Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Massive PostgreSQL Update: 11 Vulnerabilities Patched as Version 14 Hits End-of-Life Warning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 02:12:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2026_6477 #CVE_2026_6637 #database security #DevOps #infosec #Patch Alert #Postgres Update #PostgreSQL #sql injection #SysAdmin
Daily CyberSecurity
Massive PostgreSQL Update: 11 Vulnerabilities Patched as Version 14 Hits End-of-Life Warning
PostgreSQL releases updates for versions 14-18 fixing 11 vulnerabilities (CVSS 8.8). Plus, critical End-of-Life deadline issued for Postgres 14.
8 views
Daily Writeups
⤷ Title: PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:51:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_2005 #database security #Heap Buffer Overflow #infosec #Patch Alert #pgcrypto #PoC Exploit #PostgreSQL #Public Disclosure #rce #Superuser Escalation
Daily CyberSecurity
PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
Technical details and GitHub PoC exploits disclosed for PostgreSQL pgcrypto CVE-2026-2005. Low-privilege users can seize root superuser RCE. Patch now!
11 views
Daily Writeups
⤷ Title: Critical 9.8 CVSS: Severe SQL Injection Flaw Exposed in Marten .NET Document Store Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:04:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET Security #ACID Document Database #CVE_2026_45288 #Cyber Security #Full_Text Search #infosec #Marten .NET #Patch Alert #PostgreSQL #sql injection
Daily CyberSecurity
Critical 9.8 CVSS: Severe SQL Injection Flaw Exposed in Marten .NET Document Store Engine
Marten .NET library suffers a critical 9.8 CVSS SQL injection flaw (CVE-2026-45288). Learn how to block the exploit and patch your databases now!
17 views
Daily Writeups
⤷ Title: Drupal Database API Flaw (CVE-2026-9082) Exposes PostgreSQL Sites to Unauthenticated SQLi
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:35:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_9082 #Cyber Security #Database Abstraction API #Drupal Core #infosec #PostgreSQL Security #SA_CORE_2026_004 #sql injection #Symfony Patch #Twig Template #unauthenticated RCE
Daily CyberSecurity
Exploited in the Wild: Critical Drupal SQL Injection (CVE-2026-9082) Grants Attacker Root Access
Urgent: Drupal releases patches for highly critical SQLi flaw CVE-2026-9082. Unauthenticated attackers can exploit PostgreSQL backends for full remote RCE.
24 views
Daily Writeups
⤷ Title: Drupal SQL Injection Exploit: Critical Flaw Exploited in the Wild with Public PoC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 07:54:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_9082 #Drupal Core #PostgreSQL Superuser #Remote Code Execution #sql injection #threat analysis
Daily CyberSecurity
Drupal SQL Injection Exploit: Critical Flaw Exploited in the Wild with Public PoC
A critical Drupal SQL injection exploit is active in the wild. Read the analysis of this flaw now that the wild exploit PoC is fully public.
31 views
Daily Writeups
⤷ Title: From Default Credentials to Operating System Access: Exploiting PostgreSQL in Metasploitable 2
════════════════════════
𐀪 Author: VISHAL PRAJAPATI
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 16:06:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #linux #postgresql #cybersecurity
Medium
From Default Credentials to Operating System Access: Exploiting PostgreSQL in Metasploitable 2
When people think about penetration testing, they often imagine sophisticated exploits and advanced malware. In reality, many compromises…
18 views
Daily Writeups
⤷ Title: Three Critical pgAdmin 4 Vulnerabilities Patched: XSS, Auth Bypass, and AI Assistant SQLi
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 00:30:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_12045 #CVE_2026_12046 #CVE_2026_12048 #pgAdmin #pgAdmin 4 vulnerabilities #PostgreSQL #Prompt injection #Stored XSS
Daily CyberSecurity
Three Critical pgAdmin 4 Vulnerabilities Patched: XSS, Auth Bypass, and AI Assistant SQLi
Three critical pgAdmin 4 vulnerabilities (CVE-2026-12046, CVE-2026-12048, CVE-2026-12045) risk XSS and RCE. Update to pgAdmin 4 9.16 now.
23 views
Daily Writeups
⤷ Title: The Code Was Fine. The Access Model Was Not.
════════════════════════
𐀪 Author: Shiki65536@TechRoamer
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 09:05:37 GMT
════════════════════════
⌗ Tags: #application_security #postgresql #database_security #backend_development #supabase
Medium
The Code Was Fine. The Access Model Was Not.
This week, Supabase flagged several backend tables with: RLS Disabled in Public.
19 views
Daily Writeups
⤷ Title: PHP SQL Injection Flaw CVE-2026-17543 Patched in Latest Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 01:58:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BCMath #CVE_2026_17543 #php #PHP Security #PostgreSQL #sql injection
Daily CyberSecurity
PHP SQL Injection Flaw CVE-2026-17543 Patched in Latest Release
TL;DR The PHP project fixed three flaws in its latest releases. The headline bug is a PHP SQL injection flaw, CVE-2026-17543, in the PostgreSQL extension. Two memory-safety bugs round out the set.…
21 views
Daily Writeups
⤷ Title: Building Multi-Tenant Isolation in Supabase — and Learning to Break It
════════════════════════
𐀪 Author: Joefrancis
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 13:56:46 GMT
════════════════════════
⌗ Tags: #postgresql #semgrep #full_stack_developer #application_security #multitenancy
Medium
Building Multi-Tenant Isolation in Supabase — and Learning to Break It
Building secure multi-tenant systems — and verifying them through application security testing.
6 views
Daily Writeups
⤷ Title: Hijacking the Backend: A Custom SafeLine WAF-to-Splunk Pipeline
════════════════════════
𐀪 Author: aarushi.jha
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 17:33:26 GMT
════════════════════════
⌗ Tags: #postgresql #splunk #cybersecurity #web_application_firewall #infosec
Medium
Hijacking the Backend: A Custom SafeLine WAF-to-Splunk Pipeline
Setting up SafeLine WAF was the easy part. You spin up the Docker containers, route your traffic, and watch it start eating malicious…
12 views
Daily Writeups
⤷ Title: pgAdmin 4 RCE Flaw Leads Three Critical Fixes in Version 9.17
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 01:02:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Assistant Security #Credential Theft #CVE_2026_17566 #Database Tools #pgAdmin #PostgreSQL #Remote Code Execution #sql injection
Daily CyberSecurity
pgAdmin 4 RCE Flaw Leads Three Critical Fixes in Version 9.17
TL;DR: The pgAdmin Development Team patched a pgAdmin 4 RCE flaw tracked as CVE-2026-17566, rated CVSS 9.4. Version 9.17 also fixes a credential-cloning bug and an AI Assistant bypass, alongside f…
11 views