Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: ️ Discovered an XSS Vulnerability in Your Spring Boot App?
════════════════════════
𐀪 Author: Lakshika
════════════════════════
ⴵ Time: Sat, 07 Feb 2026 12:22:12 GMT
════════════════════════
⌗ Tags: #xs #apps #discovered #spring_boot #vulnerability
Medium
🛡️ Discovered an XSS Vulnerability in Your Spring Boot App?
Don’t Panic — Here’s How to Fix It in Minutes
53 views
Daily Writeups
⤷ Title: Securing Spring Boot APIs with Cacerts, KeyStore & TrustStore
════════════════════════
𐀪 Author: keylearn
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 12:39:52 GMT
════════════════════════
⌗ Tags: #java #spring_boot #api_security #ssl #java_security
Medium
Securing Spring Boot APIs with Cacerts, KeyStore & TrustStore
A production-grade guide to SSL/TLS security — why it matters, how the pieces fit together, and exactly how to configure it in Spring Boot.
57 views
Daily Writeups
⤷ Title: SQL Injection: The Bug Born From Deadline Pressure
════════════════════════
𐀪 Author: Rajeswari
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 10:32:25 GMT
════════════════════════
⌗ Tags: #spring_boot #java #security #sql_injection
Medium
SQL Injection: The Bug Born From Deadline Pressure
How one line of “I’ll fix it later” code hands your entire database to a stranger.
48 views
Daily Writeups
⤷ Title: The Day Hibernate Gaslit Our Barista
════════════════════════
𐀪 Author: Amit Srivastava
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 15:44:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #kotlin #spring_boot #software_development #sql
Medium
The Day Hibernate Gaslit Our Barista
Surviving the IN Clause Collection Bug
17 views
Daily Writeups
⤷ Title: Two High-Severity Spring Boot Flaws Expose Actuator Endpoints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 14:00:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Actuator Endpoints #Authentication Bypass #CloudFoundry #CVE_2026_22731 #CVE_2026_22733 #cybersecurity #infosec #Patch Alert #Spring Boot #Vulnerability
Daily CyberSecurity
Two High-Severity Spring Boot Flaws Expose Actuator Endpoints
Two high-severity flaws (CVE-2026-22731 & CVE-2026-22733) in Spring Boot Actuators allow authentication bypass. Update your framework today to stay secure.
34 views
Daily Writeups
⤷ Title: 6 Ways to Protect Your Spring Boot APIs from Common Attacks (That Most Tutorials Still Ignore in…
════════════════════════
𐀪 Author: inside Nikita's Mind
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 11:47:23 GMT
════════════════════════
⌗ Tags: #java_backend #api_security #cybersecurity #spring_boot_3 #spring_boot_security
Medium
6 Ways to Protect Your Spring Boot APIs from Common Attacks (That Most Tutorials Still Ignore in 2026)
Last month, one of my clients woke up to find their entire user database exposed. Not because of some sophisticated zero-day exploit. A…
41 views
Daily Writeups
⤷ Title: The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 13:10:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40976 #CVSS 9.1 #cybersecurity #DevTools #infosec #Java security #Patch Alert #rce #Spring Boot #Spring Framework #Timing Attack
Daily CyberSecurity
The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
In a major update for the Java ecosystem, several critical vulnerabilities have been disclosed in Spring Boot, the framework that powers millions of modern enterprise applications. These flaws—CVE…
16 views
Daily Writeups
⤷ Title: Critical Spring Cloud Config Flaws Expose Arbitrary Files and GCP Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 02:10:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40981 #CVE_2026_40982 #cybersecurity #Directory Traversal #GCP Security #Google Secrets Manager #infosec #Patch Alert #Spring Boot #Spring Cloud Config
Daily CyberSecurity
Critical Spring Cloud Config Flaws Expose Arbitrary Files and GCP Secrets
Spring Cloud Config fixes a 9.1 CVSS directory traversal (CVE-2026-40982) and a GCP secret leak. Secure your distributed system—upgrade to the latest patches!
14 views
Daily Writeups
⤷ Title: Understanding Rate Limiting: A Deep Dive
════════════════════════
𐀪 Author: Dimuthu Harshamal
════════════════════════
ⴵ Time: Sun, 31 May 2026 11:46:55 GMT
════════════════════════
⌗ Tags: #api_security #java #spring_boot #api #rate_limiting
Medium
Understanding Rate Limiting: A Deep Dive
Background
35 views
Daily Writeups
⤷ Title: Spring Boot Rate Limiting: Stop DDoS Attacks and API Abuse Before They Crash Your System
════════════════════════
𐀪 Author: Ujjawal Rohra
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 03:08:53 GMT
════════════════════════
⌗ Tags: #software_development #backend_development #api_security #spring_boot #microservices
Medium
Spring Boot Rate Limiting: Stop DDoS Attacks and API Abuse Before They Crash Your System
DDoS and abuse can crash your API. Rate limiting prevents it.
