Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: Database Indexing, B-Trees, and Query Optimization (2026)
════════════════════════
𐀪 Author: Kaushikking
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 08:11:45 GMT
════════════════════════
⌗ Tags: #database #sql_injection #b_tree #sql #postgresql
Medium
Database Indexing, B-Trees, and Query Optimization (2026)
A startup CTO once hired me because their primary dashboard was taking 14 seconds to load. He told me, “I don’t understand, I added an…
45 views
Daily Writeups
⤷ Title: Critical LiteLLM SQL Injection (CVE-2026-42208) Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 01:53:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_42208 #cybersecurity #Data Breach #Exploit #infosec #LiteLLM #Patch Alert #PostgreSQL #sql injection #Sysdig
Daily CyberSecurity
Critical LiteLLM SQL Injection (CVE-2026-42208) Exploited in the Wild
LiteLLM CVE-2026-42208 is under active exploitation. Attackers are using SQL injection to steal AI credentials. Patch to v1.83.7 and rotate keys immediately.
22 views
Daily Writeups
⤷ Title: Wiz ZeroDay.Cloud Event Reveals 20-Year-Old PostgreSQL Vulnerabilities
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 04 May 2026 15:08:40 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Google #MariaDB #PostgreSQL #Technology #Vulnerability #Wiz #ZeroDay.Cloud
Hackread
Wiz ZeroDay.Cloud Event Reveals 20-Year-Old PostgreSQL Vulnerabilities
Researchers revealed 20-year-old PostgreSQL flaws at Wiz ZeroDay.Cloud event, exposing critical bugs in pgcrypto and prompting urgent patches for database security.
28 views
Daily Writeups
⤷ Title: Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:20:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_7813 #Cyber Security #database security #infosec #Patch Alert #pgAdmin 4 #pgAdmin 9.15 #PostgreSQL #rce #sql injection
Daily CyberSecurity
Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution
pgAdmin 4 v9.15 fixes a 9.4 CVSS auth bypass and multiple RCE flaws. Attackers can execute OS commands via SQL tools. Upgrade your pgAdmin server now!
22 views
Daily Writeups
⤷ Title: Kubernetes Alert: 9.4 Severity RCE in CloudNativePG Enables PostgreSQL Superuser Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:01:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloud_native #CloudNativePG #CVE_2026_44477 #database security #infosec #Kubernetes Security #Patch Alert #PostgreSQL #privilege escalation #rce
Daily CyberSecurity
Kubernetes Alert: 9.4 Severity RCE in CloudNativePG Enables PostgreSQL Superuser Takeover
CVE-2026-44477 in CloudNativePG allows low-privilege users to gain root-level RCE via metrics exporters. Update to version 1.29.1 or 1.28.3 now!
25 views
Daily Writeups
⤷ Title: Massive PostgreSQL Update: 11 Vulnerabilities Patched as Version 14 Hits End-of-Life Warning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 02:12:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2026_6477 #CVE_2026_6637 #database security #DevOps #infosec #Patch Alert #Postgres Update #PostgreSQL #sql injection #SysAdmin
Daily CyberSecurity
Massive PostgreSQL Update: 11 Vulnerabilities Patched as Version 14 Hits End-of-Life Warning
PostgreSQL releases updates for versions 14-18 fixing 11 vulnerabilities (CVSS 8.8). Plus, critical End-of-Life deadline issued for Postgres 14.
9 views
Daily Writeups
⤷ Title: PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:51:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_2005 #database security #Heap Buffer Overflow #infosec #Patch Alert #pgcrypto #PoC Exploit #PostgreSQL #Public Disclosure #rce #Superuser Escalation
Daily CyberSecurity
PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
Technical details and GitHub PoC exploits disclosed for PostgreSQL pgcrypto CVE-2026-2005. Low-privilege users can seize root superuser RCE. Patch now!
11 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS: Severe SQL Injection Flaw Exposed in Marten .NET Document Store Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:04:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET Security #ACID Document Database #CVE_2026_45288 #Cyber Security #Full_Text Search #infosec #Marten .NET #Patch Alert #PostgreSQL #sql injection
Daily CyberSecurity
Critical 9.8 CVSS: Severe SQL Injection Flaw Exposed in Marten .NET Document Store Engine
Marten .NET library suffers a critical 9.8 CVSS SQL injection flaw (CVE-2026-45288). Learn how to block the exploit and patch your databases now!
17 views
Daily Writeups
⤷ Title: Drupal Database API Flaw (CVE-2026-9082) Exposes PostgreSQL Sites to Unauthenticated SQLi
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:35:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_9082 #Cyber Security #Database Abstraction API #Drupal Core #infosec #PostgreSQL Security #SA_CORE_2026_004 #sql injection #Symfony Patch #Twig Template #unauthenticated RCE
Daily CyberSecurity
Exploited in the Wild: Critical Drupal SQL Injection (CVE-2026-9082) Grants Attacker Root Access
Urgent: Drupal releases patches for highly critical SQLi flaw CVE-2026-9082. Unauthenticated attackers can exploit PostgreSQL backends for full remote RCE.
25 views
Daily Writeups
⤷ Title: Drupal SQL Injection Exploit: Critical Flaw Exploited in the Wild with Public PoC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:54:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_9082 #Drupal Core #PostgreSQL Superuser #Remote Code Execution #sql injection #threat analysis
Daily CyberSecurity
Drupal SQL Injection Exploit: Critical Flaw Exploited in the Wild with Public PoC
A critical Drupal SQL injection exploit is active in the wild. Read the analysis of this flaw now that the wild exploit PoC is fully public.
31 views