Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Password Hash Leak (owasp juice-shop)
════════════════════════
𐀪 Author: Rajeev Gaddam
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 11:00:36 GMT
════════════════════════
⌗ Tags: #rest_api #sensitive_data #password_leaks #hacking #owasp_juice_shop
Medium
Password Hash Leak (owasp juice-shop)
Introduction
16 views
Daily Writeups
⤷ Title: Triple Security Advisory Prompts Immediate Upgrade to Apache OpenMeetings Version 9.0.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 13:03:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Software Foundation #cryptography #CVE_2026_33266 #infosec #OpenMeetings #REST Security #security update #Video Conferencing Security #vulnerability management
Daily CyberSecurity
Triple Security Advisory Prompts Immediate Upgrade to Apache OpenMeetings Version 9.0.0
Apache OpenMeetings 9.0.0 fixes critical flaws including hard-coded "remember-me" keys and REST login credential exposure. Secure your video suite today!
21 views
Daily Writeups
⤷ Title: Unauthorized Account Deletion via HTTP Method Manipulation.A Business Logic Flaw in REST API Design
════════════════════════
𐀪 Author: Moataz
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 15:03:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #rest_api #penetration_testing #bug_bounty_tips
Medium
Unauthorized Account Deletion via HTTP Method Manipulation.A Business Logic Flaw in REST API Design
Introduction
62 views
Daily Writeups
⤷ Title: API Nedir ve Nasıl Çalışır?
════════════════════════
𐀪 Author: Elify
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 19:30:11 GMT
════════════════════════
⌗ Tags: #api_development #api_security #rest_api #api #api_gateway
Medium
API Nedir ve Nasıl Çalışır?
API (Application Programming Interfaces), dijital dünyada uygulamalar ve cihazlar arasında kesintisiz iletişimi sağlayan dijital köprü…
34 views
Daily Writeups
⤷ Title: New “PowMix” Botnet Preys on Czech Workforce with Lure of Compliance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:11:43 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #botnet #Cisco Talos #cyber_espionage #Czech Republic #EDEKA Phishing #Heroku Abuse #infosec #Malware Analysis #PowerShell Malware #PowMix #REST API Mimicry
Daily CyberSecurity
New "PowMix" Botnet Preys on Czech Workforce with Lure of Compliance
Cisco Talos uncovers PowMix, a stealthy botnet targeting Czech HR via AMSI bypass and Heroku-hosted C2. Learn how this malware evades modern EDR systems.
25 views
Daily Writeups
⤷ Title: Breaking API Security: Attack Surface, Trust Boundaries, and Exploitation Paths
════════════════════════
𐀪 Author: Divine
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 18:09:07 GMT
════════════════════════
⌗ Tags: #api #web_security #bug_bounty #rest_api
Medium
Breaking API Security: Attack Surface, Trust Boundaries, and Exploitation Paths
API security When it comes to API Security and the attack surface our focus shifts from endpoints /login, /profile and the likes to objects, actions and trust assumptions within the API call An API …
14 views
Daily Writeups
⤷ Title: Filtros em APIs REST não são só query params
════════════════════════
𐀪 Author: Erik Barroso
════════════════════════
ⴵ Time: Thu, 07 May 2026 22:11:41 GMT
════════════════════════
⌗ Tags: #filtros #sql_injection #sql #api #rest_api
Medium
Você provavelmente está implementando filtros errado na sua API REST
Filtros parecem apenas query params, mas envolvem validação, segurança, autorização, performance, paginação, cache e consistência de…
20 views
Daily Writeups
⤷ Title: Você provavelmente está implementando filtros errado na sua API REST
════════════════════════
𐀪 Author: Erik Barroso
════════════════════════
ⴵ Time: Thu, 07 May 2026 22:11:41 GMT
════════════════════════
⌗ Tags: #filtros #sql_injection #sql #api #rest_api
Medium
Você provavelmente está implementando filtros errado na sua API REST
Filtros parecem apenas query params, mas envolvem validação, segurança, autorização, performance, paginação, cache e consistência de…
42 views
Daily Writeups
⤷ Title: Under Siege: Critical Auth Bypass Flaw in Burst Statistics Plugin Puts 115,000+ WordPress Sites at Risk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 06:44:34 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Hijacking #authentication bypass #Burst Statistics #CVE_2026_8181 #Patch Update 2026 #Plugin Flaw #REST API Exploit #website security #Wordfence #WordPress Vulnerability
Penetration Testing Tools
Under Siege: Critical Auth Bypass Flaw in Burst Statistics Plugin Puts 115,000+ WordPress Sites at Risk
WordPress websites have once again fallen under siege due to a critical flaw in a popular extension. On
14 views
Daily Writeups
⤷ Title: CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:49:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Secure Workload #Cisco Security Advisory #CVE_2026_20223 #CVSS 10 #Cyber Security #infosec #Patch Alert #privilege escalation #REST API Exploit #Tenant Cross_Bypass #Zero_Trust Microsegmentation
Daily CyberSecurity
CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
Cisco drops an urgent advisory for CVE-2026-20223 (CVSS 10.0) in Secure Workload. Unauthenticated remote attackers can steal full Site Admin privileges.
14 views