Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Thu, 20 Apr 2023 06:17:18 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: How to bring your own IDP as key manager for WSO2 APIM
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/bee77a32ad85
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #wso2_api_manager #technolog #api_gateway #api_security #okta
Medium
How to bring your own IDP as key manager for WSO2 APIM
Let’s configure your own IDP to handle security with WSO2 APIM
9 views
Daily Writeups
β€· Title: WSO2 APIM 4.4.0 & Keycloak v24: The Heist-Proof Plan for Your APIs
════════════════════════
π€ͺ Author: Minura Kariyawasam
════════════════════════
β΄΅ Time: Sat, 08 Mar 2025 17:24:51 GMT
════════════════════════
βŒ— Tags: #wso2_api_manager #wso2 #sso #api_security #keycloak
Medium
WSO2 APIM 4.4.0 & Keycloak v24: The Heist-Proof Plan for Your APIs
Steal This Guide to Lock Down Your APIs and Wow Your Users
25 views
Daily Writeups
β€· Title: Configuring Azure AD as a Key Manager in WSO2 API Manager
════════════════════════
π€ͺ Author: Dilan Lasantha
════════════════════════
β΄΅ Time: Mon, 17 Mar 2025 15:05:00 GMT
════════════════════════
βŒ— Tags: #external_key_manager #api_security #azure_active_directory #wso2 #wso2_api_manager
Medium
Configuring Azure AD as a Key Manager in WSO2 API Manager
Integrating Azure Active Directory (Azure AD) as a Key Manager in WSO2 API Manager (WSO2 APIM) allows organizations to utilize Microsoft’s…
44 views
Daily Writeups
β€· Title: CVE-2025-2905 (CVSS 9.1): Critical XXE Vulnerability Found in WSO2 API Manager
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 06 May 2025 00:37:47 +0000
════════════════════════
βŒ— Tags: #Vulnerability #API Manager #CVE_2025_2905 #security advisory #WSO2 #XXE Vulnerability
Daily CyberSecurity
CVE-2025-2905 (CVSS 9.1): Critical XXE Vulnerability Found in WSO2 API Manager
A critical XXE vulnerability (CVE-2025-2905) in WSO2 API Manager allows attackers to read files and cause DoS. Patch WSO2-2016-0151 is the solution.
16 views
Daily Writeups
β€· Title: Critical WSO2 Flaw: Unauthenticated Account Takeover Risk (CVSS 9.8)
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 26 May 2025 00:44:54 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Account Takeover #cybersecurity #SOAP service #WSO2
Daily CyberSecurity
Critical WSO2 Flaw: Unauthenticated Account Takeover Risk (CVSS 9.8)
A critical WSO2 vulnerability (CVE-2024-6914, CVSS 9.8) allows unauthenticated account takeover via a SOAP service, including admin access.
21 views
Daily Writeups
β€· Title: The Ultimate Beginner’s Guide to WSO2 API Manager: 9 Key Topics Explained Simply
════════════════════════
π€ͺ Author: Nethmi
════════════════════════
β΄΅ Time: Tue, 12 Aug 2025 09:17:04 GMT
════════════════════════
βŒ— Tags: #wso2 #api_integration #api_gateway #api_security #api
Medium
The Ultimate Beginner’s Guide to WSO2 API Manager: 9 Key Topics Explained Simply
APIs power the apps you love β€” but they need to be managed, protected, and understood. WSO2 API Manager is the toolkit that makes it…
52 views
Daily Writeups
β€· Title: API Governance in WSO2 API Manager 4.5.0: How to Disable API Key Authentication globally
════════════════════════
π€ͺ Author: Danidu Wijendra
════════════════════════
β΄΅ Time: Fri, 22 Aug 2025 03:45:44 GMT
════════════════════════
βŒ— Tags: #wso2_api_manager #disable_api_key #api_security #oauth2 #api_governance
Medium
API Governance in WSO2 API Manager 4.5.0: How to Disable API Key Authentication globally
Learn how to use API Governance in WSO2 API Manager 4.5.0 to block APIs with weak authentication. Secure your APIs by disabling API Key…
27 views
Daily Writeups
β€· Title: WSO2 Identity Server : Easy Access, Zero Stress
════════════════════════
π€ͺ Author: Mohamed Jiffry Fathima Fayaza
════════════════════════
β΄΅ Time: Wed, 27 Aug 2025 10:41:36 GMT
════════════════════════
βŒ— Tags: #open_source #api_security #digital_transformation #identity_server #wso2
Medium
WSO2 Identity Server : Easy Access, Zero Stress
Managing user access can be tricky for companies, especially if they have many apps. WSO2 Identity Server is a cloud tool that makes…
7 views
Daily Writeups
β€· Title: CVE-2025–5717: WSO2 Hit With RCE Bugβ€Šβ€”β€ŠAdmin Access Required!
════════════════════════
π€ͺ Author: CVEHUB
════════════════════════
β΄΅ Time: Thu, 25 Sep 2025 10:30:43 GMT
════════════════════════
βŒ— Tags: #rce #vulnerability #cve_2025_5717 #security #wso2
Medium
CVE-2025–5717: WSO2 Hit With RCE Bugβ€Šβ€”β€ŠAdmin Access Required!
