Daily Writeups
@Daily_Writeups
3.3K subscribers
1 photo
117K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.3K subscribers
Daily Writeups
⤷ Title: SQL Injection: The Bug Born From Deadline Pressure
════════════════════════
𐀪 Author: Rajeswari
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 10:32:25 GMT
════════════════════════
⌗ Tags: #spring_boot #java #security #sql_injection
Medium
SQL Injection: The Bug Born From Deadline Pressure
How one line of “I’ll fix it later” code hands your entire database to a stranger.
47 views
Daily Writeups
⤷ Title: Critical Spring AI Flaws Expose Databases to SQL and JSONPath Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 14:27:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #CVE_2026_22729 #CVE_2026_22730 #cybersecurity #infosec #Java security #JSONPath Injection #Spring AI #sql injection #Vulnerability
Daily CyberSecurity
Critical Spring AI Flaws Expose Databases to SQL and JSONPath Injection
Two critical flaws in Spring AI (CVE-2026-22729 & CVE-2026-22730) allow attackers to bypass access controls via JSONPath and SQL injection. Update now.
9 views
Daily Writeups
⤷ Title: Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:13:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_22735 #CVE_2026_22737 #cybersecurity #infosec #Java security #patch management #Spring Framework #Spring MVC #Spring WebFlux #Vulnerability
Daily CyberSecurity
Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
Researchers found two flaws in Spring Framework (CVE-2026-22737 & CVE-2026-22735) allowing path bypasses and stream corruption. Patch your apps today.
27 views
Daily Writeups
⤷ Title: The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 07:13:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #CVE_2026_22732 #CVSS 9.1 #cybersecurity #data leak #HTTP Headers #infosec #Java security #Spring Security #Vulnerability
Daily CyberSecurity
The Silent Leak: Critical 9.1 CVSS Spring Security Flaw Strips Away Vital HTTP Headers
A critical 9.1 CVSS flaw in Spring Security (CVE-2026-22732) fails to write HTTP headers, exposing Java apps to severe data leaks. Update immediately.
12 views
Daily Writeups
⤷ Title: 6 Ways to Protect Your Spring Boot APIs from Common Attacks (That Most Tutorials Still Ignore in…
════════════════════════
𐀪 Author: inside Nikita's Mind
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 11:47:23 GMT
════════════════════════
⌗ Tags: #java_backend #api_security #cybersecurity #spring_boot_3 #spring_boot_security
Medium
6 Ways to Protect Your Spring Boot APIs from Common Attacks (That Most Tutorials Still Ignore in 2026)
Last month, one of my clients woke up to find their entire user database exposed. Not because of some sophisticated zero-day exploit. A…
34 views
Daily Writeups
⤷ Title: Apache ActiveMQ Patches RCE and Path Traversal Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 12:03:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ActiveMQ #CVE_2026_33227 #CVE_2026_34197 #infosec #Java security #JMX #Jolokia #Message Broker #Patch Alert #rce #Spring Framework
Daily CyberSecurity
Apache ActiveMQ Patches RCE and Path Traversal Flaws
Apache ActiveMQ patches a critical 2026 RCE flaw. Learn how CVE-2026-34197 uses Jolokia and Spring XML to hijack the JVM. Update to 5.19.5 or 6.2.3 now!
18 views
Daily Writeups
⤷ Title: Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:00:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2026_29146 #CVE_2026_34486 #Encryption Bypass #infosec #Java security #Kubernetes Security #request smuggling #vulnerability management #web server
Daily CyberSecurity
Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
Apache Tomcat discloses 10 vulnerabilities including encryption bypasses and Kubernetes token leaks. Upgrade now to secure your Java-based web applications.
8 views
Daily Writeups
⤷ Title: Log4j’s “Silent” Security Gap: New Advisories Warn of Data Loss and TLS Bypasses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 14:03:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Log4j #CVE_2026_34477 #CVE_2026_34480 #cybersecurity #infosec #Java security #Log Injection #Log4j 2.25.4 #Syslog Security #TLS Bypass
Daily CyberSecurity
Log4j’s "Silent" Security Gap: New Advisories Warn of Data Loss and TLS Bypasses
Apache Log4j 2.25.4 fixes 4 "silent" flaws, including TLS bypasses and log injection. Secure your infrastructure—upgrade now to prevent data loss.
30 views
Daily Writeups
⤷ Title: Critical 9.8 RCE Flaw in Qlik Talend Threatens Enterprise Data Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 08:03:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_6264 #Data Orchestration #infosec #Java security #JMX Port #Patch Alert #QlikTech #rce #Remote Code Execution #Talend
Daily CyberSecurity
Critical 9.8 RCE Flaw in Qlik Talend Threatens Enterprise Data Pipelines
Qlik issues a critical 9.8 CVSS alert for Talend JobServer and Runtime. Unauthenticated RCE via JMX ports puts data pipelines at risk. Patch immediately.
