Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: How leaking your build system credentials can allow arbitary remote code execution.
════════════════════════
𐀪 Author: Lee Dale
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 07:42:45 GMT
════════════════════════
⌗ Tags: #jenkins #infosec #cybersecurity #appsec #rce_vulnerability
Medium
How leaking your build system credentials can allow arbitary remote code execution.
There is a common pitfall in software development which results in a dangerous threat to the security of your systems.
13 views
Daily Writeups
⤷ Title: 15,000 Jenkins Servers at Risk from RCE Vulnerability (CVE-2025-53652)
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 08 Aug 2025 19:14:36 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Jenkins #RCE #security #VulnCheck #Vulnerability
Hackread
15,000 Jenkins Servers at Risk from RCE Vulnerability (CVE-2025-53652)
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
56 views
Daily Writeups
⤷ Title: Jenkins Patches High-Severity Vulnerabilities, Including a DoS Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 02:07:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #automation server #CI/CD #CVE_2025_5115 #cybersecurity #Denial of Service #dos #Jenkins #Jetty #Log Injection #Vulnerability
Daily CyberSecurity
Jenkins Patches High-Severity Vulnerabilities, Including a DoS Flaw
Jenkins has patched multiple flaws, including a high-severity DoS vulnerability in its bundled Jetty server that could allow unauthenticated attackers to crash the service.
14 views
Daily Writeups
⤷ Title: Jenkins Faces Wave of Plugin Flaws, Including SAML Authentication Bypass (CVE-2025-64131)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 02:08:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD #CVE_2025_64131 #Jenkins #Plugin Vulnerability #SAML #Secret Exposure #Session Hijacking
Daily CyberSecurity
Jenkins Faces Wave of Plugin Flaws, Including SAML Authentication Bypass (CVE-2025-64131)
Jenkins warned of a Critical SAML Plugin flaw (CVE-2025-64131) that allows session replay/hijacking due to a missing cache. Multiple plugins also expose API tokens in plaintext.
20 views
Daily Writeups
⤷ Title: What I Learned from Working on an Integrated Security Scanning Pipeline
════════════════════════
𐀪 Author: Irfan HN
════════════════════════
ⴵ Time: Sun, 30 Nov 2025 15:19:43 GMT
════════════════════════
⌗ Tags: #platform_engineering #application_security #jenkins #devsecops #ci_cd_pipeline
Medium
What I Learned from Working on an Integrated Security Scanning Pipeline
During my internship I was given the opportunity to get hands-on with the security scanning part of our CI/CD pipeline. The main idea of…
17 views
Daily Writeups
⤷ Title: High-Severity Jenkins Flaws Risk Unauthenticated DoS via HTTP CLI and XSS Via Coverage Reports
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 02:38:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Build Token #CI/CD #Coverage Plugin #CVE_2025_67635 #dos #HTTP CLI #Jenkins #XSS
Daily CyberSecurity
High-Severity Jenkins Flaws Risk Unauthenticated DoS via HTTP CLI and XSS Via Coverage Reports
Jenkins patched nine flaws: a High-severity unauthenticated DoS (CVE-2025-67635) via HTTP CLI and XSS via Coverage Plugin. Build tokens are now encrypted. Update to v2.541 immediately.
18 views
Daily Writeups
⤷ Title: From Code to Compromise
 A Simple Guide to Jenkins, Docker, and GitHub in Bug Bounty
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 04:14:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #github #jenkins #docker
Medium
From Code to Compromise 🧨
 A Simple Guide to Jenkins, Docker, and GitHub in Bug Bounty
Every app you test in bug bounty is just the visible tip of a much bigger system. Behind that login page or API endpoint, there is usually…
50 views
Daily Writeups
⤷ Title: Proving Grounds: Prison (Linux) Full Walkthrough
════════════════════════
𐀪 Author: Ekemini Bassey
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 17:55:00 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #jenkins_security #tunneling #sql_injection #privilege_escalation
Medium
📝 [Writeup] Proving Grounds: Prison (Linux)
From Prison Break to Jenkins Break: Tunnelling for Root
31 views
Daily Writeups
⤷ Title: [Writeup] Proving Grounds: Prison (Linux)
════════════════════════
𐀪 Author: Ekemini Bassey
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 17:55:00 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #jenkins_security #tunneling #sql_injection #privilege_escalation
Medium
📝 [Writeup] Proving Grounds: Prison (Linux)
From Prison Break to Jenkins Break: Tunnelling for Root
18 views
Daily Writeups
⤷ Title: CI/CD at Risk: High-Severity Jenkins XSS Flaw Exposes Build Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 14:01:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #automation server #CI/CD security #Cross_Site Scripting #CVE_2026_27099 #CVE_2026_27100 #DevOps Security #Information Disclosure #Jenkins #Patch Alert #XSS
Daily CyberSecurity
CI/CD at Risk: High-Severity Jenkins XSS Flaw Exposes Build Environments
Jenkins patches a high-severity stored XSS flaw (CVE-2026-27099) and an info disclosure bug. Update to version 2.551 or LTS 2.541.2 to secure pipelines.
31 views
Daily Writeups
⤷ Title: Critical Jenkins Flaws Expose CI/CD Servers to Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 14:40:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2026_33001 #CVE_2026_33002 #DevSecOps #DNS Rebinding #Jenkins #LoadNinja #Patch Alert #Remote Code Execution #Vulnerability
Daily CyberSecurity
Critical Jenkins Flaws Expose CI/CD Servers to Remote Code Execution
Jenkins patches critical flaws (CVE-2026-33001 & CVE-2026-33002) allowing remote code execution and full CI/CD pipeline compromise. Update to 2.555 now.
21 views
Daily Writeups
⤷ Title: High-Severity RCE and XSS Flaws Found in Popular CI/CD Jenkins Plugins
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 02:10:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #CVE_2026_42520 #CVE_2026_42523 #cybersecurity #DevSecOps #infosec #Jenkins #Patch Alert #plugin security #rce #Vulnerability Research #XSS
Daily CyberSecurity
High-Severity RCE and XSS Flaws Found in Popular CI/CD Jenkins Plugins
Jenkins patches high-severity RCE in Credentials Binding and XSS in GitHub/HTML Publisher plugins. Secure your CI/CD pipeline by upgrading today.
15 views