Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 04 May 2023 10:45:07 GMT
———————————————
✏️Title: phpMyFAQ-3.1.12 CSV Injection
———————————————
📎Link: https://medium.com/p/cfc65573ef8f
———————————————
Tags: #csv #hacking #cybersecurity #bug_bounty #vulnerability

Medium

phpMyFAQ-3.1.12 CSV Injection

This is a csv injection vulnerability found in phpMyFAQ-3.1.12.This vulnerability was discovered by me on April 21, 2023. phpMyFAQ is a mobile-friendly, feature-rich, scalable open source FAQ web app…

8 views12:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Fri, 30 Jun 2023 07:34:58 GMT
———————————————
✏️Title: CSV Injection
———————————————
📎Link: https://medium.com/p/d1507ff859cf
———————————————
Tags: #web_pen_testing #bug_bounty #owasp #injection #csv_injection

Medium

CSV Injection

What is CSV Injection?

11 views09:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 06 Jul 2023 12:11:39 GMT
———————————————
✏️Title: Mapping GxP controls with cybersecurity frameworks and standards
———————————————
📎Link: https://medium.com/p/1da55da12911
———————————————
Tags: #cybersecurity #gxp_compliance #quality #csv #pharmaceuticals_industry

Medium

Mapping GxP controls with cybersecurity frameworks and standards

In the era of diverse cybersecurity control sets, standards and frameworks, there is a lot of add up to the overwhelming quotient to consider each control and address separately. This definitely…

2 views13:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 20 Sep 2023 18:36:59 GMT
———————————————
✏️Title: How a Simple Spreadsheet Can Hack Your Computer | CSV Injection
———————————————
📎Link: https://medium.com/p/98f4a26c4957
———————————————
Tags: #infosec #excel #csv_injection #bug_bounty #bugs

Medium

How a Simple Spreadsheet Can Hack Your Computer | CSV Injection

Hey there I’m all about hunting bugs and keeping the digital realm safe. This write-up is dedicated to how I discovered a CSV injection…

15 views20:02

Daily Writeups

⤷ Title: Microsoft Authenticator’s Password Manager is Phasing Out: What You Need to Do!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 08:04:10 +0000
════════════════════════
⌗ Tags: #Technology #Authenticator #Autofill #CSV #deprecation #Edge #Microsoft #migration #password manager #security #Tech News

Daily CyberSecurity

Microsoft Authenticator's Password Manager is Phasing Out: What You Need to Do!

Microsoft Authenticator's password manager is being deprecated. Save new passwords until June 2025; migrate to Edge or export your data now!

15 views10:04

Daily Writeups

⤷ Title: Windows Server 2019 Update (KB5062557) Breaks Clusters, Causes VM Restarts & BitLocker Issues
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 24 Jul 2025 01:27:55 +0000
════════════════════════
⌗ Tags: #Windows #BitLocker #bug #Cluster Service #CSV #IT Alert #KB5062557 #Microsoft Update #Virtual Machines #Windows Server 2019

Penetration Testing Tools

Windows Server 2019 Update (KB5062557) Breaks Clusters, Causes VM Restarts & BitLocker Issues

Microsoft's July update for Windows Server 2019 (KB5062557) causes critical Cluster Service failures, VM restarts, and issues with BitLocker-enabled CSVs. Contact support for a fix.

14 views03:03

Daily Writeups

⤷ Title: Bug Bounty Journal — Day 1: CSV Injection, No Impact?
════════════════════════
𐀪 Author: Xilent-Xoxo
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 16:18:04 GMT
════════════════════════
⌗ Tags: #csv_injection #cybersecurity #vulnerability_exposure #rejection #bugbounty_writeup

Medium

Bug Bounty Journal — Day 1: CSV Injection, No Impact?

Hours of digging led to a solid CSV Injection bug. The response? Not quite what I hoped.

16 views20:14

Daily Writeups

⤷ Title: Multi Flaws Found in HikCentral, Including a Bypass for Admin Access (CVE-2025-39247)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 Aug 2025 09:35:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #CSV injection #CVSS #cybersecurity #HikCentral #Hikvision #privilege escalation #Vulnerability

Daily CyberSecurity

Multi Flaws Found in HikCentral, Including a Bypass for Admin Access (CVE-2025-39247)

Hikvision has issued an advisory for three flaws in its HikCentral products. The most severe, with a CVSS of 8.6, allows an unauthenticated user to get admin access.

