Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Grafana Patches CVE-2025-3260 and More in Critical Security Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 00:08:14 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authorization Bypass #CVE_2025_3260 #Dashboard Security #Data Source Proxy #Grafana #Grafana OSS #Open Source Monitoring #security patch #Trusted Types #XSS
Daily CyberSecurity
Grafana Patches CVE-2025-3260 and More in Critical Security Update
Grafana fixes critical CVE-2025-3260 and two medium bugs, urging users to update immediately to prevent unauthorized access and XSS exploits.
16 views
Daily Writeups
⤷ Title: Next.js Middleware Vulnerability: How CVE-2025–29927 Enables Authorization Bypass
════════════════════════
𐀪 Author: Nitin Gavhane
════════════════════════
ⴵ Time: Fri, 25 Apr 2025 22:31:09 GMT
════════════════════════
⌗ Tags: #middleware_vulnerability #authorization_bypass #nextjs #cve_2025_29927 #bug_bounty
Medium
Next.js Middleware Vulnerability: How CVE-2025–29927 Enables Authorization Bypass
Hey there! In today’s blog, I’m diving into the Next.js Middleware Exploit — specifically CVE-2025–29927, an authorization bypass…
29 views
Daily Writeups
⤷ Title: SAP’s July 2025 Patch Day Brings 27 New Notes, Multiple Critical RCE & Deserialization Flaws (CVSS 10.0)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:40:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2025_30009 #CVE_2025_42967 #Enterprise Portal #Insecure Deserialization #Live Auction Cockpit #NetWeaver #rce #Remote Code Execution #S/4HANA #SAP #security patch #Vulnerability
Daily CyberSecurity
SAP's July 2025 Patch Day Brings 27 New Notes, Multiple Critical RCE & Deserialization Flaws (CVSS 10.0)
SAP's July 2025 Patch Day fixes 27 vulnerabilities, including critical RCE (CVSS 10.0) in Live Auction Cockpit and multiple insecure deserialization flaws (CVSS 9.1) across NetWeaver components.
23 views
Daily Writeups
⤷ Title: This Profile Page Gave Me More Power Than It Should Have
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Sun, 13 Jul 2025 05:54:18 GMT
════════════════════════
⌗ Tags: #bug_bounty #account_takeover #delete_account #authorization_bypass #idor
Medium
This Profile Page Gave Me More Power Than It Should Have
Sometimes, you’re not looking for destruction.
 Sometimes, destruction is waiting for you to look.
14 views
Daily Writeups
⤷ Title: Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 01:40:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@PreAuthorize #Authorization Bypass #CVE_2025_41248 #CVE_2025_41249 #method security #Spring Framework #Spring Security #Vulnerability
Daily CyberSecurity
Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
Two medium-severity flaws in Spring Security and the Spring Framework allow authorization bypasses in applications that use method-level security on generic types.
19 views
Daily Writeups
⤷ Title: The Most Common API Threat: Broken Object Level Authorization (BOLA)
════════════════════════
𐀪 Author: InstaTunnel
════════════════════════
ⴵ Time: Wed, 17 Sep 2025 08:55:33 GMT
════════════════════════
⌗ Tags: #api_vulnerabilities #api_security_testing #authorization_bypass #api_security #bola
Medium
The Most Common API Threat: Broken Object Level Authorization (BOLA)
IT
46 views
Daily Writeups
⤷ Title: Symfony Patches PATH_INFO Parsing Flaw Leading to Authorization Bypass (CVE-2025-64500)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 15 Nov 2025 00:10:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2025_64500 #Patch Now #PHP Framework #Symfony #Web Security
Daily CyberSecurity
Symfony Patches PATH_INFO Parsing Flaw Leading to Authorization Bypass (CVE-2025-64500)
Symfony patched a High-severity flaw (CVE-2025-64500) in its Request component. Improper PATH_INFO parsing allows attackers to bypass access control rules in vulnerable applications.
23 views
Daily Writeups
⤷ Title: How I Accessed Paid Video Content Without Authorization
════════════════════════
𐀪 Author: Zaza_0x
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 09:07:50 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #jwt #api_security #authorization_bypass #broken_access_control
Medium
How I Accessed Paid Video Content Without Authorization
While testing a popular educational platform, I noticed that free preview clips and paid lessons were served through the same API domain…
39 views
Daily Writeups
⤷ Title: Core Banking System Flaw: Apache Fineract IDOR Risks Authorization Bypass & Customer Data Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 03:28:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fineract #Authorization Bypass #Core Banking #CVE_2025_58137 #Financial services #IDOR #Weak Password Policy
Daily CyberSecurity
Core Banking System Flaw: Apache Fineract IDOR Risks Authorization Bypass & Customer Data Access
A flaw in Apache Fineract risks Authorization Bypass via IDOR (CVE-2025-58137) in its self-service API, potentially exposing customer data. Also fixed: Weak Password Policy and Unmasked Server Keys. Update to v1.13.0.
21 views
Daily Writeups
⤷ Title: Apache NiFi Flaw (CVE-2026-25903) Lets Users Bypass Restrictions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 03:34:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache NiFi #Apache Software Foundation #Authorization Bypass #big data #CVE_2026_25903 #Data Pipeline Security #DevOps #NiFi 2.8.0 #Restricted Components
Daily CyberSecurity
Apache NiFi Flaw (CVE-2026-25903) Lets Users Bypass Restrictions
Apache NiFi flaw CVE-2026-25903 allows unauthorized users to modify restricted components. Update to version 2.8.0 immediately to secure data pipelines.
29 views