Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:13:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_22735 #CVE_2026_22737 #cybersecurity #infosec #Java security #patch management #Spring Framework #Spring MVC #Spring WebFlux #Vulnerability
Daily CyberSecurity
Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
Researchers found two flaws in Spring Framework (CVE-2026-22737 & CVE-2026-22735) allowing path bypasses and stream corruption. Patch your apps today.
29 views
Daily Writeups
⤷ Title: The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:13:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #CVE_2026_22732 #CVSS 9.1 #cybersecurity #data leak #HTTP Headers #infosec #Java security #Spring Security #Vulnerability
Daily CyberSecurity
The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
A critical 9.1 CVSS flaw in Spring Security (CVE-2026-22732) fails to write HTTP headers, exposing Java apps to severe data leaks. Update immediately.
12 views
Daily Writeups
⤷ Title: Apache ActiveMQ Patches RCE and Path Traversal Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 12:03:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ActiveMQ #CVE_2026_33227 #CVE_2026_34197 #infosec #Java security #JMX #Jolokia #Message Broker #Patch Alert #rce #Spring Framework
Daily CyberSecurity
Apache ActiveMQ Patches RCE and Path Traversal Flaws
Apache ActiveMQ patches a critical 2026 RCE flaw. Learn how CVE-2026-34197 uses Jolokia and Spring XML to hijack the JVM. Update to 5.19.5 or 6.2.3 now!
19 views
Daily Writeups
⤷ Title: Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:00:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2026_29146 #CVE_2026_34486 #Encryption Bypass #infosec #Java security #Kubernetes Security #request smuggling #vulnerability management #web server
Daily CyberSecurity
Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
Apache Tomcat discloses 10 vulnerabilities including encryption bypasses and Kubernetes token leaks. Upgrade now to secure your Java-based web applications.
11 views
Daily Writeups
⤷ Title: Log4j’s “Silent” Security Gap: New Advisories Warn of Data Loss and TLS Bypasses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 14:03:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Log4j #CVE_2026_34477 #CVE_2026_34480 #cybersecurity #infosec #Java security #Log Injection #Log4j 2.25.4 #Syslog Security #TLS Bypass
Daily CyberSecurity
Log4j’s "Silent" Security Gap: New Advisories Warn of Data Loss and TLS Bypasses
Apache Log4j 2.25.4 fixes 4 "silent" flaws, including TLS bypasses and log injection. Secure your infrastructure—upgrade now to prevent data loss.
32 views
Daily Writeups
⤷ Title: Critical 9.8 RCE Flaw in Qlik Talend Threatens Enterprise Data Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 08:03:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_6264 #Data Orchestration #infosec #Java security #JMX Port #Patch Alert #QlikTech #rce #Remote Code Execution #Talend
Daily CyberSecurity
Critical 9.8 RCE Flaw in Qlik Talend Threatens Enterprise Data Pipelines
Qlik issues a critical 9.8 CVSS alert for Talend JobServer and Runtime. Unauthenticated RCE via JMX ports puts data pipelines at risk. Patch immediately.
10 views
Daily Writeups
⤷ Title: Critical Pre-Auth RCE Found in OpenAM Identity Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:14:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Management #CVE_2026_33439 #Deserialization #infosec #JATO Framework #Java security #OpenAM #Patch Alert #Pre_Auth RCE #rce #Remote Code Execution
Daily CyberSecurity
Critical Pre-Auth RCE Found in OpenAM Identity Platform
Critical 9.3 RCE in OpenAM (CVE-2026-33439) allows unauthenticated attackers to execute OS commands via jato.clientSession. Patch your 16.0.5 servers now!
13 views
Daily Writeups
⤷ Title: Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 13:30:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40477 #CVE_2026_40478 #infosec #Java security #Patch Alert #rce #Server Side Template Injection #Spring Security #ssti #Thymeleaf #web development
Daily CyberSecurity
Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
Thymeleaf 3.1.4 fixes two critical 9.1 CVSS vulnerabilities. Unauthenticated attackers can bypass security for SSTI. Audit your user input and patch today!
13 views
Daily Writeups
⤷ Title: 7 Critical Vulnerabilities Threaten Spring Security 7.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:54:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_22752 #infosec #Java security #JWT Security #Patch Alert #Spring Security #Spring Security 7.0 #ssrf #TOCTOU #X.509 Impersonation
Daily CyberSecurity
7 Critical Vulnerabilities Threaten Spring Security 7.0
The Spring Security team has issued a series of security advisories detailing seven distinct vulnerabilities impacting the widely used authentication and authorization framework. While several fla…
15 views
Daily Writeups
⤷ Title: Critical Authentication Bypass in Apache HttpClient 5.6
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:45:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache HttpClient #Apache Software Foundation #CVE_2026_40542 #HTTP Components #infosec #Java security #Microservices Security #Mutual Authentication #Patch Alert #SCRAM_SHA_256
Daily CyberSecurity
Critical Authentication Bypass in Apache HttpClient 5.6
Apache HttpClient 5.6 reveals a critical auth flaw (CVE-2026-40542) in SCRAM-SHA-256. Secure your Java microservices—upgrade to 5.6.1 immediately.
