Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.52K subscribers

2 photos

129K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.52K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Mon, 24 Apr 2023 15:25:48 GMT
———————————————
✏️Title: Exploiting Spring Cloud Function Sqel injection — With Metasploit
———————————————
📎Link: https://medium.com/p/324150fe4f9c
———————————————
Tags: #spring_cloud #cve_2022_22947 #spring_security #spel #hacking

Exploiting Spring Cloud Function Sqel injection — With Metasploit

Spring Cloud Function is a popular open-source framework that allows developers to create serverless applications in a variety of…

6 views16:00

⤷ Title: Spring Cloud Gateway Vulnerability Exposes Applications to Header Injection Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 01:41:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #header spoofing #Spring Cloud Gateway #Spring Framework #trust boundary

Daily CyberSecurity

Spring Cloud Gateway Vulnerability Exposes Applications to Header Injection Risks

A critical Spring Cloud Gateway flaw allows header spoofing from untrusted proxies. Update to fix or disable forwarding.

14 views02:04

⤷ Title: PoC Released for CVE-2025-41243 – A Spring Cloud Gateway Flaw with CVSS 10.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Sep 2025 01:39:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_41243 #CVSS 10.0 #cybersecurity #rce #Remote Code Execution #SpEL injection #Spring Cloud Gateway

Daily CyberSecurity

PoC Released for CVE-2025-41243 - A Spring Cloud Gateway Flaw with CVSS 10.0

A critical flaw (CVE-2025-41243) in Spring Cloud Gateway with a CVSS 10.0 score allows unauthenticated RCE via SpEL injection. A PoC has been released.

12 views02:04

⤷ Title: Spring Patches Two Flaws: SpEL Injection (CVE-2025-41253) Leaks Secrets, STOMP CSRF Bypasses WebSocket Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Oct 2025 01:51:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CSRF #CVE_2025_41253 #security advisory #SpEL injection #Spring Cloud Gateway #Spring Framework #WebSocket

Daily CyberSecurity

Spring Patches Two Flaws: SpEL Injection (CVE-2025-41253) Leaks Secrets, STOMP CSRF Bypasses WebSocket Security

Spring fixed two flaws: CVE-2025-41253 allows SpEL injection in Cloud Gateway to expose secrets, and CVE-2025-41254 allows STOMP CSRF to send unauthorized WebSocket messages. Update immediately.

17 views02:03

⤷ Title: Critical Spring Cloud Config Flaws Expose Arbitrary Files and GCP Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 02:10:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40981 #CVE_2026_40982 #cybersecurity #Directory Traversal #GCP Security #Google Secrets Manager #infosec #Patch Alert #Spring Boot #Spring Cloud Config

Daily CyberSecurity

Critical Spring Cloud Config Flaws Expose Arbitrary Files and GCP Secrets

Spring Cloud Config fixes a 9.1 CVSS directory traversal (CVE-2026-40982) and a GCP secret leak. Secure your distributed system—upgrade to the latest patches!

14 views03:03