👍1

12 views18:07

Daily Writeups

⤷ Title: From CSV Injection to Client-Side SSRF: A Real Bug Bounty Story
════════════════════════
𐀪 Author: Huseyin
════════════════════════
ⴵ Time: Thu, 28 Aug 2025 13:56:17 GMT
════════════════════════
⌗ Tags: #security_research #csv_injection #web_security #ssrf #ethical_hacking

Medium

🚨 From CSV Injection to Client-Side SSRF: A Real Bug Bounty Story

Introduction

10 views18:14

Daily Writeups

⤷ Title: CVE‑2025‑11279 — RCE via CSV Injection (Part 1: CSV Injection)
════════════════════════
𐀪 Author: Nakul Singh
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 13:51:30 GMT
════════════════════════
⌗ Tags: #cve_2025_11279 #csv_injection #remote_code_execution #infosec #cve

Medium

CVE‑2025‑11279 — RCE via CSV Injection (Part 1: CSV Injection)

TL;DR — I discovered CVE‑2025‑11279. This post explains what CSV injection is, why it matters, where to look for it in an application…

31 views14:04

Daily Writeups

⤷ Title: CVE‑2025‑12249 — RCE via CSV Injection (Part 2: RCE Escalation)
════════════════════════
𐀪 Author: Nakul Singh
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 17:37:23 GMT
════════════════════════
⌗ Tags: #remote_code_execution #infosec #cve_2025_12249 #csv_injection #cve

Medium

CVE‑2025‑12249 — RCE via CSV Injection (Part 2: RCE Escalation)

TL;DR — In Part 2, I dive into how seemingly harmless CSV injection bugs can escalate into serious security issues — including local code…

28 views18:04

Daily Writeups

⤷ Title: Automating HackerOne Scope Parsing with qsv for Bug Bounty Recon
════════════════════════
𐀪 Author: Sam Hilliard
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 03:27:29 GMT
════════════════════════
⌗ Tags: #scripting #bug_bounty #recon #csv

Medium

Automating HackerOne Scope Parsing with qsv for Bug Bounty Recon

Before you start bug hunting on a new program, you need to feed the right assets to the right tools for automated recon. Sorting through…

21 views04:03

Daily Writeups

⤷ Title: Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:32:37 +0000
════════════════════════
⌗ Tags: #Technology #Browser Updates 2026 #Copilot #CSV Export #Data Loss #Edge Collections #microsoft edge #Microsoft Edge Dev #Sunsetting #Tech News #Web Research

Daily CyberSecurity

Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears

Users enrolled in the Microsoft Edge Dev Channel may have recently encountered a disconcerting notification: Microsoft intends to sunset the Collections feature, after which users will be preclude…

14 views04:03

Daily Writeups

⤷ Title: Critical 9.8 Flaw in Langflow’s AI CSV Agent Opens a Direct Path to Root Shell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 00:55:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CSV Agent #CVE_2026_27966 #infosec #LangChain #Langflow #Patch Alert #Prompt injection #python_repl_ast #rce #Remote Code Execution #Vulnerability

Daily CyberSecurity

Critical 9.8 Flaw in Langflow’s AI CSV Agent Opens a Direct Path to Root Shell

Langflow 1.8.0 patches a critical 9.8 CVSS RCE vulnerability (CVE-2026-27966) where a hardcoded "allow_dangerous_code" setting enables prompt injection attacks.

24 views01:03

Daily Writeups

⤷ Title: Critical 9.8 Alert: Hard-Coded Credentials in Dell ECS and ObjectScale Leave Filesystems Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 09:00:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CSV injection #CVE_2026_40636 #Data Security #Dell ECS #Dell Security Advisory #Enterprise Storage #Hard_coded Credentials #infosec #ObjectScale #Patch Alert #Privilege Elevation

Daily CyberSecurity

Critical 9.8 Alert: Hard-Coded Credentials in Dell ECS and ObjectScale Leave Filesystems Exposed

Urgent: Dell patches a 9.8 severity credential flaw (CVE-2026-40636) in ECS and ObjectScale. Secure your enterprise storage by upgrading to version 4.3.0.0.

18 views09:04

About

Blog

Apps

Platform