Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Millions at Risk: Apache HTTP Server Fixes Critical Remote Code Execution Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 02:11:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache HTTP Server #CVE_2026_23918 #double_free #HTTP/2 #infosec #mod_auth_digest #Patch Alert #rce #Remote Code Execution #SysAdmin #Web Security
Daily CyberSecurity
Millions at Risk: Apache HTTP Server Fixes Critical Remote Code Execution Flaw
Apache releases v2.4.67 to fix an HTTP/2 Double Free RCE (CVE-2026-23918) and auth bypasses. Millions of servers are affected—upgrade your infrastructure now!
13 views
Daily Writeups
⤷ Title: Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:31:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #CVE_2026_23918 #CVE_2026_24072 #Cybersecurity 2026 #HTTP/2 #mod_rewrite #Patch Management #privilege escalation #RCE #remote code execution #Server Security
Penetration Testing Tools
Emergency Patch: Critical RCE Vulnerability in Apache HTTP Server 2.4.67 Threatens Millions of Systems
A critical vulnerability has been identified within the ubiquitous Apache web server, potentially facilitating the complete compromise of
8 views
Daily Writeups
⤷ Title: How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:17:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #url #http_request #prompt_injection_attack
Medium
How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
Most WAF bypasses involve encoding tricks, obscure headers, or parser confusion.
32 views
Daily Writeups
⤷ Title: Bir HTTP İsteği Gerçekten Nerede Biter?
════════════════════════
𐀪 Author: Zeki Kayaalp
════════════════════════
ⴵ Time: Wed, 13 May 2026 20:24:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request #bug_bounty #http_request_smuggling
Medium
Bir HTTP İsteği Gerçekten Nerede Biter?
Sen tarayıcı üzerinden bir siteye gitmek istediğinde tren hangi duraklarda geçiyor biliyor musun?
31 views
Daily Writeups
⤷ Title: Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 10:13:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42945 #Cyber Security #heap overflow #HTTP/3 #infosec #memory corruption #nginx #NGINX 1.30.1 #Patch Alert #QUIC #rce #Web Server Security
Daily CyberSecurity
Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
NGINX 1.30.1 fixes a 9.2 CVSS RCE flaw (CVE-2026-42945) and five other critical vulnerabilities. Protect your web infrastructure and update immediately!
40 views
Daily Writeups
⤷ Title: AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
════════════════════════
𐀪 Author: 0xKishore
════════════════════════
ⴵ Time: Wed, 27 May 2026 11:51:31 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #penetration_testing #http_request #appsecmaster #cybersecurity
Medium
AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
Objective
6 views
Daily Writeups
⤷ Title: HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:05:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_49975 #Denial of Service #HPACK Vulnerability #HTTP/2 Bomb #Public Exploit Code #Web Server Security
Daily CyberSecurity
HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
The dangerous HTTP/2 Bomb exploit has been publicly disclosed with a PoC. Learn how this memory exhaustion flaw threatens major enterprise web servers.
12 views
Daily Writeups
⤷ Title: The HTTP/2 Bomb: Sophisticated Denial-of-Service Exploitation Threatens Core Web Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 03:58:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #Calif threat intelligence #CVE_2026_49975 DoS attack #HPACK compression bomb #HTTP/2 Bomb exploit #OpenAI Codex server vulnerability #Slowloris memory exhaustion
Information Security News
HTTP/2 Bomb Exploit: Remote DoS Flaw Details
Analyze the newly disclosed HTTP/2 Bomb exploit. Discover how this severe denial-of-service vulnerability exhausts server memory within seconds.
14 views
Daily Writeups
⤷ Title: What TryHackMe Vulnversity Taught Me About HTTP Enumeration, File Upload RCE, and Linux Privilege…
════════════════════════
𐀪 Author: Shivam Sharma
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 05:31:00 GMT
════════════════════════
⌗ Tags: #web_enumeration #pentesting #http_enumeration #tryhackme #linux_priv_esc
Medium
What TryHackMe Vulnversity Taught Me About HTTP Enumeration, File Upload RCE, and Linux Privilege…
A practical TryHackMe walkthrough showing how a hidden web directory, insecure file upload handling, and SUID abuse led from initial access
22 views
Daily Writeups
⤷ Title: Massive Remediation: Microsoft Resolves Historic Influx of Flaws in June 2026 Patch Tuesday
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 03:33:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #BitLocker bypass fix #critical RCE bugs #GreenPlasma vulnerability #HTTP/2 Bomb exploit #Patch Tuesday flaws #Windows June 2026 updates
Information Security News
Windows June 2026 Updates: New Zero-Day Fixes
Discover the latest Windows June 2026 updates. Learn how Microsoft patches 200 vulnerabilities, critical bugs, and three massive zero-day exploits.
