Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.51K subscribers

2 photos

129K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.51K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Tue, 04 Apr 2023 13:15:05 GMT
———————————————
✏️Title: 7 Tips for Preventing Insecure Deserialization Vulnerability
———————————————
📎Link: https://medium.com/p/f7d160563582
———————————————
Tags: #security #deserialization #cybersecurity #serialization #software_development

7 Tips for Preventing Insecure Deserialization Vulnerability

Insecure deserialization is a prominent security vulnerability that occurs when an application deserializes untrusted or malicious data…

3 views14:00

⤷ Title: Insecure Deserialization Vulnerability: From Theory to Practice
════════════════════════
𐀪 Author: Mohana Reddy
════════════════════════
ⴵ Time: Thu, 23 Jan 2025 12:31:25 GMT
════════════════════════
⌗ Tags: #vulnerability #insecure_deserialization #penetration_testing #vapt #serialization

Insecure Deserialization Vulnerability: From Theory to Practice

Insecure deserialization is one of the most critical vulnerabilities in modern web applications, yet it’s often ignored by many security…

39 views14:05

⤷ Title: CVE-2025-36038: Critical RCE Vulnerability Discovered in IBM WebSphere Application Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Jun 2025 03:14:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Server #CVE_2025_36038 #cybersecurity #Deserialization #Enterprise Security #IBM #rce #Remote Code Execution #Serialization #Vulnerability #WebSphere

Daily CyberSecurity

CVE-2025-36038: Critical RCE Vulnerability Discovered in IBM WebSphere Application Server

IBM warns of a critical RCE flaw (CVE-2025-36038) in WebSphere Application Server 8.5/9.0, allowing unauthenticated attackers to execute arbitrary code via serialization.

13 views23:08

⤷ Title: The “lc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 25 Dec 2025 00:22:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agents #CVE_2025_68664 #data exfiltration #Environment Variables #Information Disclosure #LangChain #LLM Security #Prompt injection #Python Security #Serialization Injection

Daily CyberSecurity

The “lc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft

A critical vulnerability was found in LangChain, the popular open-source framework used to power Large Language Model (LLM) agents. The flaw, tracked as CVE-2025-68664, carries a severe CVSS score…

32 views04:04

⤷ Title: The LangGrinch Stole Your Keys: Critical LangChain Flaw Enables Data Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:10:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_68664 #CVE_2025_68665 #Infosec #LangChain #LangChain.js #LangGrinch #LLM Security #Prompt Injection #python #Serialization

Penetration Testing Tools

The LangGrinch Stole Your Keys: Critical LangChain Flaw Enables Data Theft

A critical vulnerability has been discovered in the LangChain ecosystem that allows attackers to steal sensitive data and

25 views04:04

⤷ Title: From YAML to RCE: The PyYAML Deserialization Story
════════════════════════
𐀪 Author: Amr
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 21:33:32 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #cybersecurity #source_code #serialization

From YAML to RCE: The PyYAML Deserialization Story

Hi, I’m Amr Kadry, a Red Team Consultant and bug hunter, acknowledged by over 50 companies including Mozilla, CrowdStrike, Canva, Vimeo…

32 views22:03

⤷ Title: I Changed One Cookie Value… and Became Admin
════════════════════════
𐀪 Author: TEJAS
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 17:05:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #serialization #portswigger_lab

I Changed One Cookie Value… and Became Admin

PortSwigger Deserialization Lab

28 views19:04

⤷ Title: Apache Fory Patches Four Deserialization Flaws Across Java, C++, and Rust
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 12:51:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fory #Apache Fury #CVE_2026_60080 #CVE_2026_64606 #CVE_2026_64608 #CVE_2026_64609 #Deserialization #open_source #Serialization #Type Confusion #use after free

Daily CyberSecurity

Apache Fory Patches Four Deserialization Flaws Across Java, C++, and Rust

TL;DR The Apache Fory project disclosed four vulnerabilities on July 21, 2026. Three carry an important rating, and one is moderate. Version 1.4.0 fixes all of them. Why it matters Fory is a fast …

7 views14:04