Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: The Null-Signature Trap: Unmasking the 10.0 CVSS Authentication Bypass in pac4j-jwt
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 08:13:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication bypass #CodeAnt AI #CVE_2026_29000 #identity theft #Java security #JSON Web Encryption #JWE #JWT #pac4j_jwt #RSA #Tech News 2026
Penetration Testing Tools
The Null-Signature Trap: Unmasking the 10.0 CVSS Authentication Bypass in pac4j-jwt
A critical vulnerability has been unearthed within the widely utilized Java authentication library, pac4j-jwt, empowering a malicious actor
21 views
Daily Writeups
⤷ Title: Couch (THM) Tryhackme WriteUp And Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 03:36:42 GMT
════════════════════════
⌗ Tags: #ctf_writeup #json #cybersecurity #hacking #tryhackme
Medium
Couch (THM) Tryhackme WriteUp And Answer
Description : Hack into a vulnerable database server that collects and stores data in JSON-based document formats, in this semi-guided…
26 views
Daily Writeups
⤷ Title: How JWT Authentication Actually Works (Step-by-Step Guide)
════════════════════════
𐀪 Author: Santhosh Kumar
════════════════════════
ⴵ Time: Sat, 11 Apr 2026 07:05:31 GMT
════════════════════════
⌗ Tags: #web_security #json_web_token #jwt_authentication #stateless_authentication #application_security
Medium
How JWT Authentication Actually Works (Step-by-Step Guide)
Authentication is everywhere, from logging into your email to accessing APIs. One of the most popular modern methods is JWT (JSON Web…
46 views
Daily Writeups
⤷ Title: JWT Attacks You Should Know (Beyond the Basics)
════════════════════════
𐀪 Author: Santhosh Kumar
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 15:58:40 GMT
════════════════════════
⌗ Tags: #web_application_security #security #json_web_token #jwt_authentication #hacking
Medium
JWT Attacks You Should Know (Beyond the Basics)
JWT authentication is everywhere but most implementations are insecure.
11 views
Daily Writeups
⤷ Title: Critical RCE Exploits Exposed: Apache OFBiz Patches Severe Authentication Bypass Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:01:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache OFBiz #Authentication Bypass #CVE_2026_31378 #CVE_2026_45434 #Cyber Security #infosec #JSON Attribute Manipulation #Patch Alert #Remote Code Execution #Server Side Template Injection #ssti
Daily CyberSecurity
Critical RCE Exploits Exposed: Apache OFBiz Patches Severe Authentication Bypass Flaws
Apache OFBiz releases version 24.09.06 to patch severe RCE flaws, token forgery, and a critical password-reset authentication bypass. Upgrade now!
24 views
Daily Writeups
⤷ Title: Hacking JSON Web Tokens: How Attackers Exploit API Authentication
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Thu, 28 May 2026 17:53:25 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_penetration_testing #api_attack #api_pentesting #json_web_token
Medium
Hacking JSON Web Tokens: How Attackers Exploit API Authentication
JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security feature into an attacker’s gateway
44 views
Daily Writeups
⤷ Title: Hacking JSON Web Tokens: How Attackers Exploit API Authentication
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:15:40 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_penetration_testing #api_attack #api_pentesting #json_web_token
Medium
Hacking JSON Web Tokens: How Attackers Exploit API Authentication
JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security feature into an attacker’s gateway
16 views
Daily Writeups
⤷ Title: JSON_EXTRACT Injection: When Prepared Statements Aren’t Enough
════════════════════════
𐀪 Author: Isuka sanuj
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 15:15:27 GMT
════════════════════════
⌗ Tags: #json #sql_injection #jsonpath
Medium
JSON_EXTRACT Injection: When Prepared Statements Aren’t Enough
Hey folks! Welcome back to my blog. Today, we’re diving into JSON Path Injection — a sneaky vulnerability that targets the JSON_* family of…
41 views
Daily Writeups
⤷ Title: Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 13:35:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Struts #CVE_2026_73631 #CVE_2026_73632 #CVE_2026_73633 #CVE_2026_73634 #CVE_2026_73635 #Denial of Service #Java Web Security #JSON Plugin #Struts 2
Daily CyberSecurity
Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs
Apache patched five bugs in Struts 2 this week. Three of them count as Apache Struts DoS flaws that a remote user can trigger. The other two leak data through a shared state bug in the JSON plugin…
38 views
Daily Writeups
⤷ Title: Authlib Flaw Allows JSON Web Signature Authentication Bypass
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 13:20:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication bypass #Authlib #CVE_2026_96760 #JSON Web Signature
Information Security News
Authlib Flaw Allows JSON Web Signature Authentication Bypass
Authlib fundamentally exists to distinguish authenticated, trusted data from malicious forgery. However, a meticulously crafted JSON Web Signature (JWS) enables attackers to bypass this critical v…
19 views