Oh, hello there, fellow security enthusiasts! Today, we’re diving into a juicy vulnerability affecting multiple WSO2 products…
68 views
Daily Writeups
β€· Title: Enhancing API Security with Auth0 and WSO2 API Manager
════════════════════════
π€ͺ Author: Yogesh Manikkavasagam
════════════════════════
β΄΅ Time: Fri, 17 Oct 2025 05:47:04 GMT
════════════════════════
βŒ— Tags: #mulecraft #api_security #wso2 #auth0 #mulecraft_blogs
Medium
Enhancing API Security with Auth0 and WSO2 API Manager
Introduction
41 views
Daily Writeups
β€· Title: WSO2 Fixes Two Critical Access Control Vulnerabilities (CVE-2025-9804, CVE-2025-10611) Affecting API Manager and Identity Server
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 22 Oct 2025 00:00:55 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Access Control #API Manager #Auth Bypass #Critical Vulnerability #CVE_2025_10611 #Identity Server #WSO2
Daily CyberSecurity
WSO2 Fixes Two Critical Access Control Vulnerabilities (CVE-2025-9804, CVE-2025-10611) Affecting API Manager and Identity Server
The WSO2 project has released urgent security advisories addressing two critical access control vulnerabilitiesβ€”CVE-2025-9804 and CVE-2025-10611β€”that affect multiple enterprise products, including…
7 views
Daily Writeups
β€· Title: Researcher Details Critical Authentication Bypasses in WSO2 API Manager and Identity Server
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 30 Oct 2025 00:50:03 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #API Manager #Auth Bypass #Critical Vulnerability #CVE_2025_9152 #Identity Server #Regex Flaw #WSO2
Daily CyberSecurity
Researcher Details Critical Authentication Bypasses in WSO2 API Manager and Identity Server
WSO2 patched three Critical flaws (CVSS 9.8) in API Manager/Identity Server. Flaws in regex access control and case-sensitive HTTP methods allow unauthenticated administrative takeover.
11 views
Daily Writeups
β€· Title: How WSO2 API Manager Helps Secure APIs in Microservices Architecture
════════════════════════
π€ͺ Author: Nilakshi Madubashini
════════════════════════
β΄΅ Time: Mon, 06 Apr 2026 16:45:37 GMT
════════════════════════
βŒ— Tags: #wso2 #api_security #microservices #api_management #software_architecture
Medium
How WSO2 API Manager Helps Secure APIs in Microservices Architecture
As someone still learning microservices, I didn’t expect API security to be such a big topic. But the deeper I went, the more I realized…
35 views
Daily Writeups
β€· Title: Lock Down Your APIs: A Guide to API Key Authentication
════════════════════════
π€ͺ Author: Naduni Pamudika
════════════════════════
β΄΅ Time: Mon, 25 May 2026 08:02:31 GMT
════════════════════════
βŒ— Tags: #wso2_api_manager #api_security #api_key #wso2
Medium
Lock Down Your APIs: A Guide to API Key Authentication
API keys are lightweight, opaque tokens used to authenticate callers of an API. In WSO2 API Manager 4.7.0 and later, API keys are API-bound…
32 views
Daily Writeups
β€· Title: WSO2 API Manager Hit by CVSS 10 Auth Bypass and Six More Flaws
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Tue, 30 Jun 2026 02:42:45 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #API security #Authentication Bypass #CVE_2026_1728 #CVE_2026_3418 #CVE_2026_4052 #CVE_2026_5430 #WSO2 #WSO2 API Manager
Daily CyberSecurity
WSO2 API Manager Hit by CVSS 10 Auth Bypass and Six More Flaws
TL;DR WSO2 patched seven vulnerabilities across its API platform, including WSO2 API Manager, in June 2026. The worst, CVE-2026-5430, scores a maximum 10 and bypasses JWT authentication. The rest …
22 views
Daily Writeups
β€· Title: Closing the Access Control Gap: What WSO2 Identity Server Taught Me About RBAC
════════════════════════
π€ͺ Author: yohanstephen
════════════════════════
β΄΅ Time: Tue, 30 Jun 2026 12:56:53 GMT
════════════════════════
βŒ— Tags: #cybersecurity #api_security #identity_management #rbac #wso2
Medium
Closing the Access Control Gap: What WSO2 Identity Server Taught Me About RBAC
The problem I kept seeing
33 views
Daily Writeups
β€· Title: CVE-2025–4760: Authenticated Stored XSS Vulnerability in WSO2 API Manager - What You Need to Know
════════════════════════
π€ͺ Author: Loginsoft
════════════════════════
β΄΅ Time: Mon, 27 Jul 2026 08:02:41 GMT
════════════════════════
βŒ— Tags: #xss_vulnerability #wso2_api_manager #wso2 #application_security
Medium
CVE-2025–4760: Authenticated Stored XSS Vulnerability in WSO2 API Manager - What You Need to Know
Introduction
31 views
Daily Writeups
β€· Title: CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Fri, 07 Aug 2026 13:04:08 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Account Takeover #API Manager #Authentication Bypass #CVE_2026_1728 #CVE_2026_5430 #privilege escalation #WSO2
Daily CyberSecurity
CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10
TL;DR WSO2 disclosed four critical vulnerabilities across its API and identity products. Several are WSO2 account takeover flaws. The worst, CVE-2026-5430, scores a maximum 10 through a JWT authen…
4 views