Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Understanding Rate Limiting: A Deep Dive
════════════════════════
𐀪 Author: Dimuthu Harshamal
════════════════════════
ⴵ Time: Sun, 31 May 2026 11:46:55 GMT
════════════════════════
⌗ Tags: #api_security #java #spring_boot #api #rate_limiting
Medium
Understanding Rate Limiting: A Deep Dive
Background
35 views
Daily Writeups
⤷ Title: Spring Boot Rate Limiting: Stop DDoS Attacks and API Abuse Before They Crash Your System
════════════════════════
𐀪 Author: Ujjawal Rohra
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 03:08:53 GMT
════════════════════════
⌗ Tags: #software_development #backend_development #api_security #spring_boot #microservices
Medium
Spring Boot Rate Limiting: Stop DDoS Attacks and API Abuse Before They Crash Your System
DDoS and abuse can crash your API. Rate limiting prevents it.
16 views
Daily Writeups
⤷ Title: Spring Data Vulnerabilities: Patch Five Critical Flaws Now
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 00:52:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41716 #CVE_2026_41717 #CVE_2026_41729 #cybersecurity #SpEL injection #Spring Data
Daily CyberSecurity
Spring Data Vulnerabilities: Patch Five Critical Flaws Now
Five new Spring Data vulnerabilities threaten applications with SpEL expression injection and DoS attacks. Upgrade your Spring frameworks immediately!
24 views
Daily Writeups
⤷ Title: Multiple Security Flaws Addressed in Core Java Application Subsystems
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 08:11:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41699 #CVE_2026_41700 #CVE_2026_41856 #patch management #Spring GraphQL #unsafe deserialization flaws
Daily CyberSecurity
Multiple Security Flaws Addressed in Core Java Application Subsystems
Deploy the latest Spring GraphQL security patches to remediate critical unsafe deserialization flaws and cross-site WebSocket hijacking vulnerabilities.
20 views
Daily Writeups
⤷ Title: New Patches Secure Critical Spring HATEOAS Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 00:02:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41006 #CVE_2026_41007 #cybersecurity #Spring HATEOAS #Vulnerability
Daily CyberSecurity
New Patches Secure Critical Spring HATEOAS Flaws
New patches fix critical Spring HATEOAS flaws including CVE-2026-41006 and CVE-2026-41007 to prevent heap exhaustion and bypasses.
9 views
Daily Writeups
⤷ Title: Multiple Security Flaws Fixed in Major Framework Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:30:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_40998 #CVE_2026_40999 #CVE_2026_41003 #patch management #Spring Security #Spring Web Services
Daily CyberSecurity
Multiple Security Flaws Fixed in Major Framework Release
New updates patch critical Spring security vulnerabilities, mitigating cross-site scripting and server-side request forgery risks across multiple versions.
23 views
Daily Writeups
⤷ Title: How to Test Web Applications Using Burp Suite: A Practical Login API Security Testing Guide (Spring…
════════════════════════
𐀪 Author: Ahmed Yousef
════════════════════════
ⴵ Time: Sat, 20 Jun 2026 10:45:41 GMT
════════════════════════
⌗ Tags: #penetration_testing #burpsuite #api_security #web_security #spring_boot
Medium
How to Test Web Applications Using Burp Suite: A Practical Login API Security Testing Guide (Spring Boot)
Introduction
14 views
Daily Writeups
⤷ Title: Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
════════════════════════
𐀪 Author: HobbiesPark
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:37:36 GMT
════════════════════════
⌗ Tags: #spring_security #java #spring_boot #microservices #ssrf
Medium
Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
I upgraded a service to Spring Boot 4.1, switched on its new SSRF filter, and braced for the usual fallout — a global block rule shredding…
40 views
Daily Writeups
⤷ Title: How Spring Data JPA Protects You from SQL Injection Without You Knowing
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 09:24:52 GMT
════════════════════════
⌗ Tags: #spring_boot #backend_development #sql_injection #java #cybersecurity
Medium
How Spring Data JPA Protects You from SQL Injection Without You Knowing
SQL injection has been a known vulnerability for 25 years, and we’re not making good progress at preventing it.
44 views
Daily Writeups
⤷ Title: What Breaks When You Give a Free LLM Gateway a Brain
════════════════════════
𐀪 Author: Aspect
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 15:16:38 GMT
════════════════════════
⌗ Tags: #docker #artificial_intelligence #api_security #software_engineering #spring_boot
Medium
What Breaks When You Give a Free LLM Gateway a Brain
I Built a Secure Gateway for Free LLMs So My API Key Never Touches a Browser
30 views
Daily Writeups
⤷ Title: How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:28:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #application_security #java #spring_boot
Medium
How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
BOLA/IDOR is the #1 API vulnerability on OWASP’s list. Most backend developers ship it constantly without knowing its name.
