Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Role-Based Authorization Using JWT and Spring Security
════════════════════════
𐀪 Author: Gokul D
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 10:10:57 GMT
════════════════════════
⌗ Tags: #jwt_token #spring_security #java #jwt_authentication #application_security
Medium
Role-Based Authorization Using JWT and Spring Security
🛡️ Building Secure APIs with Spring Boot
33 views
Daily Writeups
⤷ Title: Kotlin, Spring Boot : HandlerInterceptor vs Filter
════════════════════════
𐀪 Author: Romman Sabbir
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 15:10:58 GMT
════════════════════════
⌗ Tags: #spring_boot #spring_security #kotlin #security #application_security
Medium
Kotlin, Spring Boot : HandlerInterceptor vs Filter
HandlerInterceptor vs Filter in Spring Boot: A Practical Guide with JNDI Injection Prevention
21 views
Daily Writeups
⤷ Title: Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 01:40:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@PreAuthorize #Authorization Bypass #CVE_2025_41248 #CVE_2025_41249 #method security #Spring Framework #Spring Security #Vulnerability
Daily CyberSecurity
Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
Two medium-severity flaws in Spring Security and the Spring Framework allow authorization bypasses in applications that use method-level security on generic types.
19 views
Daily Writeups
⤷ Title: XSS (Cross-Site Scripting)
════════════════════════
𐀪 Author: Yasif khan
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 05:48:58 GMT
════════════════════════
⌗ Tags: #xss_attack #xss_bypass #hacker #spring_security #xss_vulnerability
Medium
XSS (Cross-Site Scripting)
XSS (Cross-Site Scripting) in Spring Security
37 views
Daily Writeups
⤷ Title: API Security vs Web Security: Same Goal, Very Different Problems
════════════════════════
𐀪 Author: Ayoub Taouam
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 15:22:55 GMT
════════════════════════
⌗ Tags: #backend #computer_science #api_security #web_security #spring_security
Medium
API Security vs Web Security: Same Goal, Very Different Problems
Web and API security protect the same systems, but they serve different clients, scale differently, and fail in very different ways.
61 views
Daily Writeups
⤷ Title: The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:13:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #CVE_2026_22732 #CVSS 9.1 #cybersecurity #data leak #HTTP Headers #infosec #Java security #Spring Security #Vulnerability
Daily CyberSecurity
The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
A critical 9.1 CVSS flaw in Spring Security (CVE-2026-22732) fails to write HTTP headers, exposing Java apps to severe data leaks. Update immediately.
12 views
Daily Writeups
⤷ Title: Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 13:30:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40477 #CVE_2026_40478 #infosec #Java security #Patch Alert #rce #Server Side Template Injection #Spring Security #ssti #Thymeleaf #web development
Daily CyberSecurity
Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
Thymeleaf 3.1.4 fixes two critical 9.1 CVSS vulnerabilities. Unauthenticated attackers can bypass security for SSTI. Audit your user input and patch today!
13 views
Daily Writeups
⤷ Title: 7 Critical Vulnerabilities Threaten Spring Security 7.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:54:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_22752 #infosec #Java security #JWT Security #Patch Alert #Spring Security #Spring Security 7.0 #ssrf #TOCTOU #X.509 Impersonation
Daily CyberSecurity
7 Critical Vulnerabilities Threaten Spring Security 7.0
The Spring Security team has issued a series of security advisories detailing seven distinct vulnerabilities impacting the widely used authentication and authorization framework. While several fla…
15 views
Daily Writeups
⤷ Title: Multiple Security Flaws Fixed in Major Framework Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:30:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_40998 #CVE_2026_40999 #CVE_2026_41003 #patch management #Spring Security #Spring Web Services
Daily CyberSecurity
Multiple Security Flaws Fixed in Major Framework Release
New updates patch critical Spring security vulnerabilities, mitigating cross-site scripting and server-side request forgery risks across multiple versions.
23 views
Daily Writeups
⤷ Title: Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
════════════════════════
𐀪 Author: HobbiesPark
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:37:36 GMT
════════════════════════
⌗ Tags: #spring_security #java #spring_boot #microservices #ssrf
Medium
Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
I upgraded a service to Spring Boot 4.1, switched on its new SSRF filter, and braced for the usual fallout — a global block rule shredding…
40 views