30 views
Daily Writeups
⤷ Title: Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:42:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache ActiveMQ #CVE_2026_40466 #CVE_2026_41043 #CVE_2026_41044 #cybersecurity #infosec #Java security #Jolokia #JVM #Middleware Security #rce #Spring Framework #XSS
Daily CyberSecurity
Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
Critical RCE and XSS vulnerabilities hit Apache ActiveMQ (CVE-2026-41044, 40466). Authenticated attackers can hijack the JVM. Update to 5.19.6 or 6.2.5 now.
28 views
Daily Writeups
⤷ Title: The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 13:10:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40976 #CVSS 9.1 #cybersecurity #DevTools #infosec #Java security #Patch Alert #rce #Spring Boot #Spring Framework #Timing Attack
Daily CyberSecurity
The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
In a major update for the Java ecosystem, several critical vulnerabilities have been disclosed in Spring Boot, the framework that powers millions of modern enterprise applications. These flaws—CVE…
16 views
Daily Writeups
⤷ Title: Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 02:39:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CosmosDB #CVE_2026_40967 #CVE_2026_40978 #infosec #Java security #Patch Alert #RAG #Spring AI #sql injection #Vector Database
Daily CyberSecurity
Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
Spring AI discloses two critical injection flaws (CVE-2026-40967 & 40978) in Vector Store implementations. Upgrade to v1.0.6 or v1.1.5 now to prevent data leaks.
27 views
Daily Writeups
⤷ Title: Apache MINA Hit by Twin Critical RCE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 01:00:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AbstractIoBuffer #Apache MINA #CVE_2026_41635 #cybersecurity #Deserialization #infosec #Java security #network_security #Patch Alert #rce
Daily CyberSecurity
Unfiltered: The 9.8 CVSS Deserialization Loophole Hijacking Apache MINA
Apache MINA (CVE-2026-41635) suffers a critical 9.8 CVSS RCE flaw. Learn how a deserialization filter bypass puts servers at risk and how to patch today.
22 views
Daily Writeups
⤷ Title: Apache MINA Fixes Critical RCE Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 02:30:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache MINA #CVE_2026_42778 #CVE_2026_42779 #Deserialization #infosec #IoBuffer #Java security #patch management #rce #Vulnerability Research
Daily CyberSecurity
Apache MINA Fixes Critical RCE Vulnerabilities
Apache MINA issues emergency patches for two 9.8 CVSS RCE flaws left behind by mistake. Unauthenticated attackers can bypass filters via deserialization.
16 views
Daily Writeups
⤷ Title: Apache Neethi Patches Triple Threat of DoS and Redirection Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 01:25:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Neethi #CVE_2026_42402 #CVE_2026_42403 #CVE_2026_42404 #Denial of Service #infosec #Java security #Patch Alert #ssrf #Web Services #WS_Policy
Daily CyberSecurity
Apache Neethi Patches Triple Threat of DoS and Redirection Flaws
Apache Neethi v3.2.2 patches critical flaws, including an exponential complexity attack and infinite loops. Secure your Java web services and patch today!
15 views
Daily Writeups
⤷ Title: Critical Flaws in Apache Thrift Threaten Multi-Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:00:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #CVE_2026_43868 #CVE_2026_43869 #CVE_2026_43870 #Denial of Service #infosec #Java security #Man in the Middle #Microservices Security #Node.js #Rust Security
Daily CyberSecurity
Critical Flaws in Apache Thrift Threaten Multi-Language
Apache Thrift v0.23.0 fixes critical Rust DoS, Java MitM, and Node.js path traversal flaws. Secure your cross-language microservices and upgrade immediately!
26 views
Daily Writeups
⤷ Title: Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 12:38:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41901 #cybersecurity #infosec #Java security #Patch Alert #rce #Sandbox Bypass #Server Side Template Injection #ssti #Thymeleaf #web development
Daily CyberSecurity
Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection
Critical 9.0 CVSS flaw in Thymeleaf (CVE-2026-41901) allows SSTI and arbitrary code execution. Secure your Java web apps—upgrade to v3.1.5.RELEASE now!
10 views