Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Critical Request Smuggling & Cache Flaws Discovered in Cloudflare’s Pingora
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:18:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Cloudflare Pingora #CVE_2026_2833 #CVE_2026_2835 #CVE_2026_2836 #cybersecurity #http_request_smuggling #infosec #Patch Alert #Rust Security
Daily CyberSecurity
Critical Request Smuggling & Cache Flaws Discovered in Cloudflare's Pingora
Discover three critical flaws (including CVE-2026-2835) in Cloudflare's Pingora Rust framework causing request smuggling and cache poisoning. Update now.
11 views
Daily Writeups
⤷ Title: HTTP/2 request smuggling via CRLF injection
════════════════════════
𐀪 Author: Ⓥ
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:24:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #pentesting #cybersecurity #vulnerability #http_request_smuggling
Medium
HTTP/2 request smuggling via CRLF injection
HTTP/2 request smuggling can arise when a front-end server downgrades HTTP/2 traffic to HTTP/1.1 without properly sanitizing user-supplied…
32 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
════════════════════════
𐀪 Author: Aman Gupta
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:15:57 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #web_security #http_request_smuggling
Medium
HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
Introduction
15 views
Daily Writeups
⤷ Title: Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
════════════════════════
𐀪 Author: Mohamed Amgad
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 00:13:15 GMT
════════════════════════
⌗ Tags: #http_request_smuggling #web_security #portswigger #bug_bounty
Medium
Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
Before diving into the lab, there are some important concepts we need to understand first: what Content-Length and Transfer-Encoding are…
33 views
Daily Writeups
⤷ Title: How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:17:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #url #http_request #prompt_injection_attack
Medium
How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
Most WAF bypasses involve encoding tricks, obscure headers, or parser confusion.
32 views
Daily Writeups
⤷ Title: Bir HTTP İsteği Gerçekten Nerede Biter?
════════════════════════
𐀪 Author: Zeki Kayaalp
════════════════════════
ⴵ Time: Wed, 13 May 2026 20:24:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request #bug_bounty #http_request_smuggling
Medium
Bir HTTP İsteği Gerçekten Nerede Biter?
Sen tarayıcı üzerinden bir siteye gitmek istediğinde tren hangi duraklarda geçiyor biliyor musun?
31 views
Daily Writeups
⤷ Title: AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
════════════════════════
𐀪 Author: 0xKishore
════════════════════════
ⴵ Time: Wed, 27 May 2026 11:51:31 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #penetration_testing #http_request #appsecmaster #cybersecurity
Medium
AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
Objective
6 views
Daily Writeups
⤷ Title: A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:35:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #http_request #burpsuite
Medium
A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
Single unvalidated request header can become an execution vehicle for password poisoning and server-side exploitation.
14 views
Daily Writeups
⤷ Title: HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
════════════════════════
𐀪 Author: Amit Pal | amitpxl
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 13:51:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request_smuggling #application_security #web_application_security
Medium
HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
Stop screenshotting every double response in Burp Repeater. Here’s how to separate harmless protocol features from actual queue poisoning.
17 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
════════════════════════
𐀪 Author: Furkanalpgunay
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:22:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #http_request_smuggling #cybersecurity #penetration_testing #web_security
Medium
HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
From CL.TE and TE.CL to HTTP/2 downgrade and client-side desync — a complete, hands-on guide built from 20+ labs I solved myself.
10 views
Daily Writeups
⤷ Title: CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 01:01:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_58047 #CVE_2026_58048 #database security #http_request_smuggling #privilege escalation #Web Hosting Security #WHM
Daily CyberSecurity
CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
TL;DR: cPanel patched a cPanel root SQL execution flaw tracked as CVE-2026-58048, rated CVSS 9.4. A second, lower-severity bug, CVE-2026-58047, allows HTTP request smuggling under limited conditio…
24 views