Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: What Are the Types of Attacks Against Web Servers?
════════════════════════
𐀪 Author: Vpshosting
════════════════════════
ⴵ Time: Mon, 18 May 2026 05:49:42 GMT
════════════════════════
⌗ Tags: #types_of_attacks #web_server_attacks #hacking #server_attack
Medium
What Are the Types of Attacks Against Web Servers?
Web servers play a pivotal role in the digital ecosystem, powering websites, applications, and services critical to businesses and…
13 views
Daily Writeups
⤷ Title: Critical RCE Exploits Exposed: Apache OFBiz Patches Severe Authentication Bypass Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:01:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache OFBiz #Authentication Bypass #CVE_2026_31378 #CVE_2026_45434 #Cyber Security #infosec #JSON Attribute Manipulation #Patch Alert #Remote Code Execution #Server Side Template Injection #ssti
Daily CyberSecurity
Critical RCE Exploits Exposed: Apache OFBiz Patches Severe Authentication Bypass Flaws
Apache OFBiz releases version 24.09.06 to patch severe RCE flaws, token forgery, and a critical password-reset authentication bypass. Upgrade now!
24 views
Daily Writeups
⤷ Title: The Underminr Paradigm: Subverting DNS Filters via CDN Networks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 04:46:33 +0000
════════════════════════
⌗ Tags: #Information Security #ADAMnetworks threat intelligence #cloud command and control traffic #cross tenant CDN routing exploit #Encrypted Client Hello ECH security #legacy domain fronting comparison #outminr network monitoring tool #Protective DNS bypass #Server Name Indication SNI spoofing #shared infrastructure website blacklisting #Underminr DNS evasion technique
Information Security News
Underminr DNS Evasion Technique Bypasses Protective DNS
ADAMnetworks uncovers Underminr, a critical DNS evasion technique impacting 88 million domains by weaponizing cross-tenant routing on shared CDNs.
34 views
Daily Writeups
⤷ Title: Comet Backup Server Flaw Exposes Remote Customer Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 09:56:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Comet Backup #CVE_2026_32999 #RCE vulnerability #Server Security #Software Patch
Daily CyberSecurity
Comet Backup Server Flaw Exposes Remote Customer Data
A critical Comet Backup RCE vulnerability has been found. Learn about the CVE-2026-32999 patch released to secure backup servers and user data.
22 views
Daily Writeups
⤷ Title: Severe Plesk Privilege Escalation Flaw Patched in Linux Versions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Linux Security #Plesk #privilege escalation #Server Security #Xpath injection
Daily CyberSecurity
Severe Plesk Privilege Escalation Flaw Patched in Linux Versions
Secure your servers against a major Plesk privilege escalation flaw. Learn how the latest CVE-2026-44962 patch protects Linux infrastructure.
13 views
Daily Writeups
⤷ Title: Critical Security Flaw Exposes Apache LDAP API Connections
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 04:09:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache Directory #CVE_2026_35563 #LDAP API #Security Advisory #Server Identity
25 views
Daily Writeups
⤷ Title: Apache Fesod SSRF Vulnerability Exposes Internal Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 03:55:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fesod #CVE_2026_49328 #Java Library #Server Security #SSRF vulnerability
Daily CyberSecurity
Apache Fesod SSRF Vulnerability Exposes Internal Networks
A critical Apache Fesod SSRF vulnerability has been found. Learn about the CVE-2026-49328 patch released to protect internal network resources.
18 views
Daily Writeups
⤷ Title: Automated Remediation: Microsoft Resolves Cumulative Update Rollback Failures
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 12:24:13 +0000
════════════════════════
⌗ Tags: #Windows #component store corruption #DISM manual fix tool #installation loops error #server side rollback #update installation fault #Windows 11 update anomaly
Daily CyberSecurity
Automated Remediation: Microsoft Resolves Cumulative Update Rollback Failures
Discover how to resolve the Windows 11 update anomaly. Learn how Microsoft updates trigger installation loops and how to fix them using manual DISM tools.
