Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: Breaking BigBlueButton’s API With One Query Parameter — Inside CVE-2026–46353
════════════════════════
𐀪 Author: TAHON
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 23:30:11 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_exploitation
Medium
Breaking BigBlueButton’s API With One Query Parameter — Inside CVE-2026–46353
A single undocumented parameter turned every call to a video-conferencing platform’s API into an unauthenticated one.
19 views
Daily Writeups
⤷ Title: When One Integer Crosses the Authorization Boundary
════════════════════════
𐀪 Author: Insid_e
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 00:29:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #authorization #idor #web_security #api_security
Medium
When One Integer Crosses the Authorization Boundary
A cross-account authorization flaw hidden inside a preference endpoint
31 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:41:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #application_security #penetration_testing
Medium
🔪🧬🔓💥 HTTP Request Smuggling: How One Ambiguous Byte Desyncs the Entire Web
The bug class scanners love to “detect” and almost never prove — and why 2025 quietly made it deadlier than it has ever been.
11 views
Daily Writeups
⤷ Title: Blind SSRF Isn’t Blind If You Build the Channel Back
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 02:31:01 GMT
════════════════════════
⌗ Tags: #ssrf #bug_bounty #cloud_security #ethical_hacking #web_security
Medium
Blind SSRF Isn’t Blind If You Build the Channel Back
It’s not the request you fire. It’s whether the response comes home.
14 views
Daily Writeups
⤷ Title: From P4 to P1 — Day 1: Understanding Low-Severity Vulnerabilities in Bug Bounty Hunting
════════════════════════
𐀪 Author: cyb3rD1vvy@
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 06:27:14 GMT
════════════════════════
⌗ Tags: #application_security #ethical_hacking #cybersecurity #bug_bounty_writeup #web_security
Medium
From P4 to P1 — Day 1: Understanding Low-Severity Vulnerabilities in Bug Bounty Hunting
Series: From P4 to P1: The Bug Hunter’s Journey Day: 01/30 Topic: P4 Findings, Manual Validation, and Report Quality
19 views
Daily Writeups
⤷ Title: PHP’s New Unpatched RCE Risk: What CVE-2026–115560 Means for Developers
════════════════════════
𐀪 Author: Tharindu Sumanarathna
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 05:49:09 GMT
════════════════════════
⌗ Tags: #infosec #php #web_security #rce_vulnerability #rce
Medium
PHP’s New Unpatched RCE Risk: What CVE-2026–115560 Means for Developers
Just two days after PHP shipped emergency fixes for the critical PHP2Shell vulnerabilities, the PHP project disclosed another potential…
13 views
Daily Writeups
⤷ Title: PortSwigger Lab: SQL Injection UNION Attack, Determining the Number of Columns Returned by the Query
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 08:00:24 GMT
════════════════════════
⌗ Tags: #web_security #portswigger #cybersecurity #sql_injection #infosec
Medium
PortSwigger Lab: SQL Injection UNION Attack, Determining the Number of Columns Returned by the Query
PortSwigger Lab: SQL Injection UNION Attack, Determining the Number of Columns Returned by the Query Difficulty: Practitioner Target: PortSwigger Web Security Academy Objective The objective of this …
19 views
Daily Writeups
⤷ Title: PortSwigger Lab: SQL Injection Attack, Listing the Database Contents on Oracle
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 07:17:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #sql_injection #infosec #portswigger
Medium
PortSwigger Lab: SQL Injection Attack, Listing the Database Contents on Oracle
Difficulty: Practitioner
23 views
Daily Writeups
⤷ Title: Password Reset Broken Logic
════════════════════════
𐀪 Author: Kaustubh Asthana
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 07:11:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #burpsuite #web_penetration_testing #penetration_testing #portswigger
Medium
Password Reset Broken Logic
Why emptying a parameter’s value broke the check, and removing the parameter entirely didn’t
17 views
Daily Writeups
⤷ Title: How to Set Up a Safe Cybersecurity Lab for Beginners
════════════════════════
𐀪 Author: Qnayds
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 08:32:07 GMT
════════════════════════
⌗ Tags: #cybersecurity_education #web_security #cybersecurity #network_security #ethical_hacking
Medium
How to Set Up a Safe Cybersecurity Lab for Beginners
Learning cybersecurity becomes much easier when you can experiment with systems instead of only reading about them. You might understand…
28 views