Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: HTTP Down: High-Severity Axios Flaw (CVSS 7.5) Crashes Node.js Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 03:54:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_25639 #Denial of Service #HTTP Client #JavaScript Security #JSON Parsing #Node.js #Patch Alert #Prototype Pollution #web development
Daily CyberSecurity
HTTP Down: High-Severity Axios Flaw (CVSS 7.5) Crashes Node.js Servers
A high-severity vulnerability has been discovered in Axios, the immensely popular HTTP client used by millions of developers for Node.js and browser-based applications. The flaw, tracked as CVE-20…
25 views
Daily Writeups
⤷ Title: Sandbox Breakout: Critical SandboxJS Flaw (CVE-2026-25881) Allows Host Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:37:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Array Taint Bypass #CVE_2026_25881 #JavaScript Security #Patch Alert #Prototype Pollution #Remote Code Execution #Sandbox Escape #SandboxJS #Web Security
Daily CyberSecurity
Sandbox Breakout: Critical SandboxJS Flaw (CVE-2026-25881) Allows Host Takeover
Critical SandboxJS flaw CVE-2026-25881 allows sandbox escape via prototype pollution. Malicious code can modify host logic & execute RCE. Update to v0.8.31.
21 views
Daily Writeups
⤷ Title: CVE-2026-27212: Critical Swiper Prototype Pollution Flaw (CVSS 9.4) Exposes Global Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 00:12:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AppSec #CVE_2026_27212 #Cyber Security #infosec #JavaScript Security #npm Vulnerability #Patch Alert #Prototype Pollution #Remote Code Execution #Swiper
Daily CyberSecurity
CVE-2026-27212: Critical Swiper Prototype Pollution Flaw (CVSS 9.4) Exposes Global Apps
Critical prototype pollution flaw (CVE-2026-27212) in the Swiper npm package allows RCE, DoS, and auth bypass. Update to version 12.1.2 immediately.
15 views
Daily Writeups
⤷ Title: CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 17:10:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS IMDSv2 #Axios #Cloud Security #CVE_2026_40175 #Header injection #infosec #javascript #Node.js #Prototype Pollution #rce #request smuggling
Daily CyberSecurity
CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
A critical CVSS 10 flaw in Axios (CVE-2026-40175) allows attackers to bypass AWS IMDSv2 and achieve RCE via header injection. Upgrade to v1.15.0 now!
48 views
Daily Writeups
⤷ Title: Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation #CVSS 10 #infosec #JavaScript Security #n8n #Node.js #Patch Alert #Prototype Pollution #rce #Webhook Security #XML parsing
Daily CyberSecurity
Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
Critical CVSS 10 and 9.4 vulnerabilities hit n8n. Prototype pollution in XML nodes can lead to full RCE. Patch to v2.18.1 or v1.123.32 immediately.
17 views
Daily Writeups
⤷ Title: Gadget Hunting in Practice
════════════════════════
𐀪 Author: Marduk I Am
════════════════════════
ⴵ Time: Sun, 17 May 2026 21:34:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #xss_attack #prototype_pollution #web_security #bug_bounty
Medium
Gadget Hunting in Practice
A practical workflow for finding prototype pollution gadgets and tracing them to XSS sinks
29 views
Daily Writeups
⤷ Title: Three Critical 9.4 CVSS Flaws Expose n8n Automation Nodes to Full RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 01:20:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Argument Injection #CVE_2026_44789 #CVE_2026_44790 #CVE_2026_44791 #DevSecOps #infosec #n8n #Patch Alert #Prototype Pollution #rce #Workflow Automation
Daily CyberSecurity
Three Critical 9.4 CVSS Flaws Expose n8n Automation Nodes to Full RCE
n8n fixes three critical 9.4 CVSS flaws (CVE-2026-44790/91/89). Authenticated users can break sandboxes for local file read and server-level RCE. Patch now!
