Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: How to Properly Use CFQueryParam to Prevent SQL Injection in ColdFusion?
════════════════════════
𐀪 Author: Deepak Purohit
════════════════════════
ⴵ Time: Wed, 02 Apr 2025 09:16:02 GMT
════════════════════════
⌗ Tags: #coldfusion_development #sql_injection #hire_coldfusion_developer #coldfusion_developer #coldfusion_service
Medium
How to Properly Use CFQueryParam to Prevent SQL Injection in ColdFusion?
Introduction
43 views
Daily Writeups
⤷ Title: ’ .
════════════════════════
𐀪 Author: Ananda Krishna (0xG4057)
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 11:36:15 GMT
════════════════════════
⌗ Tags: #coldfusion #responsible_disclosure #nasa #bug_bounty #bug_bounty_writeup
Medium
𝐇𝐨𝐰 𝐈 𝐋𝐚𝐧𝐝𝐞𝐝 𝐢𝐧 𝐍𝐀𝐒𝐀’𝐬 𝐇𝐚𝐥𝐥 𝐨𝐟 𝐅𝐚𝐦𝐞 𝐰𝐢𝐭𝐡 𝐚 𝐒𝐢𝐧𝐠𝐥𝐞 𝐗𝐒𝐒.
A Red Teamer’s Journey from Cosmic Curiosity to Bug‑Bounty Bragging Rights
15 views
Daily Writeups
⤷ Title: Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:01:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Server #CFML #ColdFusion Markup Language #CVE_2025_34074 #cybersecurity #Lucee #metasploit #rce #Remote Code Execution #scheduled tasks #Vulnerability
Daily CyberSecurity
Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out
A critical flaw (CVE-2025-34074, CVSS 9.4) in Lucee allows authenticated admins to achieve RCE by abusing scheduled tasks. A Metasploit module is out; urgent patching needed!
23 views
Daily Writeups
⤷ Title: Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:28:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Brian Reilly #CAR Deployment #CFAdmin #ColdFusion Archive #CVE_2025_61808 #rce #Remote Code Execution #Server Security #SMB Share #UNC path #Web Shell
Daily CyberSecurity
Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
Adobe has issued critical updates for its ColdFusion platform after security researcher Brian Reilly uncovered a clever logic flaw that allows authenticated administrators to turn a standard maint…
14 views
Daily Writeups
⤷ Title: ColdFusion Vulnerable to RCE After Patch Applied: Deep Technical Analysis, Root Causes, and…
════════════════════════
𐀪 Author: Deepak Purohit
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 09:18:16 GMT
════════════════════════
⌗ Tags: #coldfusion_software #rce_vulnerability #coldfusion_development #adobe_coldfusion #coldfusion_service
Medium
ColdFusion Vulnerable to RCE After Patch Applied: Deep Technical Analysis, Root Causes, and Enterprise-Grade Mitigation Strategies
When ColdFusion Patches Still Leave the Door Open to RCE
69 views
Daily Writeups
⤷ Title: Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:18:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe #ColdFusion #ColdFusion 2025 #CVE_2026_27304 #CVE_2026_27306 #cybersecurity #infosec #Patch Alert #Path Traversal #rce #Remote Code Execution
Daily CyberSecurity
Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses
Adobe patches critical RCE and security bypass flaws in ColdFusion 2023 & 2025. Protect your enterprise servers from takeover—update to the latest version now.
18 views
Daily Writeups
⤷ Title: ColdFusion SQL Injection Prevention: cfqueryparam, Input Validation, and WAF Setup
════════════════════════
𐀪 Author: Deepak Purohit
════════════════════════
ⴵ Time: Mon, 18 May 2026 07:23:01 GMT
════════════════════════
⌗ Tags: #coldfusion_development #coldfusion #coldfusion_service #coldfusion_software #sql_injection
Medium
ColdFusion SQL Injection Prevention: cfqueryparam, Input Validation, and WAF Setup
SQL injection in ColdFusion is fully preventable using three reinforcing layers: (1) cfqueryparam on every dynamic value in every cfquery…
47 views
Daily Writeups
⤷ Title: ColdFusion XSS Vulnerability in Form Input: Causes, Fixes & Best Practices
════════════════════════
𐀪 Author: Deepak Purohit
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 05:42:45 GMT
════════════════════════
⌗ Tags: #adobe_coldfusion #software_development #xss_vulnerability #web_development #coldfusion_development
Medium
ColdFusion XSS Vulnerability in Form Input: Causes, Fixes & Best Practices
Stop Cross-Site Scripting in ColdFusion Forms: A Developer’s Defense Guide
45 views
Daily Writeups
⤷ Title: Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 17:13:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Adobe Security #APSB26_68 #Arbitrary Code Execution #ColdFusion vulnerability #CVE_2026_48276 #CVSS 10 #rce
Daily CyberSecurity
Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution
TL;DR Adobe shipped fixes for 11 Adobe ColdFusion vulnerabilities on 30 June 2026. Six earn a perfect CVSS score of 10.0 and allow arbitrary code execution. Adobe rates the update priority 1, its …
12 views
Daily Writeups
⤷ Title: Active ColdFusion Arbitrary Code Execution Flaw Scores CVSS 10
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 04:09:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #ColdFusion #CVE_2026_48282 #Path Traversal
Daily CyberSecurity
Active ColdFusion Arbitrary Code Execution Flaw Scores CVSS 10
TL;DR CVE-2026-48282, a critical CVSS 10 ColdFusion arbitrary code execution vulnerability, is under active attack. Hackers are exploiting this path traversal flaw in the wild. Administrators must…
10 views