Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Apache NiFi Patches High-Severity Code Execution Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:12:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache NiFi #Authorization Bypass #cybersecurity #Data Pipeline #Groovy Scripting #infosec #Patch Alert #rce #Tinkerpop
Daily CyberSecurity
Apache NiFi Patches High-Severity Code Execution Flaw
Apache NiFi 2.9.0 fixes a high-severity RCE (CVE-2026-39816) in the Tinkerpop service. Secure your data pipelines and verify your annotations today!
9 views
Daily Writeups
⤷ Title: API Security: Minimum Things Every Team Should Implement Before Going Live
════════════════════════
𐀪 Author: Umashankara Kalaiah
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 03:21:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #owasp_top_10 #authentication #authorization #api_security
Medium
API Security: Minimum Things Every Team Should Implement Before Going Live
APIs are now the backbone of modern applications. Mobile apps, web apps, partner integrations, microservices, and AI systems all depend on…
28 views
Daily Writeups
⤷ Title: 7 Critical Vulnerabilities Threaten Spring Security 7.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:54:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_22752 #infosec #Java security #JWT Security #Patch Alert #Spring Security #Spring Security 7.0 #ssrf #TOCTOU #X.509 Impersonation
Daily CyberSecurity
7 Critical Vulnerabilities Threaten Spring Security 7.0
The Spring Security team has issued a series of security advisories detailing seven distinct vulnerabilities impacting the widely used authentication and authorization framework. While several fla…
15 views
Daily Writeups
⤷ Title: Critical 9.0 CVSS Flaw in ArcadeDB Allows Total Cross-Database Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 02:17:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ArcadeDB #Authorization Bypass #CVE_2026_44221 #cybersecurity #Data Isolation #database security #infosec #Multi_Model DBMS #Multi_tenancy #Patch Alert
Daily CyberSecurity
Critical 9.0 CVSS Flaw in ArcadeDB Allows Total Cross-Database Access
ArcadeDB 26.4.1 fixes a critical 9.0 CVSS authorization bypass (CVE-2026-44221) that dismantles database isolation. Secure your multi-model data and patch now!
22 views
Daily Writeups
⤷ Title: Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:20:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_7813 #Cyber Security #database security #infosec #Patch Alert #pgAdmin 4 #pgAdmin 9.15 #PostgreSQL #rce #sql injection
Daily CyberSecurity
Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution
pgAdmin 4 v9.15 fixes a 9.4 CVSS auth bypass and multiple RCE flaws. Attackers can execute OS commands via SQL tools. Upgrade your pgAdmin server now!
21 views
Daily Writeups
⤷ Title: What is BOLA? API Broken Object Level Authorization Explained for Beginners
════════════════════════
𐀪 Author: Abrar Bin Habib
════════════════════════
ⴵ Time: Fri, 15 May 2026 17:36:40 GMT
════════════════════════
⌗ Tags: #owasp_api_top_10 #api_vulnerabilities #authorization #bola #api_security
Medium
What is BOLA? API Broken Object Level Authorization Explained for Beginners
“Imagine changing the number 1 to 2 in a website link and suddenly seeing someone else’s private data. That’s BOLA.”
42 views
Daily Writeups
⤷ Title: Login Sistemində Təhlükəsizlik: Auth Modulunda Görülən AppSec Tədbirlərinin bir hissəsi
════════════════════════
𐀪 Author: Kanan Kazimov
════════════════════════
ⴵ Time: Sat, 16 May 2026 08:10:02 GMT
════════════════════════
⌗ Tags: #application_security #authorization #web_security #authentication #cybersecurity
Medium
Login Sistemində Təhlükəsizlik: Auth Modulunda Görülən AppSec Tədbirlərinin bir hissəsi
1. User Enumeration Qorunması: Qeydiyyat zamanı daxil edilən e-poçtun bazada olub-olmamasından asılı olmayaraq eyni mesaj qaytarılır…
31 views
Daily Writeups
⤷ Title: Preventing Reserved Scope Name Misuse in API Platforms
════════════════════════
𐀪 Author: Wishula Jayathunga
════════════════════════
ⴵ Time: Mon, 18 May 2026 02:57:43 GMT
════════════════════════
⌗ Tags: #api_security #backend_governance #scope_validation #enterprise_api_management #authorization_design
Medium
Preventing Reserved Scope Name Misuse in API Platforms
In modern API ecosystems, scopes play a critical role in authorization and access control. They define what an application or user is…
29 views
Daily Writeups
⤷ Title: Keys to the Kingdom: Critical 9.9 CVSS Budibase Flaw Allows Total Tenant Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:40:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Authorization Bypass #Budibase #CVE_2026_46425 #Cyber Security #DevSecOps #Identity Management #infosec #Patch Alert #privilege escalation #SCIM
Daily CyberSecurity
Keys to the Kingdom: Critical 9.9 CVSS Budibase Flaw Allows Total Tenant Takeover
Budibase patches a critical 9.9 CVSS SCIM authorization bypass (CVE-2026-46425). Basic users can delete admins and hijack accounts. Update now!
15 views
Daily Writeups
⤷ Title: New Apache Camel K Flaw (CVE-2026-45760) Enables Cross-Namespace Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 03:12:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel K #Authorization Bypass #Build Deputy Attack #Cloud Native Security #CVE_2026_45760 #Cyber Security #infosec #Kubernetes Namespace Bypass #Multi_Tenancy Defect #Patch Alert #Pod Generation Hijack
Daily CyberSecurity
New Apache Camel K Flaw (CVE-2026-45760) Enables Cross-Namespace Attacks
Apache Camel K fixes CVE-2026-45760, a critical cross-namespace "Build Deputy" flaw allowing authorized users to hijack pods in secure namespaces.
25 views