Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Authentication & Authorization with Spring Security
════════════════════════
𐀪 Author: Lakitha Prabudh
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 05:56:18 GMT
════════════════════════
⌗ Tags: #spring_security #web_security #jwt #application_security #concept
Medium
Authentication & Authorization with Spring Security
Importance of Authentication and Authorization in Web Applications
21 views
Daily Writeups
⤷ Title: Build Your Own OAuth 2.0 Server with Spring Boot 3.x
════════════════════════
𐀪 Author: Prasath Basuvaraj
════════════════════════
ⴵ Time: Wed, 05 Feb 2025 01:08:00 GMT
════════════════════════
⌗ Tags: #spring_security #authorization #spring_boot #api_security
Medium
Build Your Own OAuth 2.0 Server with Spring Boot 3.x
We’ve all heard of OAuth 2.0, right? In fact, we’re probably old pros when it comes to writing services that act as an OAuth 2.0 client —…
39 views
Daily Writeups
⤷ Title: Spring Security: Part-2 — Authorization
════════════════════════
𐀪 Author: Vinod Madubashana
════════════════════════
ⴵ Time: Fri, 07 Mar 2025 01:29:50 GMT
════════════════════════
⌗ Tags: #authorization #application_security #spring_boot #java #spring_security
Medium
Spring Security: Part-2 — Authorization
Fine-grained access control
25 views
Daily Writeups
⤷ Title: Spring Security Updates Address Authorization Bypass and Password Length Vulnerabilities
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Fri, 21 Mar 2025 01:56:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_22223 #CVE_2025_22228 #Spring Security
Daily CyberSecurity
Spring Security Updates Address Authorization Bypass and Password Length Vulnerabilities
Learn about the implications of CVE-2025-22223 & CVE-2025-22228 for Spring Security and how it affects method-level security enforcement.
12 views
Daily Writeups
⤷ Title: When 72 Characters Is All It Takes: Unpacking Spring Security’s Latest SNAFU
════════════════════════
𐀪 Author: Hayden Baillio
════════════════════════
ⴵ Time: Mon, 24 Mar 2025 11:11:58 GMT
════════════════════════
⌗ Tags: #spring_security #cve #cve_2025_22228 #hero_devs #cybersecurity
Medium
When 72 Characters Is All It Takes: Unpacking Spring Security’s Latest SNAFU
The Choose Your Own Adventure for CVE-2025–22228
23 views
Daily Writeups
⤷ Title: OAuth2 is Dying — And That’s a Good Thing: Why Spring Security Devs Must Ditch Passwords and…
════════════════════════
𐀪 Author: Himanshu
════════════════════════
ⴵ Time: Sun, 06 Apr 2025 17:47:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #java #spring_boot #spring_security #oauth2
Medium
OAuth2 is Dying — And That’s a Good Thing: Why Spring Security Devs Must Ditch Passwords and Embrace Passkeys🔐
In the ever-evolving world of authentication and security, OAuth2 has long been the industry standard for enabling secure access…
39 views
Daily Writeups
⤷ Title: Most Backend Devs Skip These 5 Security Basics — Don’t Be One of Them!
════════════════════════
𐀪 Author: The Code Alchemist
════════════════════════
ⴵ Time: Thu, 15 May 2025 16:53:38 GMT
════════════════════════
⌗ Tags: #spring_security #java #rate_limiting #web_development #application_security
Medium
Most Backend Devs Skip These 5 Security Basics — Don’t Be One of Them!
Building a backend is more than just writing efficient code — it’s about keeping your app and users safe from threats. Yet, many backend…
12 views
Daily Writeups
⤷ Title: Spring Framework Flaw Allows Unauthorized Access via Security Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 01:39:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_41232 #java #security #Spring Framework #Spring Security
Daily CyberSecurity
Spring Framework Flaw Allows Unauthorized Access via Security Bypass
A Spring Framework vulnerability can allow unauthorized access! Learn how it bypasses security annotations and how to fix it.
