQL injection flaw, CVE-2026-17543, in the PostgreSQL extension. Two memory-safety bugs round out the set.…
26 views
Daily Writeups
⤷ Title: CVE-2026-63223: CodeIgniter4 RCE Vulnerability Rated CVSS 9.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 09:19:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CodeIgniter4 #CVE_2026_63223 #File Upload Vulnerability #Path Traversal #PHP Framework #Remote Code Execution #sql injection #Web Security
Daily CyberSecurity
CVE-2026-63223: CodeIgniter4 RCE Vulnerability Rated CVSS 9.8
TL;DR: The CodeIgniter4 team patched four security flaws in release v4.7.4. The most severe, a CodeIgniter4 RCE vulnerability tracked as CVE-2026-63223, scores CVSS 9.8. It can lead to remote code…
27 views
Daily Writeups
⤷ Title: The Debug Flag That Opened the Door: A Journey From Django Debug Mode to Critical RCE
════════════════════════
𐀪 Author: Forhad Parvez
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 17:39:17 GMT
════════════════════════
⌗ Tags: #django #vulnerability_assessment #rce #bug_bounty #php
Medium
The Debug Flag That Opened the Door: A Journey From Django Debug Mode to Critical RCE
About Me
24 views
Daily Writeups
⤷ Title: Top 5 PHP Frameworks for Web Development in 2025
════════════════════════
𐀪 Author: Sahil Khurana
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 05:18:03 GMT
════════════════════════
⌗ Tags: #web_development #backend_development #scalable_solutions #application_security #php_frameworks
Medium
Top 5 PHP Frameworks for Web Development in 2025
Originally published on the Innostax Engineering Blog
18 views
Daily Writeups
⤷ Title: File Upload Security: Polyglots, Content-Type Confusion, and Storage Risks
════════════════════════
𐀪 Author: CYBER MIND SPACE
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 03:46:24 GMT
════════════════════════
⌗ Tags: #ethical_hacking #file_upload_security #cybersecurity #cybermindspace #php
Medium
File Upload Security: Polyglots, Content-Type Confusion, and Storage Risks
The file passed image validation. It was also PHP. That’s the whole attack.
34 views
Daily Writeups
⤷ Title: Attack and Security Series: Episode 6
════════════════════════
𐀪 Author: Saurabh Pandey
════════════════════════
ⴵ Time: Sun, 30 Aug 2026 17:50:20 GMT
════════════════════════
⌗ Tags: #php #rce #secuirty #episodes
Medium
Attack and Security Series: Episode 6
When a File Upload Became Remote Code Execution 💀
7 views
Daily Writeups
⤷ Title: HMAC vs Signature — Choosing the Right Integrity Check in PHP
════════════════════════
𐀪 Author: Ann R.
════════════════════════
ⴵ Time: Sat, 05 Sep 2026 10:29:12 GMT
════════════════════════
⌗ Tags: #digital_signatures #api_security #jwt #php #cryptography
Medium
HMAC vs Signature — Choosing the Right Integrity Check in PHP
12 microservices, 1 shared JWT secret, 1 compromised = all auth broken. Why HS256 was wrong. RS256 fix, verified in PHP 8.3.
51 views
Daily Writeups
⤷ Title: PHP Web Server Rootkit Targets F5 BIG-IP Devices
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 07 Sep 2026 13:02:15 +0000
════════════════════════
⌗ Tags: #Malware #BIG_IP APM #F5 Networks #Linux Malware #PHP web server rootkit #Poisoned Refresh
Daily CyberSecurity
PHP Web Server Rootkit Targets F5 BIG-IP Devices
At a Glance Malware family Poisoned Refresh (Linux rootkit implant) Threat actor Unconfirmed (tracked by F5 as activity cluster c05d5254) Target or victims F5 BIG-IP Access Policy Management (APM)…
12 views
Daily Writeups
⤷ Title: Timing-Safe Comparison in PHP — When hash_equals Is and Isn't Enough
════════════════════════
𐀪 Author: Ann R.
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 16:52:04 GMT
════════════════════════
⌗ Tags: #vulnerability #web_security #php #api_security #cryptography
Medium
Timing-Safe Comparison in PHP — When hash_equals Is and Isn't Enough
hash_equals leaks length: 1.55x faster for mismatch. Verified. Plus other traps + fixes. Complete timing-safe comparison guide.
33 views
Daily Writeups
⤷ Title: Source Code Review: PHP (Part 1) -THM Walkthrough
════════════════════════
𐀪 Author: FireWolf
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 03:51:11 GMT
════════════════════════
⌗ Tags: #php #tryhackme #tryhackme_writeup #ctf #tryhackme_walkthrough
Medium
Source Code Review: PHP (Part 1)
Source Code Review: PHP (Part 1) Learn the basics of source code review for PHP. Task 1: Introduction Secure code review is the practice of reading an application’s source code to find security …
35 views