Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Server‑Side Parameter Pollution: Hijacking Query Strings for Admin‑Level Access
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 05:01:13 GMT
════════════════════════
⌗ Tags: #server_side_pollution #http_parameter_pollution #internal_api_exploitation #bug_bounty_tips #bug_bounty
Medium
Server‑Side Parameter Pollution: Hijacking Query Strings for Admin‑Level Access
[Write-up] Exploiting Server-Side Parameter Pollution in a Query String.
17 views
Daily Writeups
⤷ Title: Prevent HTTP Parameter Pollution in Symfony Apps
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 08:50:20 GMT
════════════════════════
⌗ Tags: #vulnerability #symfony #cybersecurity #penetration_testing #http_parameter_pollution
Medium
Prevent HTTP Parameter Pollution in Symfony Apps
HTTP Parameter Pollution (HPP) is a lesser-known but impactful web vulnerability that attackers use to manipulate query or form parameters…
17 views
Daily Writeups
⤷ Title: Critical Flaw (CVE-2025-7783, CVSS 9.4) in Form-Data Library Exposes Millions of Apps to Multipart Injection & RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 03:01:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_7783 #cybersecurity #Form_Data #HTTP Parameter Pollution #javascript #Multipart Injection #rce #Vulnerability
Daily CyberSecurity
Critical Flaw (CVE-2025-7783, CVSS 9.4) in Form-Data Library Exposes Millions of Apps to Multipart Injection & RCE
A critical vulnerability (CVE-2025-7783, CVSS 9.4) in the Form-Data JavaScript library allows multipart injection and potential RCE due to predictable boundary values.
16 views
Daily Writeups
⤷ Title: Critical Axios Flaw (CVE-2025-54371) in Form-Data Dependency Exposes Millions to HTTP Manipulation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 25 Jul 2025 00:28:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2025_54371 #cybersecurity #Form_Data #HTTP Parameter Pollution #javascript #Multipart Form_Data #Vulnerability
Daily CyberSecurity
Critical Axios Flaw (CVE-2025-54371) in Form-Data Dependency Exposes Millions to HTTP Manipulation
A critical flaw (CVE-2025-54371, CVSS 7.5) in the form-data package, used by Axios 1.10.0, allows attackers to predict multipart boundaries, risking HTTP parameter pollution and injection. Update to 1.11.0 now!
16 views
Daily Writeups
⤷ Title: The WAF Deception: 70% of Firewalls Bypassed by HTTP Parameter Pollution and JS Injection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 02:36:36 +0000
════════════════════════
⌗ Tags: #Vulnerability #bypass #cybersecurity #ETHIACK #HTTP Parameter Pollution #JavaScript Injection #vulnerability #WAF #Web Application Firewall
Penetration Testing Tools
The WAF Deception: 70% of Firewalls Bypassed by HTTP Parameter Pollution and JS Injection
A new report reveals that over 70% of WAFs can be bypassed by combining JavaScript injection with HTTP parameter pollution, fooling security systems with malformed requests.
19 views
Daily Writeups
⤷ Title: Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 07 Oct 2025 08:34:36 GMT
════════════════════════
⌗ Tags: #crlf_injection #web_cache_poisoning #cache_key_injection #http_parameter_pollution #bug_bounty
Medium
Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter
Learn how cache key injection works, why it leads to large-scale cache poisoning, and the real-world risks for modern web applications.
22 views
Daily Writeups
⤷ Title: Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 13:14:32 GMT
════════════════════════
⌗ Tags: #crlf_injection #web_cache_poisoning #cache_key_injection #http_parameter_pollution #bug_bounty
Medium
Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter
Learn how cache key injection works, why it leads to large-scale cache poisoning, and the real-world risks for modern web applications.
43 views
Daily Writeups
⤷ Title: How a Simple HPP Bug Earned $700 on Twitter
════════════════════════
𐀪 Author: ab.infosec
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 20:27:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #websecurity_testing #http_parameter_pollution
Medium
How a Simple HPP Bug Earned $700 on Twitter🚨
Sometimes, finding a real bug doesn’t require advanced exploits or zero-days.
17 views
Daily Writeups
⤷ Title: Exploiting Server-Side Parameter Pollution in a REST URL
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 07:01:54 GMT
════════════════════════
⌗ Tags: #bug_bounty #http_parameter_pollution #broken_access_control #account_takeover #bug_bounty_tips
Medium
Exploiting Server-Side Parameter Pollution in a REST URL
How the REST Parameter Manipulation Led to Administrator Account Takeover.
42 views
Daily Writeups
⤷ Title: HTTP Parameter Pollution (HPP)
════════════════════════
𐀪 Author: Lost_hacker
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 04:56:51 GMT
════════════════════════
⌗ Tags: #http_parameter_pollution #bugbounty_writeup #bug_bounty #parameter_pollution #hacking
Medium
HTTP Parameter Pollution (HPP)
1. Topic Overview — What, Why, Where, How, Which
11 views