Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Fri, 30 Jun 2023 07:34:58 GMT
———————————————
✏️Title: CSV Injection
———————————————
📎Link: https://medium.com/p/d1507ff859cf
———————————————
Tags: #web_pen_testing #bug_bounty #owasp #injection #csv_injection

Medium

CSV Injection

What is CSV Injection?

11 views09:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 20 Sep 2023 18:36:59 GMT
———————————————
✏️Title: How a Simple Spreadsheet Can Hack Your Computer | CSV Injection
———————————————
📎Link: https://medium.com/p/98f4a26c4957
———————————————
Tags: #infosec #excel #csv_injection #bug_bounty #bugs

Medium

How a Simple Spreadsheet Can Hack Your Computer | CSV Injection

Hey there I’m all about hunting bugs and keeping the digital realm safe. This write-up is dedicated to how I discovered a CSV injection…

15 views20:02

Daily Writeups

⤷ Title: Bug Bounty Journal — Day 1: CSV Injection, No Impact?
════════════════════════
𐀪 Author: Xilent-Xoxo
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 16:18:04 GMT
════════════════════════
⌗ Tags: #csv_injection #cybersecurity #vulnerability_exposure #rejection #bugbounty_writeup

Medium

Bug Bounty Journal — Day 1: CSV Injection, No Impact?

Hours of digging led to a solid CSV Injection bug. The response? Not quite what I hoped.

16 views20:14

Daily Writeups

⤷ Title: Multi Flaws Found in HikCentral, Including a Bypass for Admin Access (CVE-2025-39247)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 Aug 2025 09:35:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #CSV injection #CVSS #cybersecurity #HikCentral #Hikvision #privilege escalation #Vulnerability

Daily CyberSecurity

Multi Flaws Found in HikCentral, Including a Bypass for Admin Access (CVE-2025-39247)

Hikvision has issued an advisory for three flaws in its HikCentral products. The most severe, with a CVSS of 8.6, allows an unauthenticated user to get admin access.

👍1

12 views18:07

Daily Writeups

⤷ Title: From CSV Injection to Client-Side SSRF: A Real Bug Bounty Story
════════════════════════
𐀪 Author: Huseyin
════════════════════════
ⴵ Time: Thu, 28 Aug 2025 13:56:17 GMT
════════════════════════
⌗ Tags: #security_research #csv_injection #web_security #ssrf #ethical_hacking

Medium

🚨 From CSV Injection to Client-Side SSRF: A Real Bug Bounty Story

Introduction

10 views18:14

Daily Writeups

⤷ Title: CVE‑2025‑11279 — RCE via CSV Injection (Part 1: CSV Injection)
════════════════════════
𐀪 Author: Nakul Singh
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 13:51:30 GMT
════════════════════════
⌗ Tags: #cve_2025_11279 #csv_injection #remote_code_execution #infosec #cve

Medium

CVE‑2025‑11279 — RCE via CSV Injection (Part 1: CSV Injection)

TL;DR — I discovered CVE‑2025‑11279. This post explains what CSV injection is, why it matters, where to look for it in an application…

31 views14:04

Daily Writeups

⤷ Title: CVE‑2025‑12249 — RCE via CSV Injection (Part 2: RCE Escalation)
════════════════════════
𐀪 Author: Nakul Singh
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 17:37:23 GMT
════════════════════════
⌗ Tags: #remote_code_execution #infosec #cve_2025_12249 #csv_injection #cve

Medium

CVE‑2025‑12249 — RCE via CSV Injection (Part 2: RCE Escalation)

TL;DR — In Part 2, I dive into how seemingly harmless CSV injection bugs can escalate into serious security issues — including local code…

28 views18:04

Daily Writeups

⤷ Title: Critical 9.8 Alert: Hard-Coded Credentials in Dell ECS and ObjectScale Leave Filesystems Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 09:00:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CSV injection #CVE_2026_40636 #Data Security #Dell ECS #Dell Security Advisory #Enterprise Storage #Hard_coded Credentials #infosec #ObjectScale #Patch Alert #Privilege Elevation

Daily CyberSecurity

Critical 9.8 Alert: Hard-Coded Credentials in Dell ECS and ObjectScale Leave Filesystems Exposed

Urgent: Dell patches a 9.8 severity credential flaw (CVE-2026-40636) in ECS and ObjectScale. Secure your enterprise storage by upgrading to version 4.3.0.0.

18 views09:04

About

Blog

Apps

Platform