Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: Blind OS Command Injection With Out-of-Band Data Exfiltration
════════════════════════
𐀪 Author: Kaustubh Asthana
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 13:26:38 GMT
════════════════════════
⌗ Tags: #burpsuite #penetration_testing #cybersecurity #web_penetration_testing #portswigger
Medium
Blind OS Command Injection With Out-of-Band Data Exfiltration
Not just proving a command ran, but reading its output through DNS
35 views
Daily Writeups
⤷ Title: Client-Side Path Traversal: When Your Frontend Sends the Wrong Request
════════════════════════
𐀪 Author: Raksharoot
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 18:08:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #bug_bounty #web_security #ethical_hacking
Medium
Client-Side Path Traversal: When Your Frontend Sends the Wrong Request
How a ../ in a URL parameter turns into CSRF, cache deception, and account takeover.
17 views
Daily Writeups
⤷ Title: Just Ask: Exploiting Excessive Agency in an LLM
════════════════════════
𐀪 Author: sa0k0
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 17:45:50 GMT
════════════════════════
⌗ Tags: #portswigger_lab #api_security #llm_security #excessive_agency #web_llm_attacks
Medium
Just Ask: Exploiting Excessive Agency in an LLM
From customer support chat to database deletion: following the tools in a PortSwigger Web LLM lab.
33 views
Daily Writeups
⤷ Title: PHP Prepares Emergency Fix for Two Critical Flaws After Leak Reveals RCE Risk
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 23:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #php #Remote Code Execution #watchTowr #Web Security
Daily CyberSecurity
PHP Prepares Emergency Fix for Two Critical Flaws After Leak Reveals RCE Risk
TL;DR The PHP team will ship a security release on October 21, 2026, at 14:00 UTC to fix two critical flaws rated CVSS v4.0 9.2. Leaks tie them to CVE-2026-109618 and CVE-2026-109619, described as…
20 views
Daily Writeups
⤷ Title: Mozilla Blocks Eight Compromised eMudhra Certificates in Under Three Hours
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 01:59:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Certificate Authority #eMudhra #firefox #mozilla #NSS #OneCRL #Web PKI
Daily CyberSecurity
Mozilla Blocks Eight Compromised eMudhra Certificates in Under Three Hours
TL;DR On October 17, 2026, at 20:06 UTC, Mozilla learned that private keys for eight eMudhra intermediate certificates had been compromised. Within three hours, it blocked them for Firefox users t…
14 views
Daily Writeups
⤷ Title: A Practical Guide to Hunting Bugs in GraphQL When Introspection Is Off
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 04:21:17 GMT
════════════════════════
⌗ Tags: #vulnerability_disclosure #path_traversal #web_security #bug_bounty #gitlab
20 views
Daily Writeups
⤷ Title: IDOR / BOLA: How to Find the #1 API Vulnerability — and Actually Prove It
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 04:09:01 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #bug_bounty #programming #api_security
Medium
🔓 IDOR / BOLA: How to Find the #1 API Vulnerability — and Actually Prove It
Broken Object Level Authorization — IDOR, to most of us — is the single most common serious bug in modern APIs. It sits at #1 on the OWASP…
22 views
Daily Writeups
⤷ Title: ️‍♂️ SSRF Deep Dive: Turning a Harmless URL Field into Full Cloud Takeover
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 05:54:25 GMT
════════════════════════
⌗ Tags: #cloud_security #web_security #cybersecurity #bug_bounty #penetration_testing
Medium
🕵️‍♂️🔓 SSRF Deep Dive: Turning a Harmless URL Field into Full Cloud Takeover
How a URL input nobody thinks twice about becomes the keys to your entire cloud account.
20 views
Daily Writeups
⤷ Title: JAuth : CyLab Security Academy CTF Write-Up | Understanding JWT Authentication
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 05:14:47 GMT
════════════════════════
⌗ Tags: #ctf #web_security #jwt #bug_bounty #cybersecurity
Medium
JAuth : CyLab Security Academy CTF Write-Up | Understanding JWT Authentication
Introduction
29 views
Daily Writeups
⤷ Title: 7 Ways Attackers Can Abuse an API Even When Authentication Works
════════════════════════
𐀪 Author: TechByRahmat
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 06:16:01 GMT
════════════════════════
⌗ Tags: #api_security #web_development #software_engineering #programming #cybersecurity
Medium
7 Ways Attackers Can Abuse an API Even When Authentication Works
Valid credentials do not guarantee that a request is safe.
51 views