Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: High-Privilege Havoc: Splunk Patches RCE Flaw Lurking in File Previews
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:55:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_20163 #cybersecurity #infosec #Patch Alert #RCE vulnerability #Remote Command Execution #REST API #Splunk #Splunk Enterprise #threat intelligence
Daily CyberSecurity
High-Privilege Havoc: Splunk Patches RCE Flaw Lurking in File Previews
Splunk warns of a high-severity RCE flaw (CVE-2026-20163) in its REST API. Attackers with edit_cmd rights can execute arbitrary commands. Patch immediately.
28 views
Daily Writeups
⤷ Title: Apache Livy Patches Path Traversal and File Access Flaws Exposing Spark Clusters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:43:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Livy #Apache Spark #CVE_2025_60012 #CVE_2025_66249 #cybersecurity #infosec #Patch Alert #Path Traversal #REST API Security #vulnerability management
Daily CyberSecurity
Apache Livy Patches Path Traversal and File Access Flaws Exposing Spark Clusters
Protect your Spark clusters: Apache Livy 0.9.0 patches two important file access and path traversal vulnerabilities (CVE-2025-60012 & CVE-2025-66249).
16 views
Daily Writeups
⤷ Title: CVE Watchtower Launches Enterprise Automation Suite Featuring 30-Day Intelligence Dashboards, Predictive EPSS Scoring, REST API, and ITSM Webhooks
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 13:00:37 +0000
════════════════════════
⌗ Tags: #Announcement #Cyber Threat Analytics #cybersecurity #EPSS Scoring #ITSM Automation #REST API #threat intelligence #vulnerability management #Vulnerability Prioritization
Daily CyberSecurity
CVE Watchtower Launches Enterprise Automation Suite Featuring 30-Day Intelligence Dashboards, Predictive EPSS Scoring, REST API…
Discover CVE Watchtower's new enterprise suite featuring 30-day threat analytics, predictive EPSS scoring, Jira/ServiceNow webhooks, and a private REST API.
12 views
Daily Writeups
⤷ Title: Password Hash Leak (owasp juice-shop)
════════════════════════
𐀪 Author: Rajeev Gaddam
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 11:00:36 GMT
════════════════════════
⌗ Tags: #rest_api #sensitive_data #password_leaks #hacking #owasp_juice_shop
Medium
Password Hash Leak (owasp juice-shop)
Introduction
16 views
Daily Writeups
⤷ Title: Unauthorized Account Deletion via HTTP Method Manipulation.A Business Logic Flaw in REST API Design
════════════════════════
𐀪 Author: Moataz
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 15:03:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #rest_api #penetration_testing #bug_bounty_tips
Medium
Unauthorized Account Deletion via HTTP Method Manipulation.A Business Logic Flaw in REST API Design
Introduction
62 views
Daily Writeups
⤷ Title: API Nedir ve Nasıl Çalışır?
════════════════════════
𐀪 Author: Elify
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 19:30:11 GMT
════════════════════════
⌗ Tags: #api_development #api_security #rest_api #api #api_gateway
Medium
API Nedir ve Nasıl Çalışır?
API (Application Programming Interfaces), dijital dünyada uygulamalar ve cihazlar arasında kesintisiz iletişimi sağlayan dijital köprü…
34 views
Daily Writeups
⤷ Title: New “PowMix” Botnet Preys on Czech Workforce with Lure of Compliance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:11:43 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #botnet #Cisco Talos #cyber_espionage #Czech Republic #EDEKA Phishing #Heroku Abuse #infosec #Malware Analysis #PowerShell Malware #PowMix #REST API Mimicry
Daily CyberSecurity
New "PowMix" Botnet Preys on Czech Workforce with Lure of Compliance
Cisco Talos uncovers PowMix, a stealthy botnet targeting Czech HR via AMSI bypass and Heroku-hosted C2. Learn how this malware evades modern EDR systems.
24 views
Daily Writeups
⤷ Title: Breaking API Security: Attack Surface, Trust Boundaries, and Exploitation Paths
════════════════════════
𐀪 Author: Divine
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 18:09:07 GMT
════════════════════════
⌗ Tags: #api #web_security #bug_bounty #rest_api
Medium
Breaking API Security: Attack Surface, Trust Boundaries, and Exploitation Paths
API security When it comes to API Security and the attack surface our focus shifts from endpoints /login, /profile and the likes to objects, actions and trust assumptions within the API call An API …
14 views
Daily Writeups
⤷ Title: Filtros em APIs REST não são só query params
════════════════════════
𐀪 Author: Erik Barroso
════════════════════════
ⴵ Time: Thu, 07 May 2026 22:11:41 GMT
════════════════════════
⌗ Tags: #filtros #sql_injection #sql #api #rest_api
Medium
Você provavelmente está implementando filtros errado na sua API REST
Filtros parecem apenas query params, mas envolvem validação, segurança, autorização, performance, paginação, cache e consistência de…
20 views
Daily Writeups
⤷ Title: Você provavelmente está implementando filtros errado na sua API REST
════════════════════════
𐀪 Author: Erik Barroso
════════════════════════
ⴵ Time: Thu, 07 May 2026 22:11:41 GMT
════════════════════════
⌗ Tags: #filtros #sql_injection #sql #api #rest_api
Medium
Você provavelmente está implementando filtros errado na sua API REST
Filtros parecem apenas query params, mas envolvem validação, segurança, autorização, performance, paginação, cache e consistência de…
42 views