Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 02:39:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CosmosDB #CVE_2026_40967 #CVE_2026_40978 #infosec #Java security #Patch Alert #RAG #Spring AI #sql injection #Vector Database
Daily CyberSecurity
Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
Spring AI discloses two critical injection flaws (CVE-2026-40967 & 40978) in Vector Store implementations. Upgrade to v1.0.6 or v1.1.5 now to prevent data leaks.
27 views
Daily Writeups
⤷ Title: Apache MINA Hit by Twin Critical RCE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 01:00:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AbstractIoBuffer #Apache MINA #CVE_2026_41635 #cybersecurity #Deserialization #infosec #Java security #network_security #Patch Alert #rce
Daily CyberSecurity
Unfiltered: The 9.8 CVSS Deserialization Loophole Hijacking Apache MINA
Apache MINA (CVE-2026-41635) suffers a critical 9.8 CVSS RCE flaw. Learn how a deserialization filter bypass puts servers at risk and how to patch today.
22 views
Daily Writeups
⤷ Title: Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_33453 #cybersecurity #Header injection #infosec #Integration Security #java #Java deserialization #middleware #Patch Alert #rce
Daily CyberSecurity
Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
Critical RCE flaws hit Apache Camel via header injection and unsafe deserialization. Secure your integrations and upgrade to version 4.20.0 today.
18 views
Daily Writeups
⤷ Title: Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 12:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #C++ #CVE_2026_41603 #cybersecurity #go #infosec #java #memory corruption #mitm #Node.js #RPC Security #swift
Daily CyberSecurity
Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws
Apache Thrift fixes critical cross-language vulnerabilities (MitM, memory corruption, DoS). Secure your Java, Go, and C++ stacks by upgrading to version 0.23.0.
10 views
Daily Writeups
⤷ Title: Apache MINA Fixes Critical RCE Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 02:30:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache MINA #CVE_2026_42778 #CVE_2026_42779 #Deserialization #infosec #IoBuffer #Java security #patch management #rce #Vulnerability Research
Daily CyberSecurity
Apache MINA Fixes Critical RCE Vulnerabilities
Apache MINA issues emergency patches for two 9.8 CVSS RCE flaws left behind by mistake. Unauthenticated attackers can bypass filters via deserialization.
16 views
Daily Writeups
⤷ Title: Apache Neethi Patches Triple Threat of DoS and Redirection Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 01:25:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Neethi #CVE_2026_42402 #CVE_2026_42403 #CVE_2026_42404 #Denial of Service #infosec #Java security #Patch Alert #ssrf #Web Services #WS_Policy
Daily CyberSecurity
Apache Neethi Patches Triple Threat of DoS and Redirection Flaws
Apache Neethi v3.2.2 patches critical flaws, including an exponential complexity attack and infinite loops. Secure your Java web services and patch today!
15 views
Daily Writeups
⤷ Title: The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:42:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_22679 #Debugging API #enterprise security #Java Vulnerability #Office Automation Security #Patch Management #RCE #remote code execution #Tomcat #Vega Research #Weaver E_cology
Penetration Testing Tools
The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
Adversaries commenced the exploitation of a critical vulnerability within Weaver E-cology a mere few days following the release
8 views
Daily Writeups
⤷ Title: Critical Flaws in Apache Thrift Threaten Multi-Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:00:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #CVE_2026_43868 #CVE_2026_43869 #CVE_2026_43870 #Denial of Service #infosec #Java security #Man in the Middle #Microservices Security #Node.js #Rust Security
Daily CyberSecurity
Critical Flaws in Apache Thrift Threaten Multi-Language
Apache Thrift v0.23.0 fixes critical Rust DoS, Java MitM, and Node.js path traversal flaws. Secure your cross-language microservices and upgrade immediately!
26 views
Daily Writeups
⤷ Title: Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 12:38:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41901 #cybersecurity #infosec #Java security #Patch Alert #rce #Sandbox Bypass #Server Side Template Injection #ssti #Thymeleaf #web development
Daily CyberSecurity
Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection
Critical 9.0 CVSS flaw in Thymeleaf (CVE-2026-41901) allows SSTI and arbitrary code execution. Secure your Java web apps—upgrade to v3.1.5.RELEASE now!
10 views
Daily Writeups
⤷ Title: Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:01:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Wicket #CVE_2026_40010 #CVE_2026_43646 #CVE_2026_43975 #infosec #Java security #Patch Alert #Path Traversal #Session Fixation #web development #XSS
Daily CyberSecurity
Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
Apache Wicket 10.9.0 fixes 3 Critical flaws: Path Traversal (CVE-2026-43975), Session Fixation, and Resource Guard bypass. Secure your Java apps and patch now!
13 views
Daily Writeups
⤷ Title: Apache Tomcat RCE Details and Exploit Code Now Public
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 03:22:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #Cyber Security #EncryptInterceptor #Exploit PoC #infosec #Java security #Patch Alert #rce #vulnerability disclosure
Daily CyberSecurity
Apache Tomcat RCE Details and Exploit Code Now Public
Apache Tomcat RCE alert: CVE-2026-34486 exploit code and details are now public. A "fail-open" flaw enables RCE via Tribes clustering. Update immediately.
21 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:36:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Redshift #aws security #CVE_2026_8178 #Cyber Security #Data Warehouse #database security #infosec #Java security #JDBC Driver #Patch Alert #rce
Daily CyberSecurity
Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
CVE-2026-8178 in Amazon Redshift JDBC Driver allows RCE via unsafe class loading. Protect your data warehouse and update to version 2.2.2 now!
12 views
Daily Writeups
⤷ Title: 【 Java Persistence API 】- 複雜查詢只能退回寫原生 SQL？掌握 JPQL 寫出優雅的物件導向查詢
════════════════════════
𐀪 Author: CoreyLi
════════════════════════
ⴵ Time: Fri, 15 May 2026 12:01:00 GMT
════════════════════════
⌗ Tags: #sql_injection #orm #jpa #java #spring_data_jpa
Medium
【 Java Persistence API 】- 複雜查詢只能退回寫原生 SQL？掌握 JPQL 寫出優雅的物件導向查詢
I. 查詢的轉捩點
54 views
Daily Writeups
⤷ Title: How I Found a P2 Cryptographic Vulnerability in Android’s KeyManager — Google VRP
════════════════════════
𐀪 Author: Rajagiri Sai Ganesh
════════════════════════
ⴵ Time: Thu, 28 May 2026 19:55:39 GMT
════════════════════════
⌗ Tags: #android_security #java_security #bug_bounty #google_vrp #cryptography
Medium
How I Found a P2 Cryptographic Vulnerability in Android’s KeyManager — Google VRP
Unauthorised KeyManager modification via Java reflection bypass — enabling cryptographic registry tampering inside Google’s ecosystem
34 views