Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.52K subscribers

2 photos

129K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.52K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Mon, 24 Apr 2023 15:25:48 GMT
———————————————
✏️Title: Exploiting Spring Cloud Function Sqel injection — With Metasploit
———————————————
📎Link: https://medium.com/p/324150fe4f9c
———————————————
Tags: #spring_cloud #cve_2022_22947 #spring_security #spel #hacking

Exploiting Spring Cloud Function Sqel injection — With Metasploit

Spring Cloud Function is a popular open-source framework that allows developers to create serverless applications in a variety of…

6 views16:00

⤷ Title: PoC Released for CVE-2025-41243 – A Spring Cloud Gateway Flaw with CVSS 10.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Sep 2025 01:39:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_41243 #CVSS 10.0 #cybersecurity #rce #Remote Code Execution #SpEL injection #Spring Cloud Gateway

Daily CyberSecurity

PoC Released for CVE-2025-41243 - A Spring Cloud Gateway Flaw with CVSS 10.0

A critical flaw (CVE-2025-41243) in Spring Cloud Gateway with a CVSS 10.0 score allows unauthenticated RCE via SpEL injection. A PoC has been released.

12 views02:04

⤷ Title: Spring Patches Two Flaws: SpEL Injection (CVE-2025-41253) Leaks Secrets, STOMP CSRF Bypasses WebSocket Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Oct 2025 01:51:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CSRF #CVE_2025_41253 #security advisory #SpEL injection #Spring Cloud Gateway #Spring Framework #WebSocket

Daily CyberSecurity

Spring Patches Two Flaws: SpEL Injection (CVE-2025-41253) Leaks Secrets, STOMP CSRF Bypasses WebSocket Security

Spring fixed two flaws: CVE-2025-41253 allows SpEL injection in Cloud Gateway to expose secrets, and CVE-2025-41254 allows STOMP CSRF to send unauthorized WebSocket messages. Update immediately.

17 views02:03

⤷ Title: The Dual CVSS 10.0 RCE Flaws Threatening Spinnaker Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 14:02:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Security #Clouddriver #CVE_2026_32604 #CVE_2026_32613 #CVSS 10.0 #DevSecOps #Echo #rce #SpEL injection #Spinnaker #Supply Chain Security

Daily CyberSecurity

The Dual CVSS 10.0 RCE Flaws Threatening Spinnaker Pipelines

Two critical CVSS 10.0 RCE flaws in Spinnaker's Clouddriver and Echo services allow full JVM and shell access. Patch your multi-cloud pipelines immediately.

7 views15:04

⤷ Title: Spring Data Vulnerabilities: Patch Five Critical Flaws Now
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 00:52:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41716 #CVE_2026_41717 #CVE_2026_41729 #cybersecurity #SpEL injection #Spring Data

Daily CyberSecurity

Spring Data Vulnerabilities: Patch Five Critical Flaws Now

Five new Spring Data vulnerabilities threaten applications with SpEL expression injection and DoS attacks. Upgrade your Spring frameworks immediately!

23 views02:04