14 views
Daily Writeups
⤷ Title: Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 02:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_47137 #CVE_2026_47140 #CVE_2026_47210 #Cyber Security #infosec #JSPI Promise #Node.js Sandbox Escape #patch bypass #Prototype Hijacking #Remote Code Execution #vm2 sandbox
Daily CyberSecurity
Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
Five critical sandbox escape flaws in vm2 (CVE-2026-47140 & more) allow unauthenticated remote code execution on the host server. Update now!
15 views
Daily Writeups
⤷ Title: React Router Vulnerabilities Patched in New Framework Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 02:40:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42211 #Denial of Service #npm Package #Prototype Pollution #React Router #software update
Daily CyberSecurity
React Router Vulnerabilities Patched in New Framework Releases
Recent updates address critical React Router vulnerabilities. Apply the latest React Router vulnerabilities patch to secure your web applications.
12 views
Daily Writeups
⤷ Title: New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 01:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_44492 #CVE_2026_44494 #infosec #Node.js #Prototype Pollution #Proxy Bypass
Daily CyberSecurity
New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
New Axios proxy vulnerabilities expose apps. A critical prototype pollution gadget allows full traffic interception. Secure patches are now available.
12 views
Daily Writeups
⤷ Title: i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 01:00:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48713 #CVE_2026_48714 #i18next #i18next_fs_backend #Node.js Security #npm Vulnerability #Prototype Pollution
Daily CyberSecurity
i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads
CVE-2026-48713 exposes i18next prototype pollution in i18next-fs-backend, a CVSS 9.1 flaw threatening 1M+ weekly downloads. Update to 2.6.6 now.
14 views
Daily Writeups
⤷ Title: A Deep-Dive Into Hunting Prototype Pollution on Hashnode Live
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 10:21:49 GMT
════════════════════════
⌗ Tags: #hashcode #nodejsecurity #javascript_security #prototype_pollution #penetration_testing
Medium
A Deep-Dive Into Hunting Prototype Pollution on Hashnode Live
Hashnode is a popular blogging platform built on Next.js. While exploring its API surface during a routine security assessment, I noticed…
47 views
Daily Writeups
⤷ Title: Fools Mate, Revenge — TryHackMe Writeup
════════════════════════
𐀪 Author: ghosteye
════════════════════════
ⴵ Time: Sun, 05 Jul 2026 15:06:54 GMT
════════════════════════
⌗ Tags: #cwe_1321 #api_security #tryhackme #penetration_testing #prototype_pollution
Medium
Fools Mate, Revenge — TryHackMe Writeup
https://tryhackme.com/room/foolsm8v2
28 views
Daily Writeups
⤷ Title: [Fools Mate, Revenge] — Prototype Pollution in a Express.js Chess App
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 06:28:53 GMT
════════════════════════
⌗ Tags: #express_vulnerability #prototype_pollution #tryhackme_walkthrough #tryhackme
Medium
[Fools Mate, Revenge] — Prototype Pollution in a Express.js Chess App
A hands-on writeup on discovering and exploiting a prototype pollution flaw in an Express.js
30 views
Daily Writeups
⤷ Title: Fool’s Mate (TryHackMe): I Checkmated the Bot, the Server Still Said No — So I Polluted Its…
════════════════════════
𐀪 Author: Syedmohathashimali
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 03:58:05 GMT
════════════════════════
⌗ Tags: #prototype_pollution #tryhackme #ctf #cybersecurity #web_security
Medium
Fool’s Mate (TryHackMe): I Checkmated the Bot, the Server Still Said No — So I Polluted Its Prototype
TryHackMe writeup — Fool’s Mate, “Can you bypass the engine?”
23 views
Daily Writeups
⤷ Title: Prototype Pollution: From JavaScript Object Mutation to Real Security Impact
════════════════════════
𐀪 Author: CYBER MIND SPACE
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 16:56:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_hunting #cybersecurity #prototype_pollution #cybermindspace
Medium
Prototype Pollution: From JavaScript Object Mutation to Real Security Impact
One JSON key. Every object in your Node.js process inherits the payload. The gadget decides whether that's a crash, an auth bypass, or a…
21 views