Daily Writeups
@Daily_Writeups
4.04K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.04K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Tue, 28 Mar 2023 16:25:02 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: TCP Header Flags: An Overview
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/e5a09dbd9679
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cybersecurity #header #tcp #network
Medium
TCP Header Flags: An Overview
The Transmission Control Protocol (TCP) is a protocol used for reliable data transmission over the Internet. The TCP header is a part of…
6 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Mon, 04 Sep 2023 12:59:33 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Cabeçalhos de Segurança
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/2d75407083f5
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #dotnet #https #cybersecurity #security #header
Medium
Cabeçalhos de Segurança
Uma abordagem β€œSun Tzu” com exemplos em .NET
9 views
Daily Writeups
β€· Title: CTF with CSRF involving referrer header
════════════════════════
π€ͺ Author: Arunoday Tiwari
════════════════════════
β΄΅ Time: Tue, 06 May 2025 20:53:37 GMT
════════════════════════
βŒ— Tags: #header_injection #cybersecurity #ctf_writeup #bug_bounty_writeup #csrf
Medium
CTF with CSRF involving referrer header
Recently ,I played a CTF where I was supposed to perform CSRF attack to change email address of a user. The application used referrer…
56 views
Daily Writeups
β€· Title: Spring Cloud Gateway Vulnerability Exposes Applications to Header Injection Risks
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 30 May 2025 01:41:32 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cybersecurity #header spoofing #Spring Cloud Gateway #Spring Framework #trust boundary
Daily CyberSecurity
Spring Cloud Gateway Vulnerability Exposes Applications to Header Injection Risks
A critical Spring Cloud Gateway flaw allows header spoofing from untrusted proxies. Update to fix or disable forwarding.
14 views
Daily Writeups
β€· Title: Stealthy WordPress Malware Uncovered: Multi-Stage RAT Injects via Header.php, Hides Traces
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 30 Jun 2025 00:21:30 +0000
════════════════════════
βŒ— Tags: #Malware #Client32.exe #cybersecurity #Header.php #malware #Multi_stage Malware #rat #Remote Access Trojan #Sucuri #Web Security #Web Shell #wordpress
Daily CyberSecurity
Stealthy WordPress Malware Uncovered: Multi-Stage RAT Injects via Header.php, Hides Traces
Sucuri uncovers a complex multi-stage malware campaign infecting WordPress sites via header.php to deliver a hidden RAT (client32.exe) and evade detection.
20 views
Daily Writeups
β€· Title: Stealthy WordPress Malware Uncovered: Multi-Stage RAT Injects via Header.php, Hides Traces
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 02 Jul 2025 04:05:02 +0000
════════════════════════
βŒ— Tags: #Malware #Client32.exe #cybersecurity #Header.php #malware #Multi_stage Malware #RAT #Remote Access Trojan #Sucuri #web security #Web Shell #WordPress
Penetration Testing Tools
Stealthy WordPress Malware Uncovered: Multi-Stage RAT Injects via Header.php, Hides Traces
Sucuri uncovers a complex multi-stage malware campaign infecting WordPress sites via header.php to deliver a hidden RAT (client32.exe) and evade detection.
36 views
Daily Writeups
β€· Title: Broken Access Control part-10 : URL-based access control can be circumvented
════════════════════════
π€ͺ Author: Ahmad Sopyan
════════════════════════
β΄΅ Time: Thu, 03 Jul 2025 14:56:09 GMT
════════════════════════
βŒ— Tags: #penetration_testing #url_access_bypass #forced_browsing #broken_access_control #header_injection
Medium
Broken Access Control part-10 : URL-based access control can be circumvented
Hallo CyberExplorer . . . . . .
45 views
Daily Writeups
β€· Title: CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Sun, 12 Apr 2026 17:10:09 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #AWS IMDSv2 #Axios #Cloud Security #CVE_2026_40175 #Header injection #infosec #javascript #Node.js #Prototype Pollution #rce #request smuggling
Daily CyberSecurity
CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
A critical CVSS 10 flaw in Axios (CVE-2026-40175) allows attackers to bypass AWS IMDSv2 and achieve RCE via header injection. Upgrade to v1.15.0 now!
48 views
Daily Writeups
β€· Title: Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 28 Apr 2026 09:29:45 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Apache Camel #CVE_2026_33453 #cybersecurity #Header injection #infosec #Integration Security #java #Java deserialization #middleware #Patch Alert #rce
Daily CyberSecurity
Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
Critical RCE flaws hit Apache Camel via header injection and unsafe deserialization. Secure your integrations and upgrade to version 4.20.0 today.
19 views
Daily Writeups
β€· Title: Apache Camel Vulnerabilities Expose Routes to Header Injection and SSRF
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Fri, 10 Jul 2026 14:00:41 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Apache Camel #Authentication Bypass #CVE_2026_53913 #CVE_2026_55994 #Header injection #ssrf #Vulnerability
Daily CyberSecurity
Apache Camel Vulnerabilities Expose Routes to Header Injection and SSRF
TL;DR The Apache Camel project patched four high-severity flaws across five components. Three Apache Camel vulnerabilities let an attacker inject Camel control headers, which triggers server-side …
29 views
Daily Writeups
‷ Title: Content Security Policy Explained ️
════════════════════════
π€ͺ Author: Marcelo Domingues
════════════════════════
β΄΅ Time: Fri, 24 Jul 2026 15:31:01 GMT
════════════════════════
βŒ— Tags: #csp #web_development #header #xs #security
35 views
Daily Writeups
β€· Title: ASUSTOR Fixes Critical ADM Flaw CVE-2026-105324 That Lets Attackers Read NAS Files Without Login
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Wed, 07 Oct 2026 02:22:31 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #ADM #Arbitrary File Read #ASUSTOR #CVE_2026_105324 #Header injection #NAS security
Daily CyberSecurity
ASUSTOR Fixes Critical ADM Flaw CVE-2026-105324 That Lets Attackers Read NAS Files Without Login
TL;DR ASUSTOR has patched CVE-2026-105324, a critical ASUSTOR ADM vulnerability with a CVSS 4.0 score of 9.2. The flaw lets an unauthenticated remote attacker read arbitrary files on a NAS device.…
16 views
Daily Writeups
β€· Title: Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Mon, 19 Oct 2026 09:58:59 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Email Security #Header injection #IMAP Command Injection #Roundcube #ssrf #webmail #XSS
Daily CyberSecurity
Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
TL;DR Roundcube released versions 1.6.20 and 1.7.5 on October 19, 2026, fixing 20 security issues. This Roundcube security update covers IMAP command injection, mail header injection, XSS, SSRF an…
19 views
Daily Writeups
β€· Title: PoC and Full Details Released for QPACK Amplification Attack That Crashes HTTP/3 Servers
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Thu, 22 Oct 2026 01:58:12 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2025_13945 #CVE_2025_64702 #CVE_2026_12523 #Denial of Service #Header Accordions #HTTP/3 #proof_of_concept #QPACK
Daily CyberSecurity
PoC and Full Details Released for QPACK Amplification Attack That Crashes HTTP/3 Servers
TL;DR On October 20, 2026, FoxIO published full details and proof-of-concept code for β€œHeader Accordions,” a QPACK amplification attack against HTTP/3 servers. A remote, unauthenticate…
11 views