Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: How to Properly Use CFQueryParam to Prevent SQL Injection in ColdFusion?
════════════════════════
𐀪 Author: Deepak Purohit
════════════════════════
ⴵ Time: Wed, 02 Apr 2025 09:16:02 GMT
════════════════════════
⌗ Tags: #coldfusion_development #sql_injection #hire_coldfusion_developer #coldfusion_developer #coldfusion_service
Medium
How to Properly Use CFQueryParam to Prevent SQL Injection in ColdFusion?
Introduction
43 views
Daily Writeups
⤷ Title: ’ .
════════════════════════
𐀪 Author: Ananda Krishna (0xG4057)
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 11:36:15 GMT
════════════════════════
⌗ Tags: #coldfusion #responsible_disclosure #nasa #bug_bounty #bug_bounty_writeup
Medium
𝐇𝐨𝐰 𝐈 𝐋𝐚𝐧𝐝𝐞𝐝 𝐢𝐧 𝐍𝐀𝐒𝐀’𝐬 𝐇𝐚𝐥𝐥 𝐨𝐟 𝐅𝐚𝐦𝐞 𝐰𝐢𝐭𝐡 𝐚 𝐒𝐢𝐧𝐠𝐥𝐞 𝐗𝐒𝐒.
A Red Teamer’s Journey from Cosmic Curiosity to Bug‑Bounty Bragging Rights
15 views
Daily Writeups
⤷ Title: Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:01:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Server #CFML #ColdFusion Markup Language #CVE_2025_34074 #cybersecurity #Lucee #metasploit #rce #Remote Code Execution #scheduled tasks #Vulnerability
Daily CyberSecurity
Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out
A critical flaw (CVE-2025-34074, CVSS 9.4) in Lucee allows authenticated admins to achieve RCE by abusing scheduled tasks. A Metasploit module is out; urgent patching needed!
23 views
Daily Writeups
⤷ Title: Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:28:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Brian Reilly #CAR Deployment #CFAdmin #ColdFusion Archive #CVE_2025_61808 #rce #Remote Code Execution #Server Security #SMB Share #UNC path #Web Shell
Daily CyberSecurity
Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
Adobe has issued critical updates for its ColdFusion platform after security researcher Brian Reilly uncovered a clever logic flaw that allows authenticated administrators to turn a standard maint…
14 views
Daily Writeups
⤷ Title: ColdFusion Vulnerable to RCE After Patch Applied: Deep Technical Analysis, Root Causes, and…
════════════════════════
𐀪 Author: Deepak Purohit
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 09:18:16 GMT
════════════════════════
⌗ Tags: #coldfusion_software #rce_vulnerability #coldfusion_development #adobe_coldfusion #coldfusion_service
Medium
ColdFusion Vulnerable to RCE After Patch Applied: Deep Technical Analysis, Root Causes, and Enterprise-Grade Mitigation Strategies
When ColdFusion Patches Still Leave the Door Open to RCE
69 views
Daily Writeups
⤷ Title: Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:18:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe #ColdFusion #ColdFusion 2025 #CVE_2026_27304 #CVE_2026_27306 #cybersecurity #infosec #Patch Alert #Path Traversal #rce #Remote Code Execution
Daily CyberSecurity
Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses
Adobe patches critical RCE and security bypass flaws in ColdFusion 2023 & 2025. Protect your enterprise servers from takeover—update to the latest version now.
18 views
Daily Writeups
⤷ Title: ColdFusion SQL Injection Prevention: cfqueryparam, Input Validation, and WAF Setup
════════════════════════
𐀪 Author: Deepak Purohit
════════════════════════
ⴵ Time: Mon, 18 May 2026 07:23:01 GMT
════════════════════════
⌗ Tags: #coldfusion_development #coldfusion #coldfusion_service #coldfusion_software #sql_injection
Medium
ColdFusion SQL Injection Prevention: cfqueryparam, Input Validation, and WAF Setup
SQL injection in ColdFusion is fully preventable using three reinforcing layers: (1) cfqueryparam on every dynamic value in every cfquery…
47 views
Daily Writeups
⤷ Title: ColdFusion XSS Vulnerability in Form Input: Causes, Fixes & Best Practices
════════════════════════
𐀪 Author: Deepak Purohit
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 05:42:45 GMT
════════════════════════
⌗ Tags: #adobe_coldfusion #software_development #xss_vulnerability #web_development #coldfusion_development
Medium
ColdFusion XSS Vulnerability in Form Input: Causes, Fixes & Best Practices
Stop Cross-Site Scripting in ColdFusion Forms: A Developer’s Defense Guide
45 views
Daily Writeups
⤷ Title: Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 17:13:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe ColdFusion #Adobe Security #APSB26_68 #Arbitrary Code Execution #ColdFusion vulnerability #CVE_2026_48276 #CVSS 10 #rce
Daily CyberSecurity
Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution
TL;DR Adobe shipped fixes for 11 Adobe ColdFusion vulnerabilities on 30 June 2026. Six earn a perfect CVSS score of 10.0 and allow arbitrary code execution. Adobe rates the update priority 1, its …
12 views
Daily Writeups
⤷ Title: Active ColdFusion Arbitrary Code Execution Flaw Scores CVSS 10
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 04:09:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #ColdFusion #CVE_2026_48282 #Path Traversal
Daily CyberSecurity
Active ColdFusion Arbitrary Code Execution Flaw Scores CVSS 10
TL;DR CVE-2026-48282, a critical CVSS 10 ColdFusion arbitrary code execution vulnerability, is under active attack. Hackers are exploiting this path traversal flaw in the wild. Administrators must…
10 views
Daily Writeups
⤷ Title: Weekly Threat Intelligence: The July 2026 Breaches
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 01:34:20 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #ColdFusion #cybersecurity #threat intelligence #vulnerability management #Zero_Day Exploits
Daily CyberSecurity
Weekly Threat Intelligence: The July 2026 Breaches
Welcome to the latest weekly threat intelligence briefing. Our cyber defense team processed 1,939 new vulnerabilities between June 29 and July 5, 2026. Hackers are moving incredibly fast this mont…
31 views