19 views
Daily Writeups
⤷ Title: Public PoC Exploit Released for fastjson 1.2.83 Remote Code Execution Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 13:18:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Deserialization #Fastjson #fastjson2 #FearsOff #java #proof_of_concept #QVD_2026_43021 #Remote Code Execution #SafeMode #Spring Boot
Daily CyberSecurity
Public PoC Exploit Released for fastjson 1.2.83 Remote Code Execution Flaw
TL;DR Researcher Kirill Firsov disclosed a fastjson RCE on July 19, 2026. It affects fastjson 1.2.68 through 1.2.83 under stock default settings. Full technical details are public, and third parti…
3 views
Daily Writeups
⤷ Title: [IronHold] — Spring Boot Source Code Analysis: Finding Credentials, SQL Injection, PrivEsc, and…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 05:38:52 GMT
════════════════════════
⌗ Tags: #capture_the_flag #spring_boot #sql_injection #insecure_deserialization #privilege_escalation
Medium
[IronHold] — Spring Boot Source Code Analysis: Finding Credentials, SQL Injection, PrivEsc, and Java Deserialization Exploitation
The source leaked. Read it like an attacker, chain the flaws, and compromise the Spring Boot application.
29 views
Daily Writeups
⤷ Title: FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 02:23:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_16723 #Deserialization #exploited in the wild #Fastjson #Remote Code Execution #Spring Boot #zero_day
Daily CyberSecurity
FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public
TL;DR A critical FastJson RCE vulnerability, CVE-2026-16723, carries a CVSS score of 9.0. Full technical details and working proof-of-concept exploit code are now public. Imperva reports active ex…
29 views
Daily Writeups
⤷ Title: How to Secure Your Spring Boot APIs Using JWT and AI-Based Monitoring in 2026
════════════════════════
𐀪 Author: FutureLens
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 13:22:18 GMT
════════════════════════
⌗ Tags: #api_security #ai_monitoring #cybersecurity #jwt #spring_boot
Medium
How to Secure Your Spring Boot APIs Using JWT and AI-Based Monitoring in 2026
Introduction
31 views
Daily Writeups
⤷ Title: Fastjson RCE CVE-2026-16723: A Critical Spring Boot Vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 12:34:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_16723 #cybersecurity #Fastjson #Spring Boot #vulnerability
Information Security News
Fastjson RCE CVE-2026-16723: A Critical Spring Boot Vulnerability
For years, Fastjson version 1.2.83 stood as the definitive bastion of security for the library’s legacy branch, yet a newly unearthed vulnerability has shattered this illusion. The critical …
10 views
Daily Writeups
⤷ Title: We Built the Only Java Static Analyzer That Finds What Semgrep, CodeQL, and the We Built the Only…
════════════════════════
𐀪 Author: Suman Lamichhane
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 16:17:56 GMT
════════════════════════
⌗ Tags: #java #cybersecurity #application_security #static_analysis #spring_boot
Medium
We Built the Only Java Static Analyzer That Finds What Semgrep, CodeQL, and the We Built the Only Java Static Analyzer That Finds…
The problem nobody talks aboutICLR 2025 IRIS Paper All Miss
12 views
Daily Writeups
⤷ Title: Under the Hood of DVHRA: Root Cause Analysis and Mitigations in Modern Web Apps
════════════════════════
𐀪 Author: Amr Khaled
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 17:48:32 GMT
════════════════════════
⌗ Tags: #spring_boot #cybersecurity #web_development #application_security #secure_programming
Medium
Under the Hood of DVHRA: Root Cause Analysis and Mitigations in Modern Web Apps
Lately, I’ve been wanting to dive deeper into web vulnerabilities to truly understand how they arise in today’s modern web applications.
5 views
Daily Writeups
⤷ Title: We Found Authorization Vulnerabilities in Two of GitHub’s Most-Starred Java Repositories — Semgrep…
════════════════════════
𐀪 Author: Suman Lamichhane
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 15:01:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #spring_boot #application_security #java #static_analysis
Medium
We Found Authorization Vulnerabilities in Two of GitHub’s Most-Starred Java Repositories — Semgrep and CodeQL Both Missed Them
110,000 combined stars. Zero authorization findings from the industry-standard scanners. Here’s what a purpose-built tool found instead.
22 views