Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Next.js Middleware Flaw Lets Attackers Bypass Authorization
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 26 Mar 2025 16:40:56 +0000
════════════════════════
⌗ Tags: #Security #Authorization #Middleware #Next.js #React #Vulnerability
Hackread - Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Next.js Middleware Flaw Lets Attackers Bypass Authorization
Follow us on Blue Sky, Mastodon Twitter, Facebook and LinkedIn @Hackread
43 views
Daily Writeups
⤷ Title: Exploiting Next.js Middleware Authorization Bypass (CVE-2025–29927): A Deep Dive
════════════════════════
𐀪 Author: Md Fahim Al Shihab
════════════════════════
ⴵ Time: Thu, 03 Apr 2025 18:41:41 GMT
════════════════════════
⌗ Tags: #cve #cve_2025_29927 #hacking #middleware_nextjs #cybersecurity
Medium
Exploiting Next.js Middleware Authorization Bypass (CVE-2025–29927): A Deep Dive
Introduction
29 views
Daily Writeups
⤷ Title: Next.js Middleware Bypass Vulnerability (CVE-2025–29927): What You Need to Know
════════════════════════
𐀪 Author: Kate B
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 07:55:15 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #nextjs #middleware_nextjs #cybersecurity
Medium
Next.js Middleware Bypass Vulnerability (CVE-2025–29927): What You Need to Know
How to Protect Your Next.js Applications from a Critical Middleware Bypass Vulnerability (CVE-2025–29927)
30 views
Daily Writeups
⤷ Title: Next.js Middleware Vulnerability: How CVE-2025–29927 Enables Authorization Bypass
════════════════════════
𐀪 Author: Nitin Gavhane
════════════════════════
ⴵ Time: Fri, 25 Apr 2025 22:31:09 GMT
════════════════════════
⌗ Tags: #middleware_vulnerability #authorization_bypass #nextjs #cve_2025_29927 #bug_bounty
Medium
Next.js Middleware Vulnerability: How CVE-2025–29927 Enables Authorization Bypass
Hey there! In today’s blog, I’m diving into the Next.js Middleware Exploit — specifically CVE-2025–29927, an authorization bypass…
29 views
Daily Writeups
⤷ Title: Writing PHP Middleware That Sniffs Out Hallucinated AI Responses Before They Wreck Your App
════════════════════════
𐀪 Author: Asian Digital Hub
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 10:08:26 GMT
════════════════════════
⌗ Tags: #php_developers #php_development #api_security #php #middleware
Medium
Writing PHP Middleware That Sniffs Out Hallucinated AI Responses Before They Wreck Your App
You thought ChatGPT was your co-pilot until it told your PHP app that 18 + blueberry equals JSON. Yep. That’s the moment your backend went…
61 views
Daily Writeups
⤷ Title: Rate Limiting in .NET APIs
════════════════════════
𐀪 Author: Karthikeyan NS
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 16:05:21 GMT
════════════════════════
⌗ Tags: #api_security #dotnet #middleware #rate_limiting #redis
Medium
Rate Limiting in .NET APIs
Protect your .NET APIs from abuse and ensure scalability by implementing rate limiting using built-in middleware, custom logic, and Redis…
50 views
Daily Writeups
⤷ Title: How to Write PHP Middleware That Thinks Like a Firewall
════════════════════════
𐀪 Author: Asian Digital Hub
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 08:26:03 GMT
════════════════════════
⌗ Tags: #web_development #php #middleware #application_security #firewall
Medium
How to Write PHP Middleware That Thinks Like a Firewall
If your PHP middleware is just passing requests along like an absent-minded waiter, you’re basically inviting trouble to dinner and letting…
13 views
Daily Writeups
⤷ Title: Ghost HTTP Methods: How HTTP Verb Mutation Bypasses Modern WAFs across Middleware Layers
════════════════════════
𐀪 Author: Pratik Dahal
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 20:44:43 GMT
════════════════════════
⌗ Tags: #http_request #web_application_security #security_research #bug_bounty #middleware
Medium
Ghost HTTP Methods: How HTTP Verb Mutation Bypasses Modern WAFs across Middleware Layers
Introduction
34 views
Daily Writeups
⤷ Title: Important Security and Audit Middlewares while using Express in Node.js (Bonus point: GraphQL)
════════════════════════
𐀪 Author: Jayant Varshney
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 05:21:04 GMT
════════════════════════
⌗ Tags: #nodejs #expressjs #middleware #security #cybersecurity
Medium
Important Security and Audit Middlewares while using Express in Node.js (Bonus point: GraphQL)
Recently, I was looking into the security configurations in one of my apps which is developed in Node.js and using Express.js to configure…
18 views
Daily Writeups
⤷ Title: Next.js: CVE-2025–29927 -TryHackMe WriteUp
════════════════════════
𐀪 Author: Bridget
════════════════════════
ⴵ Time: Sun, 18 Jan 2026 07:28:38 GMT
════════════════════════
⌗ Tags: #cve_2025_29927 #nextjs #tryhackme #ethical_hacking #middleware
Medium
Next.js: CVE-2025–29927 -TryHackMe WriteUp
Explore an authorisation bypass vulnerability in Next.js
40 views
Daily Writeups
⤷ Title: Critical 9.1 CVSS Bypass in Clerk’s Middleware Gating
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 12:05:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Astro Security #Authentication Bypass #Clerk #createRouteMatcher #CVSS 9.1 #infosec #Middleware Bypass #Next.js Security #Nuxt Security #Patch Alert #web development
Daily CyberSecurity
Critical 9.1 CVSS Bypass in Clerk’s Middleware Gating
Clerk reveals a critical 9.1 CVSS flaw in createRouteMatcher. Crafted requests can bypass middleware gating in Next.js, Nuxt, and Astro. Patch your apps now!
17 views
Daily Writeups
⤷ Title: Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:42:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache ActiveMQ #CVE_2026_40466 #CVE_2026_41043 #CVE_2026_41044 #cybersecurity #infosec #Java security #Jolokia #JVM #Middleware Security #rce #Spring Framework #XSS
Daily CyberSecurity
Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
Critical RCE and XSS vulnerabilities hit Apache ActiveMQ (CVE-2026-41044, 40466). Authenticated attackers can hijack the JVM. Update to 5.19.6 or 6.2.5 now.
28 views
Daily Writeups
⤷ Title: Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_33453 #cybersecurity #Header injection #infosec #Integration Security #java #Java deserialization #middleware #Patch Alert #rce
Daily CyberSecurity
Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
Critical RCE flaws hit Apache Camel via header injection and unsafe deserialization. Secure your integrations and upgrade to version 4.20.0 today.
18 views