Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:42:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_22679 #Debugging API #enterprise security #Java Vulnerability #Office Automation Security #Patch Management #RCE #remote code execution #Tomcat #Vega Research #Weaver E_cology
Penetration Testing Tools
The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
Adversaries commenced the exploitation of a critical vulnerability within Weaver E-cology a mere few days following the release
10 views
Daily Writeups
⤷ Title: Critical Flaws in Apache Thrift Threaten Multi-Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:00:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #CVE_2026_43868 #CVE_2026_43869 #CVE_2026_43870 #Denial of Service #infosec #Java security #Man in the Middle #Microservices Security #Node.js #Rust Security
Daily CyberSecurity
Critical Flaws in Apache Thrift Threaten Multi-Language
Apache Thrift v0.23.0 fixes critical Rust DoS, Java MitM, and Node.js path traversal flaws. Secure your cross-language microservices and upgrade immediately!
26 views
Daily Writeups
⤷ Title: Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 12:38:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41901 #cybersecurity #infosec #Java security #Patch Alert #rce #Sandbox Bypass #Server Side Template Injection #ssti #Thymeleaf #web development
Daily CyberSecurity
Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection
Critical 9.0 CVSS flaw in Thymeleaf (CVE-2026-41901) allows SSTI and arbitrary code execution. Secure your Java web apps—upgrade to v3.1.5.RELEASE now!
10 views
Daily Writeups
⤷ Title: Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:01:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Wicket #CVE_2026_40010 #CVE_2026_43646 #CVE_2026_43975 #infosec #Java security #Patch Alert #Path Traversal #Session Fixation #web development #XSS
Daily CyberSecurity
Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
Apache Wicket 10.9.0 fixes 3 Critical flaws: Path Traversal (CVE-2026-43975), Session Fixation, and Resource Guard bypass. Secure your Java apps and patch now!
14 views
Daily Writeups
⤷ Title: Apache Tomcat RCE Details and Exploit Code Now Public
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 03:22:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #Cyber Security #EncryptInterceptor #Exploit PoC #infosec #Java security #Patch Alert #rce #vulnerability disclosure
Daily CyberSecurity
Apache Tomcat RCE Details and Exploit Code Now Public
Apache Tomcat RCE alert: CVE-2026-34486 exploit code and details are now public. A "fail-open" flaw enables RCE via Tribes clustering. Update immediately.
22 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:36:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Redshift #aws security #CVE_2026_8178 #Cyber Security #Data Warehouse #database security #infosec #Java security #JDBC Driver #Patch Alert #rce
Daily CyberSecurity
Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
CVE-2026-8178 in Amazon Redshift JDBC Driver allows RCE via unsafe class loading. Protect your data warehouse and update to version 2.2.2 now!
12 views
Daily Writeups
⤷ Title: 【 Java Persistence API 】- 複雜查詢只能退回寫原生 SQL？掌握 JPQL 寫出優雅的物件導向查詢
════════════════════════
𐀪 Author: CoreyLi
════════════════════════
ⴵ Time: Fri, 15 May 2026 12:01:00 GMT
════════════════════════
⌗ Tags: #sql_injection #orm #jpa #java #spring_data_jpa
Medium
【 Java Persistence API 】- 複雜查詢只能退回寫原生 SQL？掌握 JPQL 寫出優雅的物件導向查詢
I. 查詢的轉捩點
54 views
Daily Writeups
⤷ Title: How I Found a P2 Cryptographic Vulnerability in Android’s KeyManager — Google VRP
════════════════════════
𐀪 Author: Rajagiri Sai Ganesh
════════════════════════
ⴵ Time: Thu, 28 May 2026 19:55:39 GMT
════════════════════════
⌗ Tags: #android_security #java_security #bug_bounty #google_vrp #cryptography
Medium
How I Found a P2 Cryptographic Vulnerability in Android’s KeyManager — Google VRP
Unauthorised KeyManager modification via Java reflection bypass — enabling cryptographic registry tampering inside Google’s ecosystem
34 views
Daily Writeups
⤷ Title: The Sabotage of Automation: Open-Source Project jqwik Poisoned Against AI Agents
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:08:30 +0000
════════════════════════
⌗ Tags: #Technology #ANSI escape sequence terminal hiding #automated build log stream exploitation #Claude Code payload detection #indirect prompt injection software safety #Java testing dependencies boycott #jqwik hidden prompt injection #JUnit 5 platform alternative migration #Maven Central supply chain vulnerability #printMessageForCodingAgents source bytecode #protestware open source security risks
Information Security News
jqwik Hidden Prompt Injection Targets AI Coding Agents
Java testing library jqwik faces major developer backlash after version 1.10.0 deploys a hidden prompt injection payload aimed at tricking AI coding tools.
