Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Inside RubyGems’ Silent War Against Malicious Packages: A Developer’s Reality Check
════════════════════════
𐀪 Author: Mi Do
════════════════════════
ⴵ Time: Mon, 01 Sep 2025 00:12:10 GMT
════════════════════════
⌗ Tags: #ruby_on_rails #ruby #devops #devsecops #cybersecurity
Medium
Inside RubyGems’ Silent War Against Malicious Packages: A Developer’s Reality Check
The untold story of how Ruby’s package registry fights supply chain attacks daily — and what it means for your next project
29 views
Daily Writeups
⤷ Title: JetBrains Makes RubyMine Free for Non-Commercial Use
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Sep 2025 03:21:13 +0000
════════════════════════
⌗ Tags: #Technology #Developers #free software #IDE #JetBrains #non_commercial #open_source #ruby on rails #RubyMine
Daily CyberSecurity
JetBrains Makes RubyMine Free for Non-Commercial Use
JetBrains has made its RubyMine IDE free for non-commercial use. The move is designed to lower the barrier for new developers and content creators.
13 views
Daily Writeups
⤷ Title: Rack Security Update: High-Severity Flaw Bypasses Parameter Limit, Exposing Apps to DoS Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 08:37:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_59830 #Denial of Service #dos #QueryParser #Rack #Ruby #RubyGems #Web Security
Daily CyberSecurity
Rack Security Update: High-Severity Flaw Bypasses Parameter Limit, Exposing Apps to DoS Attacks
Rack patches CVE-2025-59830 (CVSS 7.5), a flaw where attackers could use semicolon separators to bypass the parameter count limit and trigger DoS attacks.
19 views
Daily Writeups
⤷ Title: Protect Your Rails API with Rack-Attack Rate Limiting (Step-by-Step)️
════════════════════════
𐀪 Author: Ahmet Kaptan
════════════════════════
ⴵ Time: Wed, 12 Nov 2025 09:32:21 GMT
════════════════════════
⌗ Tags: #rest_api #api_security #ruby_on_rails #software_development #backend_development
Medium
Protect Your Rails API with Rack-Attack Rate Limiting (Step-by-Step)🛡️
A while back, while working at a company that handled one of our biggest enterprise clients, I ran into one of those production nightmares…
45 views
Daily Writeups
⤷ Title: Critical Authentication Bypass Flaws Discovered in Ruby SAML Library (CVE-2025-66567 & CVE-2025-66568)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 02:29:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Canonicalization #CVE_2025_66567 #Digest Bypass #Ruby SAML #XML Parser Differential
Daily CyberSecurity
Critical Authentication Bypass Flaws Discovered in Ruby SAML Library (CVE-2025-66567 & CVE-2025-66568)
A pair of critical security vulnerabilities has been disclosed in the Ruby SAML library, a foundational tool used by developers to implement client-side SAML authorization. Both flaws carry a crit…
31 views
Daily Writeups
⤷ Title: Ruby 4.0 Unwrapped: Meet ZJIT and the Game-Changing Ruby Box
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:26:41 +0000
════════════════════════
⌗ Tags: #Technology #Backend #JIT Compiler #Memory Safety #performance #Programming 2026 #Ractor #Ruby 4.0 #Ruby Box #Web Development #ZJIT
Penetration Testing Tools
Ruby 4.0 Unwrapped: Meet ZJIT and the Game-Changing Ruby Box
Ruby has almost settled into a festive tradition of its own: each Christmas, the developers unveil a new
18 views
Daily Writeups
⤷ Title: How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE
════════════════════════
𐀪 Author: Ahmed Tarek
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 19:06:39 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #dependency_confusion #bug_bounty_tips #ruby
Medium
How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE
hey there,
22 views
Daily Writeups
⤷ Title: Secure Query Practices in Ruby on Rails
════════════════════════
𐀪 Author: Muhammad Bin Hussain
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 20:30:29 GMT
════════════════════════
⌗ Tags: #ruby_on_rails #web_security #secure_coding_practice #sql_injection #backend_development
Medium
Secure Query Practices in Ruby on Rails
Preventing SQL Injection Through Understanding, Not Fear
45 views
Daily Writeups
⤷ Title: The Unsafe Send: How an HTTP Client Library Led to Remote Code Execution
════════════════════════
𐀪 Author: Alperen
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 02:44:52 GMT
════════════════════════
⌗ Tags: #hackerone #source_code_security #source_code #ruby #bugbounty_writeup
Medium
The Unsafe Send: How an HTTP Client Library Led to Remote Code Execution
Finding a vulnerability in a core library is always a “hold your breath” moment. You realize that the impact isn’t just limited to one…
45 views
Daily Writeups
⤷ Title: Unsafe Deserialization in Ruby Background Workers Leading to Deterministic Remote Code Execution
════════════════════════
𐀪 Author: NullSecurityX
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 16:57:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #json #bug_bounty #ruby
Medium
Unsafe Deserialization in Ruby Background Workers Leading to Deterministic Remote Code Execution
Object Injection via Oj.load Allows Command Execution in RubitMQ Job Workers
23 views