Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: NestJS Rate Limiting Using @nestjs/throttler
════════════════════════
𐀪 Author: Ravi Mewada
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #backend #rate_limiting #nodejs #api_security #nestjs
Medium
NestJS Rate Limiting Using @nestjs/throttler
When we build APIs, one thing that is really important, for security is rate limiting.
32 views
Daily Writeups
⤷ Title: How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:14:46 GMT
════════════════════════
⌗ Tags: #nodejs #vulnerability #cybersecurity #infosec #bug_bounty
Medium
How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
When a patch for a critical vulnerability drops in a library downloaded over 500 million times a week, you expect it to be bulletproof…
14 views
Daily Writeups
⤷ Title: How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:14:44 GMT
════════════════════════
⌗ Tags: #nodejs #vulnerability #cybersecurity #infosec #bug_bounty
Medium
How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
When a patch for a critical vulnerability drops in a library downloaded over 500 million times a week, you expect it to be bulletproof…
11 views
Daily Writeups
⤷ Title: Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026–24884) to Achieve Arbitrary File…
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:05:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #nodejs #application_security #infosec
Medium
Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026–24884) to Achieve Arbitrary File…
Bug hunting is rarely about running an automated scanner and waiting for a critical alert. More often than not, it’s about staring at a…
15 views
Daily Writeups
⤷ Title: Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026–24884) to Achieve Arbitrary File…
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:05:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #nodejs #application_security #infosec
Medium
Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026–24884) to Achieve Arbitrary File…
Bug hunting is rarely about running an automated scanner and waiting for a critical alert. More often than not, it’s about staring at a…
12 views
Daily Writeups
⤷ Title: How to Protect Yourself from npm Supply Chain Attacks
════════════════════════
𐀪 Author: Digvijay Bhakuni
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:11:00 GMT
════════════════════════
⌗ Tags: #typosquatting #nodejs #hacking #npm #mini_shai_hulud
Medium
How to Protect Yourself from npm Supply Chain Attacks
The Growing Threat Hidden Behind npm install
15 views
Daily Writeups
⤷ Title: Anatomy of a Real-World Exploit Attempt: From Base64 to Remote Code Execution
════════════════════════
𐀪 Author: Jayari Hamza
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 15:12:04 GMT
════════════════════════
⌗ Tags: #cloud_security #nodejs_security #ethical_hacking
Medium
Anatomy of a Real-World Exploit Attempt: From Base64 to Remote Code Execution
While reviewing my logs, I found a suspicious request flagged as exploit:gen/cve_2025_55182. Let’s break down what it actually does.
19 views
Daily Writeups
⤷ Title: Weaponizing Logs: How Attackers Crash Apps via Synchronous Logging (And How ELK Fixes It)
════════════════════════
𐀪 Author: Pau Dang
════════════════════════
ⴵ Time: Sat, 13 Jun 2026 19:41:00 GMT
════════════════════════
⌗ Tags: #microservices #cybersecurity #nodejs #software_architecture #hacking
Medium
Weaponizing Logs: How Attackers Crash Apps via Synchronous Logging (And How ELK Fixes It)
When the very system designed to monitor your application becomes the vector that takes it down.
23 views
Daily Writeups
⤷ Title: Node.js Security Updates: Urgent Action Required
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 17:42:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48615 #CVE_2026_48618 #CVE_2026_48933 #nodejs #Security Updates
Daily CyberSecurity
Node.js Security Updates: Urgent Action Required
Protect your servers with the latest Node.js security updates. Patch critical vulnerabilities like CVE-2026-48933 to secure your infrastructure today.
30 views
Daily Writeups
⤷ Title: Four undici Vulnerabilities Affect a Package With 133M Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 02:00:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_6734 #CVE_2026_9697 #nodejs #npm #SOCKS5 #TLS Bypass #undici #WebSocket
Daily CyberSecurity
Four undici Vulnerabilities Affect a Package With 133M Weekly Downloads
Four undici vulnerabilities (CVE-2026-6734, CVE-2026-9697) affect the Node.js HTTP client, which sees 133M weekly downloads. Update undici now.
28 views