Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: Jenkins Faces Wave of Plugin Flaws, Including SAML Authentication Bypass (CVE-2025-64131)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 02:08:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD #CVE_2025_64131 #Jenkins #Plugin Vulnerability #SAML #Secret Exposure #Session Hijacking
Daily CyberSecurity
Jenkins Faces Wave of Plugin Flaws, Including SAML Authentication Bypass (CVE-2025-64131)
Jenkins warned of a Critical SAML Plugin flaw (CVE-2025-64131) that allows session replay/hijacking due to a missing cache. Multiple plugins also expose API tokens in plaintext.
20 views
Daily Writeups
⤷ Title: What I Learned from Working on an Integrated Security Scanning Pipeline
════════════════════════
𐀪 Author: Irfan HN
════════════════════════
ⴵ Time: Sun, 30 Nov 2025 15:19:43 GMT
════════════════════════
⌗ Tags: #platform_engineering #application_security #jenkins #devsecops #ci_cd_pipeline
Medium
What I Learned from Working on an Integrated Security Scanning Pipeline
During my internship I was given the opportunity to get hands-on with the security scanning part of our CI/CD pipeline. The main idea of…
17 views
Daily Writeups
⤷ Title: High-Severity Jenkins Flaws Risk Unauthenticated DoS via HTTP CLI and XSS Via Coverage Reports
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 02:38:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Build Token #CI/CD #Coverage Plugin #CVE_2025_67635 #dos #HTTP CLI #Jenkins #XSS
Daily CyberSecurity
High-Severity Jenkins Flaws Risk Unauthenticated DoS via HTTP CLI and XSS Via Coverage Reports
Jenkins patched nine flaws: a High-severity unauthenticated DoS (CVE-2025-67635) via HTTP CLI and XSS via Coverage Plugin. Build tokens are now encrypted. Update to v2.541 immediately.
18 views
Daily Writeups
⤷ Title: From Code to Compromise
 A Simple Guide to Jenkins, Docker, and GitHub in Bug Bounty
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 04:14:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #github #jenkins #docker
Medium
From Code to Compromise .. A Simple Guide to Jenkins, Docker, and GitHub in Bug Bounty
Every app you test in bug bounty is just the visible tip of a much bigger system. Behind that login page or API endpoint, there is usually…
50 views
Daily Writeups
⤷ Title: Proving Grounds: Prison (Linux) Full Walkthrough
════════════════════════
𐀪 Author: Ekemini Bassey
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 17:55:00 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #jenkins_security #tunneling #sql_injection #privilege_escalation
Medium
📝 [Writeup] Proving Grounds: Prison (Linux)
From Prison Break to Jenkins Break: Tunnelling for Root
31 views
Daily Writeups
⤷ Title: [Writeup] Proving Grounds: Prison (Linux)
════════════════════════
𐀪 Author: Ekemini Bassey
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 17:55:00 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #jenkins_security #tunneling #sql_injection #privilege_escalation
Medium
📝 [Writeup] Proving Grounds: Prison (Linux)
From Prison Break to Jenkins Break: Tunnelling for Root
19 views
Daily Writeups
⤷ Title: CI/CD at Risk: High-Severity Jenkins XSS Flaw Exposes Build Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 14:01:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #automation server #CI/CD security #Cross_Site Scripting #CVE_2026_27099 #CVE_2026_27100 #DevOps Security #Information Disclosure #Jenkins #Patch Alert #XSS
Daily CyberSecurity
CI/CD at Risk: High-Severity Jenkins XSS Flaw Exposes Build Environments
Jenkins patches a high-severity stored XSS flaw (CVE-2026-27099) and an info disclosure bug. Update to version 2.551 or LTS 2.541.2 to secure pipelines.
31 views
Daily Writeups
⤷ Title: Critical Jenkins Flaws Expose CI/CD Servers to Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:40:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2026_33001 #CVE_2026_33002 #DevSecOps #DNS Rebinding #Jenkins #LoadNinja #Patch Alert #Remote Code Execution #Vulnerability
Daily CyberSecurity
Critical Jenkins Flaws Expose CI/CD Servers to Remote Code Execution
Jenkins patches critical flaws (CVE-2026-33001 & CVE-2026-33002) allowing remote code execution and full CI/CD pipeline compromise. Update to 2.555 now.
