Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: What TryHackMe Vulnversity Taught Me About HTTP Enumeration, File Upload RCE, and Linux Privilege…
════════════════════════
𐀪 Author: Shivam Sharma
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 05:31:00 GMT
════════════════════════
⌗ Tags: #web_enumeration #pentesting #http_enumeration #tryhackme #linux_priv_esc
Medium
What TryHackMe Vulnversity Taught Me About HTTP Enumeration, File Upload RCE, and Linux Privilege…
A practical TryHackMe walkthrough showing how a hidden web directory, insecure file upload handling, and SUID abuse led from initial access
22 views
Daily Writeups
⤷ Title: Massive Remediation: Microsoft Resolves Historic Influx of Flaws in June 2026 Patch Tuesday
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 03:33:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #BitLocker bypass fix #critical RCE bugs #GreenPlasma vulnerability #HTTP/2 Bomb exploit #Patch Tuesday flaws #Windows June 2026 updates
Information Security News
Windows June 2026 Updates: New Zero-Day Fixes
Discover the latest Windows June 2026 updates. Learn how Microsoft patches 200 vulnerabilities, critical bugs, and three massive zero-day exploits.
12 views
Daily Writeups
⤷ Title: PeopleSoft RCE Security Bug: New Oracle Fix
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 04:40:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_35273 #HTTP Exploit #Oracle Patch #patch management #PeopleSoft Enterprise #Remote Code Execution #Unauthenticated Attack
Daily CyberSecurity
Critical Vulnerability Discovered in Core Database Management Interface
A critical PeopleSoft RCE security bug allows an unauthenticated HTTP exploit to execute code. Learn how to patch CVE-2026-35273 immediately.
10 views
Daily Writeups
⤷ Title: A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:35:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #http_request #burpsuite
Medium
A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
Single unvalidated request header can become an execution vehicle for password poisoning and server-side exploitation.
16 views
Daily Writeups
⤷ Title: F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:23:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_42055 #CVE_2026_42530 #F5 #HTTP/3 #nginx #NGINX vulnerabilities #use after free
Daily CyberSecurity
F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
Two critical NGINX vulnerabilities, CVE-2026-42530 and CVE-2026-42055, let remote attackers crash workers and possibly run code. Patch NGINX now.
11 views
Daily Writeups
⤷ Title: HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
════════════════════════
𐀪 Author: Amit Pal | amitpxl
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 13:51:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request_smuggling #application_security #web_application_security
Medium
HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
Stop screenshotting every double response in Burp Repeater. Here’s how to separate harmless protocol features from actual queue poisoning.
18 views
Daily Writeups
⤷ Title: Quick overview of RFC 10008: The HTTP QUERY Method
════════════════════════
𐀪 Author: Sanjeev Jaiswal (Jassi)
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 09:35:19 GMT
════════════════════════
⌗ Tags: #api_security #rfc_10008 #application_security #web_development #http_methods
Medium
Quick overview of RFC 10008: The HTTP QUERY Method
A new HTTP method just shipped that GET and POST have needed for 25 years.
10 views
Daily Writeups
⤷ Title: HTTP QUERY Method Explained:
════════════════════════
𐀪 Author: Simran Madhok
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 16:28:50 GMT
════════════════════════
⌗ Tags: #http_query #api_development #rest_api #api_security #web_development
Medium
HTTP QUERY Method Explained: RFC 10008 and the Future of Safe API Queries
Switch to QUERY http method Secure coding should always be the top priority for developers while building applications. Hence it was a welcome news when the HTTP QUERY Method was formally introduced …
23 views
Daily Writeups
⤷ Title: HTTP QUERY Method: A New Era for API Query Operations
════════════════════════
𐀪 Author: Shubham Girme
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 11:03:40 GMT
════════════════════════
⌗ Tags: #http_query_method #http_methods #query_vs_get_vs_post #api_security #https
Medium
HTTP QUERY Method: A New Era for API Query Operations
As modern APIs increasingly require expressive query capabilities, HTTP QUERY offers a standardized solution for transmitting complex…
53 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
════════════════════════
𐀪 Author: Furkanalpgunay
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:22:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #http_request_smuggling #cybersecurity #penetration_testing #web_security
Medium
HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
From CL.TE and TE.CL to HTTP/2 downgrade and client-side desync — a complete, hands-on guide built from 20+ labs I solved myself.
13 views