Daily Writeups
@Daily_Writeups
3.3K subscribers
1 photo
116K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.3K subscribers
Daily Writeups
⤷ Title: JavaScript’te Güvenlik Açıkları: XSS Nedir ve Nasıl Önlenir?
════════════════════════
𐀪 Author: Serhat İsmail Zunluoğlu
════════════════════════
ⴵ Time: Mon, 30 Mar 2026 12:27:35 GMT
════════════════════════
⌗ Tags: #xs #javascript #web_security #frontend #cybersecurity
Medium
JavaScript’te Güvenlik Açıkları: XSS Nedir ve Nasıl Önlenir?
JavaScript projelerinde XSS açığının ne olduğunu, 3 farklı türünü ve innerHTML, DOMPurify, CSP gibi yöntemlerle nasıl önlendiğini öğrenin.
5 views
Daily Writeups
⤷ Title: Securing the Edges: A Practical Way to Handle XSS in Modern Apps
════════════════════════
𐀪 Author: Dogukan Batal
════════════════════════
ⴵ Time: Tue, 31 Mar 2026 09:02:27 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #javascript #xss_attack #cross_site_scripting #web_security
Medium
Securing the Edges: A Practical Way to Handle XSS in Modern Apps
Modern frameworks like React or Vue protect us from many XSS attacks by default. They escape values automatically and make common mistakes…
2 views
Daily Writeups
⤷ Title: From Key to Chaos: How a JS Key Breaks Notification Security
════════════════════════
𐀪 Author: Rushikesh Kaware
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 13:31:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #web_security #bug_bounty #javascript
Medium
From Key to Chaos: How a JS Key Breaks Notification Security
A real-world auth bypass where an exposed JavaScript key allowed unauthorized access to a notification system.
32 views
Daily Writeups
⤷ Title: Fileless Remcos RAT Hijacks Trusted Windows Tools
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 01:01:57 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Fileless Malware #infosec #javascript #Lat61 #LOLBins #Malware Analysis #phishing #powershell #Reflective Loader #Remcos RAT #Remote Access Trojan
Daily CyberSecurity
Fileless Remcos RAT Hijacks Trusted Windows Tools
Researchers unmask a fileless Remcos RAT campaign using obfuscated JS and LOLBins to hijack systems in-memory. See the technical breakdown from Lat61.
13 views
Daily Writeups
⤷ Title: Secrets That Survive Everything: The Runtime Security Gap Left Unguarded
════════════════════════
𐀪 Author: Kumar G
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 14:11:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #security #web_development #javascript
Medium
Secrets That Survive Everything: The Runtime Security Gap Left Unguarded
How years of shift-left security investment still can’t stop a hardcoded key from surviving to production — and why the runtime layer…
18 views
Daily Writeups
⤷ Title: Axios npm Supply Chain Attack: Inside the 3-Hour Compromise That Delivered a Cross-Platform RAT
════════════════════════
𐀪 Author: Ankit Mishra
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:25:21 GMT
════════════════════════
⌗ Tags: #npm #cybersecurity #infosec #supply_chain_security #javascript
15 views
Daily Writeups
⤷ Title: CVE-2026-34208 (CVSS 10): Critical Sandbox Escape Uncovered in SandboxJS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 13:07:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_34208 #cybersecurity #Host Poisoning #infosec #JavaScript Security #Node.js #rce #Sandbox Breach #Sandbox Escape #SandboxJS #supply chain attack
Daily CyberSecurity
CVE-2026-34208 (CVSS 10): Critical Sandbox Escape Uncovered in SandboxJS
CVE-2026-34208: A critical 10.0 flaw in SandboxJS allows code to escape and poison host objects like Math.random. Secure your environment—update immediately!
18 views
Daily Writeups
⤷ Title: JIT Heap Spray Explained: A Simple Guide for Beginners
════════════════════════
𐀪 Author: Ashen Bhagya
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:47:28 GMT
════════════════════════
⌗ Tags: #computer_security #javascript #programming_basic #cybersecurity #ethical_hacking
Medium
JIT Heap Spray Explained: A Simple Guide for Beginners
If you’re new to programming or cybersecurity, you might have heard the term JIT Heap Spray and thought it sounded confusing or scary…
27 views
Daily Writeups
⤷ Title: Code Red for AI: CVSS-10 Vulnerability in Flowise Under Active Attack from Starlink IP
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:16:34 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CustomMCP #CVE_2025_59528 #Flowise #InfoSec 2026 #JavaScript Injection #Patch Alert #RCE #remote code execution #VulnCheck #Zero Trust
Penetration Testing Tools
Code Red for AI: CVSS-10 Vulnerability in Flowise Under Active Attack from Starlink IP
A vulnerability garnering the maximum severity rating has already been subjected to active exploitation, despite the remedial patch
9 views
Daily Writeups
⤷ Title: Denial of Service Alert: React Server Components Vulnerability Causes CPU Spikes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 09:44:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_23869 #Denial of Service #dos #infosec #JavaScript Security #Node.js #React #React Server Components #RSC #web development #Webpack
Daily CyberSecurity
Denial of Service Alert: React Server Components Vulnerability Causes CPU Spikes
React patches a 7.5 CVSS DoS vulnerability in Server Components (CVE-2026-23869). Stop CPU exhaustion attacks—update your 19.x dependencies now!
14 views