Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Unsafe Deserialization in Ruby Background Workers Leading to Deterministic Remote Code Execution
════════════════════════
𐀪 Author: NullSecurityX
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 16:57:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #json #bug_bounty #ruby
Medium
Unsafe Deserialization in Ruby Background Workers Leading to Deterministic Remote Code Execution
Object Injection via Oj.load Allows Command Execution in RubitMQ Job Workers
23 views
Daily Writeups
⤷ Title: Critical 10.0 CVSS Flaw in pac4j-jwt Lets Hackers Forge Admin Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 02:00:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CodeAnt AI #CVE_2026_29000 #CVSS 10.0 #infosec #Java security #JSON Web Tokens #JWT Security #pac4j_jwt #Vulnerability
Daily CyberSecurity
Critical 10.0 CVSS Flaw in pac4j-jwt Lets Hackers Forge Admin Tokens
A critical 10.0 CVSS flaw (CVE-2026-29000) in the pac4j-jwt library allows attackers to forge JWTs and bypass authentication. Patch immediately.
13 views
Daily Writeups
⤷ Title: The Null-Signature Trap: Unmasking the 10.0 CVSS Authentication Bypass in pac4j-jwt
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:13:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication bypass #CodeAnt AI #CVE_2026_29000 #identity theft #Java security #JSON Web Encryption #JWE #JWT #pac4j_jwt #RSA #Tech News 2026
Penetration Testing Tools
The Null-Signature Trap: Unmasking the 10.0 CVSS Authentication Bypass in pac4j-jwt
A critical vulnerability has been unearthed within the widely utilized Java authentication library, pac4j-jwt, empowering a malicious actor
21 views
Daily Writeups
⤷ Title: Couch (THM) Tryhackme WriteUp And Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 03:36:42 GMT
════════════════════════
⌗ Tags: #ctf_writeup #json #cybersecurity #hacking #tryhackme
Medium
Couch (THM) Tryhackme WriteUp And Answer
Description : Hack into a vulnerable database server that collects and stores data in JSON-based document formats, in this semi-guided…
26 views
Daily Writeups
⤷ Title: How JWT Authentication Actually Works (Step-by-Step Guide)
════════════════════════
𐀪 Author: Santhosh Kumar
════════════════════════
ⴵ Time: Sat, 11 Apr 2026 07:05:31 GMT
════════════════════════
⌗ Tags: #web_security #json_web_token #jwt_authentication #stateless_authentication #application_security
Medium
How JWT Authentication Actually Works (Step-by-Step Guide)
Authentication is everywhere, from logging into your email to accessing APIs. One of the most popular modern methods is JWT (JSON Web…
45 views
Daily Writeups
⤷ Title: JWT Attacks You Should Know (Beyond the Basics)
════════════════════════
𐀪 Author: Santhosh Kumar
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 15:58:40 GMT
════════════════════════
⌗ Tags: #web_application_security #security #json_web_token #jwt_authentication #hacking
Medium
JWT Attacks You Should Know (Beyond the Basics)
JWT authentication is everywhere but most implementations are insecure.
11 views
Daily Writeups
⤷ Title: Critical RCE Exploits Exposed: Apache OFBiz Patches Severe Authentication Bypass Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:01:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache OFBiz #Authentication Bypass #CVE_2026_31378 #CVE_2026_45434 #Cyber Security #infosec #JSON Attribute Manipulation #Patch Alert #Remote Code Execution #Server Side Template Injection #ssti
Daily CyberSecurity
Critical RCE Exploits Exposed: Apache OFBiz Patches Severe Authentication Bypass Flaws
Apache OFBiz releases version 24.09.06 to patch severe RCE flaws, token forgery, and a critical password-reset authentication bypass. Upgrade now!
23 views
Daily Writeups
⤷ Title: Hacking JSON Web Tokens: How Attackers Exploit API Authentication
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Thu, 28 May 2026 17:53:25 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_penetration_testing #api_attack #api_pentesting #json_web_token
Medium
Hacking JSON Web Tokens: How Attackers Exploit API Authentication
JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security feature into an attacker’s gateway
43 views
Daily Writeups
⤷ Title: Hacking JSON Web Tokens: How Attackers Exploit API Authentication
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:15:40 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_penetration_testing #api_attack #api_pentesting #json_web_token
Medium
Hacking JSON Web Tokens: How Attackers Exploit API Authentication
JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security feature into an attacker’s gateway
16 views
Daily Writeups
⤷ Title: JSON_EXTRACT Injection: When Prepared Statements Aren’t Enough
════════════════════════
𐀪 Author: Isuka sanuj
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 15:15:27 GMT
════════════════════════
⌗ Tags: #json #sql_injection #jsonpath
Medium
JSON_EXTRACT Injection: When Prepared Statements Aren’t Enough
Hey folks! Welcome back to my blog. Today, we’re diving into JSON Path Injection — a sneaky vulnerability that targets the JSON_* family of…
39 views