Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Angular Alert: Protocol-Relative URLs Leak XSRF Tokens (CVE-2025-66035)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 00:05:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular #CSRF #CVE_2025_66035 #Front_end Security #HTTP Client #javascript #Web Security #XSRF
Daily CyberSecurity
Angular Alert: Protocol-Relative URLs Leak XSRF Tokens (CVE-2025-66035)
CVE-2025-66035: Angular protocol-relative URLs leak XSRF tokens, bypassing CSRF protection. Update to v19.2.16, v20.3.14, or v21.0.1 now.
19 views
Daily Writeups
⤷ Title: What Two Years of Watching Tech Debt Taught Me — And Why Angular’s Latest CVEs Prove the Point
════════════════════════
𐀪 Author: Taylor Corbett
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 21:52:07 GMT
════════════════════════
⌗ Tags: #angular #cve #cybersecurity #technical_debt
Medium
What Two Years of Watching Tech Debt Taught Me — And Why Angular’s Latest CVEs Prove the Point
For the last two years, I’ve watched engineering teams wrestle with tech debt in real time — across migrations, audits, rushed rewrites…
7 views
Daily Writeups
⤷ Title: High-Severity Angular Flaw (CVE-2025-66412) Allows Stored XSS via SVG and MathML Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 00:06:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular #Critical Vulnerability #Cross_Site Scripting #CVE_2025_66412 #SVG Injection #Template Compiler #XSS
Daily CyberSecurity
High-Severity Angular Flaw (CVE-2025-66412) Allows Stored XSS via SVG and MathML Bypass
A High-severity XSS flaw (CVE-2025-66412, CVSS 8.5) in Angular allows attackers to bypass sanitization and execute scripts via vulnerable SVG/MathML attributes. Update to v21.0.2 immediately.
13 views
Daily Writeups
⤷ Title: Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
════════════════════════
𐀪 Author: Amanuel Eshete
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:48:41 GMT
════════════════════════
⌗ Tags: #kong_api_gateway #api_security #openid_connect #microservices #angular
Medium
Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
Integrating OpenID Connect (OIDC) into a microservices platform can feel straightforward — until subtle issues put your UI, APIs, and…
26 views
Daily Writeups
⤷ Title: Angular Security Alert: High-Severity SVG Flaw CVE-2026-22610 Exposes Apps to XSS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 01:59:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular #CVE_2026_22610 #Front_end Development #javascript #Patch Alert #SVG Vulnerability #Web Security #XSS (Cross_Site Scripting)
Daily CyberSecurity
Angular Security Alert: High-Severity SVG Flaw CVE-2026-22610 Exposes Apps to XSS
Angular CVE-2026-22610 (CVSS 8.5) allows XSS via SVG script attributes. Update to v21.0.7 or v20.3.16 immediately to secure your apps.
32 views
Daily Writeups
⤷ Title: We Stopped Fighting Angular and Reduced Bugs by 31%
════════════════════════
𐀪 Author: Computer Architect
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 13:14:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #programming #angular #front_end_development #technology
Medium
We Stopped Fighting Angular and Reduced Bugs by 31%
Production signal: In Q3, our frontend bug rate dropped 31% quarter-over-quarter. Not incidents. Not “tickets closed.” Actual production…
19 views
Daily Writeups
⤷ Title: Steering the Server: Critical 9.2 Severity SSRF Flaw in Angular SSR Allows Internal Network Probing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 00:14:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular #CVE_2026_27739 #Frontend Security #HttpClient #infosec #Patch Alert #Server_Side Request Forgery #SSR #ssrf #Vulnerability #Web Security
Daily CyberSecurity
Steering the Server: Critical 9.2 Severity SSRF Flaw in Angular SSR Allows Internal Network Probing
Angular patches a critical 9.2 CVSS SSRF vulnerability (CVE-2026-27739). Attackers can manipulate Host headers to steal credentials and probe internal networks.
15 views
Daily Writeups
⤷ Title: High-Severity XSS Flaw in Angular i18n Turns Language Files into Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:38:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular #Application Security #Cross_Site Scripting #CVE_2026_27970 #i18n #ICU Messages #infosec #Internationalization #Patch Alert #Web Security #XSS
Daily CyberSecurity
High-Severity XSS Flaw in Angular i18n Turns Language Files into Backdoors
Angular patches a high-severity 7.6 CVSS XSS flaw (CVE-2026-27970). Attackers can weaponize i18n translation files to steal data and hijack user sessions.
14 views
Daily Writeups
⤷ Title: High-Severity Angular XSS Flaw Bypasses Built-In Sanitization
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:03:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular Security #Cross_Site Scripting #CVE_2026_32635 #CVSS 8.6 #cybersecurity #i18n #infosec #Sanitization Bypass #Web App Security #XSS Vulnerability
Daily CyberSecurity
High-Severity Angular XSS Flaw Bypasses Built-In Sanitization
An 8.6 CVSS Angular XSS vulnerability (CVE-2026-32635) bypasses built-in sanitization via i18n attributes. Patch your web applications immediately.
26 views
Daily Writeups
⤷ Title: High-Severity SSRF Flaw Uncovered in Angular’s Server-Side Rendering
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 02:32:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@angular/platform_server #Angular #CVE #infosec #javascript #Origin Hijacking #Server_Side Rendering #SSR #ssrf #TypeScript #Web Security
Daily CyberSecurity
High-Severity SSRF Flaw Uncovered in Angular’s Server-Side Rendering
Angular patches a critical 8.7 SSRF flaw in @angular/platform-server. Attackers can hijack SSR origins via URL normalization. Patch v19, v20, or v21 now!
16 views
Daily Writeups
⤷ Title: SSRF Risk in Server-Side Rendering: Patch Your Angular Applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 24 May 2026 06:42:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@angular/platform_server #Angular #Patch Updates #ssrf #Vulnerability #Web Security
Daily CyberSecurity
SSRF Risk in Server-Side Rendering: Patch Your Angular Applications
A critical Angular hostname hijacking vulnerability allows SSRF attacks. Discover the impact on platform-server and how to patch your apps.
30 views