9 views
Daily Writeups
⤷ Title: 13 Years in the Dark: How a Hidden ActiveMQ Flaw Turns Your Message Broker Into a Backdoor…
════════════════════════
𐀪 Author: Kerem
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 21:28:29 GMT
════════════════════════
⌗ Tags: #apache_activemq #infosec #vulnerability_research #java #cybersecurity
Medium
13 Years in the Dark: How a Hidden ActiveMQ Flaw Turns Your Message Broker Into a Backdoor…
Breaking down CVE-2026–34197: a remote code execution vulnerability in Apache ActiveMQ Classic that hid in the Jolokia API for over a…
11 views
Daily Writeups
⤷ Title: Critical Pre-Auth RCE Found in OpenAM Identity Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:14:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Management #CVE_2026_33439 #Deserialization #infosec #JATO Framework #Java security #OpenAM #Patch Alert #Pre_Auth RCE #rce #Remote Code Execution
Daily CyberSecurity
Critical Pre-Auth RCE Found in OpenAM Identity Platform
Critical 9.3 RCE in OpenAM (CVE-2026-33439) allows unauthenticated attackers to execute OS commands via jato.clientSession. Patch your 16.0.5 servers now!
11 views
Daily Writeups
⤷ Title: Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 13:30:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40477 #CVE_2026_40478 #infosec #Java security #Patch Alert #rce #Server Side Template Injection #Spring Security #ssti #Thymeleaf #web development
Daily CyberSecurity
Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
Thymeleaf 3.1.4 fixes two critical 9.1 CVSS vulnerabilities. Unauthenticated attackers can bypass security for SSTI. Audit your user input and patch today!
13 views
Daily Writeups
⤷ Title: 7 Critical Vulnerabilities Threaten Spring Security 7.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:54:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_22752 #infosec #Java security #JWT Security #Patch Alert #Spring Security #Spring Security 7.0 #ssrf #TOCTOU #X.509 Impersonation
Daily CyberSecurity
7 Critical Vulnerabilities Threaten Spring Security 7.0
Spring Security reveals 7 flaws, including a critical 9.6 CVSS vulnerability in version 7.0. From auth bypass to X.509 impersonation, upgrade to 7.0.5 now.
13 views
Daily Writeups
⤷ Title: Critical Authentication Bypass in Apache HttpClient 5.6
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:45:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache HttpClient #Apache Software Foundation #CVE_2026_40542 #HTTP Components #infosec #Java security #Microservices Security #Mutual Authentication #Patch Alert #SCRAM_SHA_256
Daily CyberSecurity
Critical Authentication Bypass in Apache HttpClient 5.6
Apache HttpClient 5.6 reveals a critical auth flaw (CVE-2026-40542) in SCRAM-SHA-256. Secure your Java microservices—upgrade to 5.6.1 immediately.
26 views
Daily Writeups
⤷ Title: Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:42:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache ActiveMQ #CVE_2026_40466 #CVE_2026_41043 #CVE_2026_41044 #cybersecurity #infosec #Java security #Jolokia #JVM #Middleware Security #rce #Spring Framework #XSS
Daily CyberSecurity
Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
Critical RCE and XSS vulnerabilities hit Apache ActiveMQ (CVE-2026-41044, 40466). Authenticated attackers can hijack the JVM. Update to 5.19.6 or 6.2.5 now.
25 views
Daily Writeups
⤷ Title: The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 13:10:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40976 #CVSS 9.1 #cybersecurity #DevTools #infosec #Java security #Patch Alert #rce #Spring Boot #Spring Framework #Timing Attack
Daily CyberSecurity
The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
New Spring Boot flaws (CVSS 9.1) bypass security filters and enable RCE via timing attacks. Impacting versions 2.7.x to 4.0.x—secure your Java apps now.
13 views
Daily Writeups
⤷ Title: Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 02:39:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CosmosDB #CVE_2026_40967 #CVE_2026_40978 #infosec #Java security #Patch Alert #RAG #Spring AI #sql injection #Vector Database
Daily CyberSecurity
Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
Spring AI discloses two critical injection flaws (CVE-2026-40967 & 40978) in Vector Store implementations. Upgrade to v1.0.6 or v1.1.5 now to prevent data leaks.
18 views
Daily Writeups
⤷ Title: Apache MINA Hit by Twin Critical RCE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 01:00:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AbstractIoBuffer #Apache MINA #CVE_2026_41635 #cybersecurity #Deserialization #infosec #Java security #network_security #Patch Alert #rce
Daily CyberSecurity
Unfiltered: The 9.8 CVSS Deserialization Loophole Hijacking Apache MINA
Apache MINA (CVE-2026-41635) suffers a critical 9.8 CVSS RCE flaw. Learn how a deserialization filter bypass puts servers at risk and how to patch today.
12 views
Daily Writeups
⤷ Title: Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 09:29:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_33453 #cybersecurity #Header injection #infosec #Integration Security #java #Java deserialization #middleware #Patch Alert #rce
Daily CyberSecurity
Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure
Critical RCE flaws hit Apache Camel via header injection and unsafe deserialization. Secure your integrations and upgrade to version 4.20.0 today.
12 views
Daily Writeups
⤷ Title: Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 12:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #C++ #CVE_2026_41603 #cybersecurity #go #infosec #java #memory corruption #mitm #Node.js #RPC Security #swift
Daily CyberSecurity
Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws
Apache Thrift fixes critical cross-language vulnerabilities (MitM, memory corruption, DoS). Secure your Java, Go, and C++ stacks by upgrading to version 0.23.0.
7 views