Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation #CVSS 10 #infosec #JavaScript Security #n8n #Node.js #Patch Alert #Prototype Pollution #rce #Webhook Security #XML parsing
Daily CyberSecurity
Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
Critical CVSS 10 and 9.4 vulnerabilities hit n8n. Prototype pollution in XML nodes can lead to full RCE. Patch to v2.18.1 or v1.123.32 immediately.
17 views
Daily Writeups
⤷ Title: Gadget Hunting in Practice
════════════════════════
𐀪 Author: Marduk I Am
════════════════════════
ⴵ Time: Sun, 17 May 2026 21:34:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #xss_attack #prototype_pollution #web_security #bug_bounty
Medium
Gadget Hunting in Practice
A practical workflow for finding prototype pollution gadgets and tracing them to XSS sinks
29 views
Daily Writeups
⤷ Title: Three Critical 9.4 CVSS Flaws Expose n8n Automation Nodes to Full RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 01:20:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Argument Injection #CVE_2026_44789 #CVE_2026_44790 #CVE_2026_44791 #DevSecOps #infosec #n8n #Patch Alert #Prototype Pollution #rce #Workflow Automation
Daily CyberSecurity
Three Critical 9.4 CVSS Flaws Expose n8n Automation Nodes to Full RCE
n8n fixes three critical 9.4 CVSS flaws (CVE-2026-44790/91/89). Authenticated users can break sandboxes for local file read and server-level RCE. Patch now!
14 views
Daily Writeups
⤷ Title: React Router Vulnerabilities Patched in New Framework Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 02:40:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42211 #Denial of Service #npm Package #Prototype Pollution #React Router #software update
Daily CyberSecurity
React Router Vulnerabilities Patched in New Framework Releases
Recent updates address critical React Router vulnerabilities. Apply the latest React Router vulnerabilities patch to secure your web applications.
12 views
Daily Writeups
⤷ Title: New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 01:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_44492 #CVE_2026_44494 #infosec #Node.js #Prototype Pollution #Proxy Bypass
Daily CyberSecurity
New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
New Axios proxy vulnerabilities expose apps. A critical prototype pollution gadget allows full traffic interception. Secure patches are now available.
12 views
Daily Writeups
⤷ Title: i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 01:00:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48713 #CVE_2026_48714 #i18next #i18next_fs_backend #Node.js Security #npm Vulnerability #Prototype Pollution
Daily CyberSecurity
i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads
CVE-2026-48713 exposes i18next prototype pollution in i18next-fs-backend, a CVSS 9.1 flaw threatening 1M+ weekly downloads. Update to 2.6.6 now.
14 views
Daily Writeups
⤷ Title: A Deep-Dive Into Hunting Prototype Pollution on Hashnode Live
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 10:21:49 GMT
════════════════════════
⌗ Tags: #hashcode #nodejsecurity #javascript_security #prototype_pollution #penetration_testing
Medium
A Deep-Dive Into Hunting Prototype Pollution on Hashnode Live
Hashnode is a popular blogging platform built on Next.js. While exploring its API surface during a routine security assessment, I noticed…
46 views
Daily Writeups
⤷ Title: Fools Mate, Revenge — TryHackMe Writeup
════════════════════════
𐀪 Author: ghosteye
════════════════════════
ⴵ Time: Sun, 05 Jul 2026 15:06:54 GMT
════════════════════════
⌗ Tags: #cwe_1321 #api_security #tryhackme #penetration_testing #prototype_pollution
Medium
Fools Mate, Revenge — TryHackMe Writeup
https://tryhackme.com/room/foolsm8v2
28 views
Daily Writeups
⤷ Title: [Fools Mate, Revenge] — Prototype Pollution in a Express.js Chess App
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 06:28:53 GMT
════════════════════════
⌗ Tags: #express_vulnerability #prototype_pollution #tryhackme_walkthrough #tryhackme
Medium
[Fools Mate, Revenge] — Prototype Pollution in a Express.js Chess App
A hands-on writeup on discovering and exploiting a prototype pollution flaw in an Express.js
30 views
Daily Writeups
⤷ Title: Fool’s Mate (TryHackMe): I Checkmated the Bot, the Server Still Said No — So I Polluted Its…
════════════════════════
𐀪 Author: Syedmohathashimali
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 03:58:05 GMT
════════════════════════
⌗ Tags: #prototype_pollution #tryhackme #ctf #cybersecurity #web_security
Medium
Fool’s Mate (TryHackMe): I Checkmated the Bot, the Server Still Said No — So I Polluted Its Prototype
TryHackMe writeup — Fool’s Mate, “Can you bypass the engine?”
23 views
Daily Writeups
⤷ Title: Prototype Pollution: From JavaScript Object Mutation to Real Security Impact
════════════════════════
𐀪 Author: CYBER MIND SPACE
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 16:56:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_hunting #cybersecurity #prototype_pollution #cybermindspace
Medium
Prototype Pollution: From JavaScript Object Mutation to Real Security Impact
One JSON key. Every object in your Node.js process inherits the payload. The gadget decides whether that's a crash, an auth bypass, or a…
19 views