11 views
Daily Writeups
⤷ Title: PeopleSoft RCE Security Bug: New Oracle Fix
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 04:40:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_35273 #HTTP Exploit #Oracle Patch #patch management #PeopleSoft Enterprise #Remote Code Execution #Unauthenticated Attack
Daily CyberSecurity
Critical Vulnerability Discovered in Core Database Management Interface
A critical PeopleSoft RCE security bug allows an unauthenticated HTTP exploit to execute code. Learn how to patch CVE-2026-35273 immediately.
10 views
Daily Writeups
⤷ Title: A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:35:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #http_request #burpsuite
Medium
A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
Single unvalidated request header can become an execution vehicle for password poisoning and server-side exploitation.
15 views
Daily Writeups
⤷ Title: F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 02:23:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_42055 #CVE_2026_42530 #F5 #HTTP/3 #nginx #NGINX vulnerabilities #use after free
Daily CyberSecurity
F5 Patches Two Critical NGINX Flaws in HTTP/3 and HTTP/2 Modules (CVE-2026-42530, CVE-2026-42055)
Two critical NGINX vulnerabilities, CVE-2026-42530 and CVE-2026-42055, let remote attackers crash workers and possibly run code. Patch NGINX now.
10 views
Daily Writeups
⤷ Title: HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
════════════════════════
𐀪 Author: Amit Pal | amitpxl
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 13:51:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request_smuggling #application_security #web_application_security
Medium
HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
Stop screenshotting every double response in Burp Repeater. Here’s how to separate harmless protocol features from actual queue poisoning.
17 views
Daily Writeups
⤷ Title: Quick overview of RFC 10008: The HTTP QUERY Method
════════════════════════
𐀪 Author: Sanjeev Jaiswal (Jassi)
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 09:35:19 GMT
════════════════════════
⌗ Tags: #api_security #rfc_10008 #application_security #web_development #http_methods
Medium
Quick overview of RFC 10008: The HTTP QUERY Method
A new HTTP method just shipped that GET and POST have needed for 25 years.
6 views
Daily Writeups
⤷ Title: HTTP QUERY Method Explained:
════════════════════════
𐀪 Author: Simran Madhok
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 16:28:50 GMT
════════════════════════
⌗ Tags: #http_query #api_development #rest_api #api_security #web_development
Medium
HTTP QUERY Method Explained: RFC 10008 and the Future of Safe API Queries
Switch to QUERY http method Secure coding should always be the top priority for developers while building applications. Hence it was a welcome news when the HTTP QUERY Method was formally introduced …
23 views
Daily Writeups
⤷ Title: HTTP QUERY Method: A New Era for API Query Operations
════════════════════════
𐀪 Author: Shubham Girme
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 11:03:40 GMT
════════════════════════
⌗ Tags: #http_query_method #http_methods #query_vs_get_vs_post #api_security #https
Medium
HTTP QUERY Method: A New Era for API Query Operations
As modern APIs increasingly require expressive query capabilities, HTTP QUERY offers a standardized solution for transmitting complex…
52 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
════════════════════════
𐀪 Author: Furkanalpgunay
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:22:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #http_request_smuggling #cybersecurity #penetration_testing #web_security
Medium
HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
From CL.TE and TE.CL to HTTP/2 downgrade and client-side desync — a complete, hands-on guide built from 20+ labs I solved myself.
10 views
Daily Writeups
⤷ Title: HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:00:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Traffic Server #CVE_2026_44909 #CVE_2026_59173 #CVE_2026_59762 #Denial of Service #HTTP/2 DoS vulnerability #memory exhaustion #stalled flow control
Daily CyberSecurity
HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control
A newly disclosed HTTP/2 DoS vulnerability affects several server implementations at once. A remote, unauthenticated attacker can crash or freeze a server by abusing normal flow-control settings. …
9 views
Daily Writeups
⤷ Title: Node.js Patches 11 Vulnerabilities in July 2026 Security Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 15:29:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_56846 #CVE_2026_56848 #CVE_2026_58043 #HTTP/2 #Node.js Security #nodejs #use after free
Daily CyberSecurity
Node.js Patches 11 Vulnerabilities in July 2026 Security Release
TL;DR Node.js shipped fixes for 11 vulnerabilities on 29 July 2026. Three are rated high severity, and the rest are medium or low. The updates cover the 26.x, 24.x, and 22.x release lines. No in-t…
29 views