Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Stop Leaking Your Secrets: Solving the Hidden API Key/Secret Problem in Web Apps
════════════════════════
𐀪 Author: Jens@Fivesec
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 10:46:54 GMT
════════════════════════
⌗ Tags: #typescript #web_development #angular #cybersecurity #javascript
Medium
Stop Leaking Your Secrets: Solving the Hidden API Key/Secret Problem in Web Apps
Every frontend developer hits this question at some point —
18 views
Daily Writeups
⤷ Title: Introducing dssrf: A Safe‑by‑Construction SSRF Defense Library for Node.js
════════════════════════
𐀪 Author: Relun Sec
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 09:57:35 GMT
════════════════════════
⌗ Tags: #ssrf #cybersecurity #typescript #security #javascript
Medium
Introducing dssrf: A Safe‑by‑Construction SSRF Defense Library for Node.js
Introducing dssrf: A Safe‑by‑Construction SSRF Defense Library for Node.js # Introducing **dssrf** — A Safe‑by‑Construction SSRF Defense Library for Node.js Server-Side Request Forgery …
55 views
Daily Writeups
⤷ Title: “Better Auth” Framework Alert: The Double-Slash Trick That Bypasses Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:33:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Better Auth #CVSS 8.6 #javascript #Path Normalization #Proxy Security #Rate Limit Evasion #rou3 #TypeScript #Web Security
Daily CyberSecurity
"Better Auth" Framework Alert: The Double-Slash Trick That Bypasses Security Controls
A normalization flaw in Better Auth's router allows attackers to bypass access controls and rate limits using simple double-slash URLs.
26 views
Daily Writeups
⤷ Title: NestJS Validation That Actually Secures
════════════════════════
𐀪 Author: Syntal
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:31:01 GMT
════════════════════════
⌗ Tags: #backend #web_development #api_security #nestjs #typescript
Medium
NestJS Validation That Actually Secures
Stop “valid” requests from becoming privilege escalations with DTO boundaries, strict pipes, and response shaping that won’t leak internal…
38 views
Daily Writeups
⤷ Title: Poisoned Comments: Critical Orval Flaw (CVE-2026-25141) Injects Code
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:36:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_23947 #CVE_2026_25141 #Developer Tools #JavaScript Security #OpenAPI #Orval #Supply Chain Security #TypeScript #web development
Daily CyberSecurity
Poisoned Comments: Critical Orval Flaw (CVE-2026-25141) Injects Code
Critical Orval flaw CVE-2026-25141 (CVSS 9.3) allows code injection via OpenAPI comments. 2.8M+ downloads affected. Update to v7.21.0 now.
13 views
Daily Writeups
⤷ Title: Password Hijack in the Modern Stack: Payload CMS Patches Critical 9.1 CVSS Reset Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 14:30:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backend Security #CVE_2026_34751 #Headless CMS #infosec #Next.js #password reset #Patch Alert #Payload CMS #React #TypeScript #Vulnerability #Web Security
Daily CyberSecurity
Password Hijack in the Modern Stack: Payload CMS Patches Critical 9.1 CVSS Reset Flaw
Payload CMS fixes a critical 9.1 CVSS flaw (CVE-2026-34751) in its password reset flow. Attackers could hijack accounts. Update to v3.79.1 immediately!
7 views
Daily Writeups
⤷ Title: The WordPress Killer? Cloudflare Unveils EmDash, the AI-Native CMS Built for the Serverless Epoch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 09:15:52 +0000
════════════════════════
⌗ Tags: #Technology #AI_native #Astro 6.0 #cloudflare #cms #Cybersecurity 2026 #EmDash #open_source #serverless #TypeScript #V8 Isolate #WordPress Alternative
Daily CyberSecurity
The WordPress Killer? Cloudflare Unveils EmDash, the AI-Native CMS Built for the Serverless Epoch
Cloudflare debuts EmDash, an AI-native, serverless CMS built on Astro 6.0. Say goodbye to WordPress plugin hacks with V8 isolate sandboxing and passkey security.
6 views
Daily Writeups
⤷ Title: High-Severity SSRF Flaw Uncovered in Angular’s Server-Side Rendering
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 02:32:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@angular/platform_server #Angular #CVE #infosec #javascript #Origin Hijacking #Server_Side Rendering #SSR #ssrf #TypeScript #Web Security
Daily CyberSecurity
High-Severity SSRF Flaw Uncovered in Angular’s Server-Side Rendering
Angular patches a critical 8.7 SSRF flaw in @angular/platform-server. Attackers can hijack SSR origins via URL normalization. Patch v19, v20, or v21 now!
16 views
Daily Writeups
⤷ Title: Stop Fighting “For you”: Making X’s Timeline Stick to Following + Latest
════════════════════════
𐀪 Author: DAC
════════════════════════
ⴵ Time: Thu, 07 May 2026 14:17:46 GMT
════════════════════════
⌗ Tags: #chrome_extension #twitter #typescript #tools #xs
Medium
Stop Fighting “For you”: Making X’s Timeline Stick to Following + Latest
If you use X (formerly Twitter) in a serious way — for work, tech, or market watching — you’ve probably had this experience:
37 views
Daily Writeups
⤷ Title: From “Following Pin” to an Anti-Algorithm Fatigue Tool
════════════════════════
𐀪 Author: DAC
════════════════════════
ⴵ Time: Fri, 08 May 2026 14:02:45 GMT
════════════════════════
⌗ Tags: #xs #frontend #chrome_extension #ux #typescript
Medium
From “Following Pin” to an Anti-Algorithm Fatigue Tool
The evolution of X Following Auto Pin (v0.4.2 → v0.8.3)
33 views
Daily Writeups
⤷ Title: Better Auth SSRF Flaw CVE-2026-53513 (CVSS 9.6) Threatens 19M-Download Auth Library
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 01:00:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Better Auth #CVE_2026_53513 #OIDC #SSO #ssrf #TypeScript Authentication
Daily CyberSecurity
Better Auth SSRF Flaw CVE-2026-53513 (CVSS 9.6) Threatens 19M-Download Auth Library
TL;DR A critical Better Auth SSRF flaw, tracked as CVE-2026-53513, lets any logged-in user reach internal services. The bug carries a CVSS score of 9.6 and sits in the @better-auth/sso plugin. Mai…
23 views