15 views
Daily Writeups
⤷ Title: Spring Boot Secrets Management Is Broken Without This — Vault vs AWS Secrets Manager
════════════════════════
𐀪 Author: Kanha
════════════════════════
ⴵ Time: Tue, 27 May 2025 18:25:22 GMT
════════════════════════
⌗ Tags: #hashicorp_vault #devops #application_security #spring_security #aws_secrets_manager
Medium
Spring Boot Secrets Management Is Broken Without This Vault vs AWS Secrets Manager
Discover the hidden risks of managing secrets in Spring Boot and why choosing the right tool — HashiCorp Vault or AWS Secrets Manager —…
25 views
Daily Writeups
⤷ Title: ️ Web Security 101: Understanding and Defending Against CSRF Attacks
════════════════════════
𐀪 Author: Manoj Prabhakar
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 20:22:24 GMT
════════════════════════
⌗ Tags: #csrf #devsecops #spring_security #web_security #cybersecurity
Medium
🛡️ Web Security 101: Understanding and Defending Against CSRF Attacks
Imagine clicking a seemingly innocent link… and unknowingly transferring money from your bank account! All it takes is a single click on a…
15 views
Daily Writeups
⤷ Title: Role-Based Authorization Using JWT and Spring Security
════════════════════════
𐀪 Author: Gokul D
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 10:10:57 GMT
════════════════════════
⌗ Tags: #jwt_token #spring_security #java #jwt_authentication #application_security
Medium
Role-Based Authorization Using JWT and Spring Security
🛡️ Building Secure APIs with Spring Boot
33 views
Daily Writeups
⤷ Title: Kotlin, Spring Boot : HandlerInterceptor vs Filter
════════════════════════
𐀪 Author: Romman Sabbir
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 15:10:58 GMT
════════════════════════
⌗ Tags: #spring_boot #spring_security #kotlin #security #application_security
Medium
Kotlin, Spring Boot : HandlerInterceptor vs Filter
HandlerInterceptor vs Filter in Spring Boot: A Practical Guide with JNDI Injection Prevention
21 views
Daily Writeups
⤷ Title: Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 01:40:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@PreAuthorize #Authorization Bypass #CVE_2025_41248 #CVE_2025_41249 #method security #Spring Framework #Spring Security #Vulnerability
Daily CyberSecurity
Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
Two medium-severity flaws in Spring Security and the Spring Framework allow authorization bypasses in applications that use method-level security on generic types.
19 views
Daily Writeups
⤷ Title: XSS (Cross-Site Scripting)
════════════════════════
𐀪 Author: Yasif khan
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 05:48:58 GMT
════════════════════════
⌗ Tags: #xss_attack #xss_bypass #hacker #spring_security #xss_vulnerability
Medium
XSS (Cross-Site Scripting)
XSS (Cross-Site Scripting) in Spring Security
37 views
Daily Writeups
⤷ Title: API Security vs Web Security: Same Goal, Very Different Problems
════════════════════════
𐀪 Author: Ayoub Taouam
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 15:22:55 GMT
════════════════════════
⌗ Tags: #backend #computer_science #api_security #web_security #spring_security
Medium
API Security vs Web Security: Same Goal, Very Different Problems
Web and API security protect the same systems, but they serve different clients, scale differently, and fail in very different ways.
61 views
Daily Writeups
⤷ Title: The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:13:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #CVE_2026_22732 #CVSS 9.1 #cybersecurity #data leak #HTTP Headers #infosec #Java security #Spring Security #Vulnerability
Daily CyberSecurity
The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
A critical 9.1 CVSS flaw in Spring Security (CVE-2026-22732) fails to write HTTP headers, exposing Java apps to severe data leaks. Update immediately.
12 views
Daily Writeups
⤷ Title: Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 13:30:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40477 #CVE_2026_40478 #infosec #Java security #Patch Alert #rce #Server Side Template Injection #Spring Security #ssti #Thymeleaf #web development
Daily CyberSecurity
Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
Thymeleaf 3.1.4 fixes two critical 9.1 CVSS vulnerabilities. Unauthenticated attackers can bypass security for SSTI. Audit your user input and patch today!
13 views
Daily Writeups
⤷ Title: 7 Critical Vulnerabilities Threaten Spring Security 7.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:54:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_22752 #infosec #Java security #JWT Security #Patch Alert #Spring Security #Spring Security 7.0 #ssrf #TOCTOU #X.509 Impersonation
Daily CyberSecurity
7 Critical Vulnerabilities Threaten Spring Security 7.0
The Spring Security team has issued a series of security advisories detailing seven distinct vulnerabilities impacting the widely used authentication and authorization framework. While several fla…
15 views
Daily Writeups
⤷ Title: Multiple Security Flaws Fixed in Major Framework Release
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:30:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_40998 #CVE_2026_40999 #CVE_2026_41003 #patch management #Spring Security #Spring Web Services
Daily CyberSecurity
Multiple Security Flaws Fixed in Major Framework Release
New updates patch critical Spring security vulnerabilities, mitigating cross-site scripting and server-side request forgery risks across multiple versions.
23 views
Daily Writeups
⤷ Title: Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
════════════════════════
𐀪 Author: HobbiesPark
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:37:36 GMT
════════════════════════
⌗ Tags: #spring_security #java #spring_boot #microservices #ssrf
Medium
Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
I upgraded a service to Spring Boot 4.1, switched on its new SSRF filter, and braced for the usual fallout — a global block rule shredding…
40 views