21 views
Daily Writeups
⤷ Title: Understanding Rate Limiting: A Deep Dive
════════════════════════
𐀪 Author: Dimuthu Harshamal
════════════════════════
ⴵ Time: Sun, 31 May 2026 11:46:55 GMT
════════════════════════
⌗ Tags: #api_security #java #spring_boot #api #rate_limiting
Medium
Understanding Rate Limiting: A Deep Dive
Background
35 views
Daily Writeups
⤷ Title: Apache Fesod SSRF Vulnerability Exposes Internal Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 03:55:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fesod #CVE_2026_49328 #Java Library #Server Security #SSRF vulnerability
Daily CyberSecurity
Apache Fesod SSRF Vulnerability Exposes Internal Networks
A critical Apache Fesod SSRF vulnerability has been found. Learn about the CVE-2026-49328 patch released to protect internal network resources.
16 views
Daily Writeups
⤷ Title: Apache Fory Vulnerability: High Severity Flaw Bypasses Core Java Serialization Checks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 16:36:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fory #CVE_2026_50076 #deserialization flaw #fory_core #Java security #Software Patch
Daily CyberSecurity
Apache Fory Vulnerability: High Severity Flaw Bypasses Core Java Serialization Checks
Learn how a new Apache Fory vulnerability impacts Java platforms. Apply the urgent Apache Fory vulnerability patch to protect your enterprise nodes.
30 views
Daily Writeups
⤷ Title: Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
════════════════════════
𐀪 Author: HobbiesPark
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:37:36 GMT
════════════════════════
⌗ Tags: #spring_security #java #spring_boot #microservices #ssrf
Medium
Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
I upgraded a service to Spring Boot 4.1, switched on its new SSRF filter, and braced for the usual fallout — a global block rule shredding…
40 views
Daily Writeups
⤷ Title: How Spring Data JPA Protects You from SQL Injection Without You Knowing
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 09:24:52 GMT
════════════════════════
⌗ Tags: #spring_boot #backend_development #sql_injection #java #cybersecurity
Medium
How Spring Data JPA Protects You from SQL Injection Without You Knowing
SQL injection has been a known vulnerability for 25 years, and we’re not making good progress at preventing it.
44 views
Daily Writeups
⤷ Title: Unlock Your Future with Java Training: The Ultimate Guide to Mastering Programming
════════════════════════
𐀪 Author: KOMAL PAL
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 02:34:40 GMT
════════════════════════
⌗ Tags: #javascript #java #digital_marketing #ethical_hacking #python
Medium
Unlock Your Future with Java Training: The Ultimate Guide to Mastering Programming
In today’s fast-paced digital world, Java training stands out as a gateway to lucrative tech careers. Whether you’re a fresh graduate or a…
42 views
Daily Writeups
⤷ Title: How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:28:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #application_security #java #spring_boot
Medium
How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
BOLA/IDOR is the #1 API vulnerability on OWASP’s list. Most backend developers ship it constantly without knowing its name.
19 views