16 views
Daily Writeups
⤷ Title: How to Test Web Applications Using Burp Suite: A Practical Login API Security Testing Guide (Spring…
════════════════════════
𐀪 Author: Ahmed Yousef
════════════════════════
ⴵ Time: Sat, 20 Jun 2026 10:45:41 GMT
════════════════════════
⌗ Tags: #penetration_testing #burpsuite #api_security #web_security #spring_boot
Medium
How to Test Web Applications Using Burp Suite: A Practical Login API Security Testing Guide (Spring Boot)
Introduction
14 views
Daily Writeups
⤷ Title: Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
════════════════════════
𐀪 Author: HobbiesPark
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:37:36 GMT
════════════════════════
⌗ Tags: #spring_security #java #spring_boot #microservices #ssrf
Medium
Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
I upgraded a service to Spring Boot 4.1, switched on its new SSRF filter, and braced for the usual fallout — a global block rule shredding…
40 views
Daily Writeups
⤷ Title: How Spring Data JPA Protects You from SQL Injection Without You Knowing
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 09:24:52 GMT
════════════════════════
⌗ Tags: #spring_boot #backend_development #sql_injection #java #cybersecurity
Medium
How Spring Data JPA Protects You from SQL Injection Without You Knowing
SQL injection has been a known vulnerability for 25 years, and we’re not making good progress at preventing it.
44 views
Daily Writeups
⤷ Title: What Breaks When You Give a Free LLM Gateway a Brain
════════════════════════
𐀪 Author: Aspect
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 15:16:38 GMT
════════════════════════
⌗ Tags: #docker #artificial_intelligence #api_security #software_engineering #spring_boot
Medium
What Breaks When You Give a Free LLM Gateway a Brain
I Built a Secure Gateway for Free LLMs So My API Key Never Touches a Browser
30 views
Daily Writeups
⤷ Title: How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:28:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #application_security #java #spring_boot
Medium
How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
BOLA/IDOR is the #1 API vulnerability on OWASP’s list. Most backend developers ship it constantly without knowing its name.
19 views
Daily Writeups
⤷ Title: Public PoC Exploit Released for fastjson 1.2.83 Remote Code Execution Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 13:18:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Deserialization #Fastjson #fastjson2 #FearsOff #java #proof_of_concept #QVD_2026_43021 #Remote Code Execution #SafeMode #Spring Boot
Daily CyberSecurity
Public PoC Exploit Released for fastjson 1.2.83 Remote Code Execution Flaw
TL;DR Researcher Kirill Firsov disclosed a fastjson RCE on July 19, 2026. It affects fastjson 1.2.68 through 1.2.83 under stock default settings. Full technical details are public, and third parti…
3 views
Daily Writeups
⤷ Title: [IronHold] — Spring Boot Source Code Analysis: Finding Credentials, SQL Injection, PrivEsc, and…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 05:38:52 GMT
════════════════════════
⌗ Tags: #capture_the_flag #spring_boot #sql_injection #insecure_deserialization #privilege_escalation
Medium
[IronHold] — Spring Boot Source Code Analysis: Finding Credentials, SQL Injection, PrivEsc, and Java Deserialization Exploitation
The source leaked. Read it like an attacker, chain the flaws, and compromise the Spring Boot application.
29 views
Daily Writeups
⤷ Title: FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 02:23:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_16723 #Deserialization #exploited in the wild #Fastjson #Remote Code Execution #Spring Boot #zero_day
Daily CyberSecurity
FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public
TL;DR A critical FastJson RCE vulnerability, CVE-2026-16723, carries a CVSS score of 9.0. Full technical details and working proof-of-concept exploit code are now public. Imperva reports active ex…
29 views
Daily Writeups
⤷ Title: How to Secure Your Spring Boot APIs Using JWT and AI-Based Monitoring in 2026
════════════════════════
𐀪 Author: FutureLens
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 13:22:18 GMT
════════════════════════
⌗ Tags: #api_security #ai_monitoring #cybersecurity #jwt #spring_boot
Medium
How to Secure Your Spring Boot APIs Using JWT and AI-Based Monitoring in 2026
Introduction
31 views
Daily Writeups
⤷ Title: Fastjson RCE CVE-2026-16723: A Critical Spring Boot Vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 12:34:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_16723 #cybersecurity #Fastjson #Spring Boot #vulnerability
Information Security News
Fastjson RCE CVE-2026-16723: A Critical Spring Boot Vulnerability
For years, Fastjson version 1.2.83 stood as the definitive bastion of security for the library’s legacy branch, yet a newly unearthed vulnerability has shattered this illusion. The critical …
10 views