21 views
Daily Writeups
⤷ Title: High-Severity RCE and XSS Flaws Found in Popular CI/CD Jenkins Plugins
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 02:10:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2026_42520 #CVE_2026_42523 #cybersecurity #DevSecOps #infosec #Jenkins #Patch Alert #plugin security #rce #Vulnerability Research #XSS
Daily CyberSecurity
High-Severity RCE and XSS Flaws Found in Popular CI/CD Jenkins Plugins
Jenkins patches high-severity RCE in Credentials Binding and XSS in GitHub/HTML Publisher plugins. Secure your CI/CD pipeline by upgrading today.
15 views
Daily Writeups
⤷ Title: New DDoS Botnet Exploits Jenkins to Target Gaming Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 09:10:36 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CI/CD security #cyber_espionage #Darktrace #ddos #Game Server Security #Gaming Industry #Groovy Script #infosec #Jenkins #rce #UDP flood
Daily CyberSecurity
New DDoS Botnet Exploits Jenkins to Target Gaming Servers
Darktrace uncovers a new DDoS botnet hijacking Jenkins servers to target game servers. Protect your CI/CD pipeline from specialized gaming-layer attacks.
30 views
Daily Writeups
⤷ Title: Zero to Hero DevSecOps Roadmap (Future-Ready Security Engineer Guide)
════════════════════════
𐀪 Author: Kanishkakhandelwal
════════════════════════
ⴵ Time: Mon, 04 May 2026 05:58:35 GMT
════════════════════════
⌗ Tags: #security #devsecops #ci_cd_pipeline #application_security #jenkins
Medium
🚀 Zero to Hero DevSecOps Roadmap (Future-Ready Security Engineer Guide)
Hi, I’m Kanishka Khandelwal — an Associate Security Engineer and bug bounty hunter.
16 views
Daily Writeups
⤷ Title: Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:24:29 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure DevOps #CI/CD Security #DevSecOps #GitHub Actions #GitLab CI #jenkins #JFrog #Pentesting Tools #supply chain attack #Taint Tracking #Trajan #WebAssembly
Penetration Testing Tools
Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
Trajan isn't just a scanner. It maps dependency graphs and uses built-in attack plugins to simulate real-world CI/CD supply chain compromises.
24 views
Daily Writeups
⤷ Title: Jeeves
════════════════════════
𐀪 Author: Md Fahim Al Shihab
════════════════════════
ⴵ Time: Mon, 11 May 2026 09:47:12 GMT
════════════════════════
⌗ Tags: #windows #jenkins #cybersecurity #hackthebox #hacking
Medium
Jeeves
1. Nmap Scan
14 views
Daily Writeups
⤷ Title: Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 08:16:40 +0000
════════════════════════
⌗ Tags: #Malware #Checkmarx #Credential Harvesting #Cybersecurity 2026 #DevOps Security #Infosec #jenkins #Jenkins Marketplace #Malware Alert #Shai_Hulud #supply chain attack #TeamPCP
Penetration Testing Tools
Checkmarx Fails Again: TeamPCP Hijacks Jenkins Plugin to Harvest Developer Credentials
Unidentified adversaries have subverted the Checkmarx plugin for Jenkins, embedding deleterious code designed for credential exfiltration. This incursion
17 views
Daily Writeups
⤷ Title: New Jenkins Security Advisory Highlights Severe Plugin Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 01:06:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48916 #Email Extension #Jenkins #LDAP Plugin #Path Traversal #Remote Code Execution #security advisory
Daily CyberSecurity
New Jenkins Security Advisory Highlights Severe Plugin Flaws
Discover the latest Jenkins plugin security flaws. Learn how unvalidated LDAP referrals and arbitrary file reads impact your controller servers.
21 views
Daily Writeups
⤷ Title: Critical Jenkins Security Advisory 2026: Patch Multiple Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 02:47:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_53435 #CVE_2026_53441 #cybersecurity #Jenkins #Vulnerability
Daily CyberSecurity
Critical Jenkins Security Advisory 2026: Patch Multiple Flaws
A critical Jenkins security advisory 2026 warns of deserialization and XSS flaws like CVE-2026-53435. Patch your CI/CD pipelines immediately!
19 views
Daily Writeups
⤷ Title: Jenkins RCE Vulnerability CVE-2026-53435 Now Under Active Exploitation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 09:26:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CI/CD security #CVE_2026_53435 #Deserialization #Jenkins #rce
Daily CyberSecurity
Jenkins RCE Vulnerability CVE-2026-53435 Now Under Active Exploitation
A Jenkins RCE vulnerability (CVE-2026-53435) is under active exploitation. Honeypots are seeing attacks now, so patch your Jenkins controller fast.
15 views