Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Mailcow Critical Alert: Unauthenticated XSS Threatens Admin Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 13:55:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Dashboard #Autodiscover #CVE_2026_40872 #docker #Email Security #infosec #mailcow #Patch Alert #Redis #Session Hijacking #Stored XSS #Web Security
Daily CyberSecurity
Mailcow Critical Alert: Unauthenticated XSS Threatens Admin Takeover
The popular open-source groupware suite mailcow: dockerized is facing a high-stakes security challenge. A critical Stored Cross-Site Scripting (XSS) vulnerability has been discovered in the platfo…
21 views
Daily Writeups
⤷ Title: Understanding Cross-Site Scripting (XSS): Reflected vs Stored Attacks in Modern Web Applications
════════════════════════
𐀪 Author: Dharani Priya S
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:21:00 GMT
════════════════════════
⌗ Tags: #xs #xss_vulnerability #reflected_xss #stored_xss
Medium
Understanding Cross-Site Scripting (XSS): Reflected vs Stored Attacks in Modern Web Applications
Introduction
39 views
Daily Writeups
⤷ Title: How a Forgotten data-cfg Attribute Let Me Steal a Reviewer Bot's Cookies.
════════════════════════
𐀪 Author: Kani A Mahadevan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 03:45:57 GMT
════════════════════════
⌗ Tags: #bug_bounty #intigriti #path_traversal #cybersecurity #stored_xss
Medium
How a Forgotten data-cfg Attribute Let Me Steal a Reviewer Bot's Cookies. An Intigriti XSS Story Challenge 0426
The moment it clicked
17 views
Daily Writeups
⤷ Title: Discovering a Stored XSS Vulnerability in a Blog Feature (Responsible Disclosure)
════════════════════════
𐀪 Author: Sahuteman
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 03:16:01 GMT
════════════════════════
⌗ Tags: #xssreport #xss_vulnerability #stored_xss
Medium
Discovering a Stored XSS Vulnerability in a Blog Feature (Responsible Disclosure)
🔐 Introduction
18 views
Daily Writeups
⤷ Title: From a Simple Image Upload to Account Takeover: Stored XSS via File Metadata
════════════════════════
𐀪 Author: Kanishkakhandelwal
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:41:06 GMT
════════════════════════
⌗ Tags: #bug_bounty #account_take_over #stored_xss #vapt #cookies
Medium
From a Simple Image Upload to Account Takeover: Stored XSS via File Metadata
Hi, let me introduce myself — I’m Kanishka Khandelwal. I’m currently working as an Associate Security Engineer, and apart from my day job…
17 views
Daily Writeups
⤷ Title: How I Found My First $250 Stored XSS When I Almost Quit
════════════════════════
𐀪 Author: Mir Muhammed Ahsan Ali
════════════════════════
ⴵ Time: Wed, 06 May 2026 10:16:33 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #stored_xss #web_security #cybersecurity
Medium
How I Found My First $250 Stored XSS When I Almost Quit
From the brink of quitting to a $250 bounty: How I moved past the AI hype, ignored the crowds, and uncovered a Stored XSS bug.
13 views
Daily Writeups
⤷ Title: Zabbix Flaws Allow Monitored Hosts to Hijack Admin Dashboards
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 01:10:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_23926 #CVE_2026_23928 #cybersecurity #infosec #network monitoring #Oracle Injection #Patch Alert #Stored XSS #XSS #Zabbix #Zabbix Agent 2
Daily CyberSecurity
Zabbix Flaws Allow Monitored Hosts to Hijack Admin Dashboards
Zabbix, the ubiquitous open-source monitoring solution used by enterprises to track the health of vast IT infrastructures, has released a series of security patches to address three significant vu…
16 views
Daily Writeups
⤷ Title: Critical PrestaShop Flaw Allows Hijacking via “Contact Us” Form
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 02:11:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Back_office Hijacking #Cross_Site Scripting #CVE_2026_44212 #e_commerce security #infosec #Patch Alert #PHP Security #PrestaShop #Stored XSS #Web Security #XSS
Daily CyberSecurity
Critical PrestaShop Flaw Allows Hijacking via “Contact Us” Form
PrestaShop, the global open-source e-commerce powerhouse known for its highly customizable PHP architecture and responsive design, has issued an urgent security update. Used by merchants worldwide…
32 views
Daily Writeups
⤷ Title: SQL Injection:The Vulnerability That Refuses to Retire
════════════════════════
𐀪 Author: Sushmitha Amarnath
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 18:34:00 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity_awareness #database #stored_procedure #infosec
Medium
SQL Injection:The Vulnerability That Refuses to Retire
SQL injection has been a named, well-understood vulnerability class since the late 1990s. It has its own OWASP category, its own automated…
7 views
Daily Writeups
⤷ Title: Three Critical pgAdmin 4 Vulnerabilities Patched: XSS, Auth Bypass, and AI Assistant SQLi
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 00:30:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_12045 #CVE_2026_12046 #CVE_2026_12048 #pgAdmin #pgAdmin 4 vulnerabilities #PostgreSQL #Prompt injection #Stored XSS
Daily CyberSecurity
Three Critical pgAdmin 4 Vulnerabilities Patched: XSS, Auth Bypass, and AI Assistant SQLi
Three critical pgAdmin 4 vulnerabilities (CVE-2026-12046, CVE-2026-12048, CVE-2026-12045) risk XSS and RCE. Update to pgAdmin 4 9.16 now.
23 views