18 views
Daily Writeups
⤷ Title: Cloudflare Workers Cache: Edge Caching for Workers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 03:19:32 +0000
════════════════════════
⌗ Tags: #Technology #Cache_Tag #cloudflare #Cloudflare Workers #Edge Caching #Server_Side Rendering #web performance #Workers Cache
Daily CyberSecurity
Cloudflare Workers Cache: Edge Caching for Workers
Cloudflare has launched Workers Cache, a dedicated frontend caching layer built specifically for Cloudflare Workers. With this release, Workers can act as their own origin. They can now also benef…
16 views
Daily Writeups
⤷ Title: CVE-2026-15378: Blind SSRF Flaw in Red Hat OpenShift AI
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 15:00:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_15378 #Kubernetes #OpenShift AI #red hat #Red Hat OpenShift AI #Server_Side Request Forgery #ssrf
Daily CyberSecurity
CVE-2026-15378: Blind SSRF Flaw in Red Hat OpenShift AI
TL;DR Red Hat has flagged a critical flaw in Red Hat OpenShift AI. Tracked as CVE-2026-15378, it scores 9.3 on CVSS. The bug lets a remote attacker run a blind SSRF and read local files. No exploi…
12 views
Daily Writeups
⤷ Title: CVE-2026-60206 (CVSS 9.9): Takeover Flaw Hits Oracle WebLogic Server
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 09:58:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60204 #CVE_2026_60205 #CVE_2026_60206 #Oracle CPU July 2026 #Oracle Fusion Middleware #Oracle WebLogic Server #Server Takeover
Daily CyberSecurity
CVE-2026-60206 (CVSS 9.9): Takeover Flaw Hits Oracle WebLogic Server
TL;DR Oracle patched 11 flaws in the WebLogic Server Core component this July. Most allow a full Oracle WebLogic Server takeover. The top issue, CVE-2026-60206, carries a CVSS score of 9.9 and can…
30 views
Daily Writeups
⤷ Title: Next.js Patches Three CVSS 8.3 Flaws in Rewrites, Server Actions, and Middleware
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 13:05:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_64642 #CVE_2026_64645 #CVE_2026_64649 #Next.js #Next.js vulnerabilities #Server_Side Request Forgery #Vercel
Daily CyberSecurity
Next.js Patches Three CVSS 8.3 Flaws in Rewrites, Server Actions, and Middleware
TL;DR Vercel fixed three Next.js vulnerabilities, each rated CVSS 8.3. Two of them allow Server-Side Request Forgery, while the third lets crafted requests slip past middleware-based authenticatio…
14 views
Daily Writeups
⤷ Title: Intel to Bring Back Hyper-Threading in 2028 Coral Rapids Xeon
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 03:43:37 +0000
════════════════════════
⌗ Tags: #Technology #Coral Rapids #Hyper_Threading #intel #Server CPU #Xeon
Daily CyberSecurity
Intel to Bring Back Hyper-Threading in 2028 Coral Rapids Xeon
Intel had gradually phased out hyper-threading across its consumer and server processors. The Intel Core Ultra 200 series, for example, dropped support entirely. The company cited better energy ef…
18 views
Daily Writeups
⤷ Title: CVE-2026-60702 (CVSS 9.9): Oracle WebLogic Takeover Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 02:41:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60698 #CVE_2026_60702 #CVE_2026_60977 #Oracle Fusion Middleware #Oracle WebLogic vulnerability #Server Takeover #WebLogic
Daily CyberSecurity
CVE-2026-60702 (CVSS 9.9): Oracle WebLogic Takeover Flaw
TL;DR Oracle patched nine flaws in WebLogic Server in a special August 2026 update. Five carry critical scores. The top Oracle WebLogic vulnerability, CVE-2026-60702, scores a CVSS of 9.9. Success…
17 views
Daily Writeups
⤷ Title: A news reader in Next.js where the API key never reaches the browser
════════════════════════
𐀪 Author: @rnab
════════════════════════
ⴵ Time: Wed, 02 Sep 2026 15:01:04 GMT
════════════════════════
⌗ Tags: #react #server_components #nextjs #api_security #typescript
Medium
A news reader in Next.js where the API key never reaches the browser
Every “build a news app with Next.js” tutorial I’ve read makes the same mistake: it fetches from the client in a useEffect, and either…
55 views
Daily Writeups
⤷ Title: Apache Allura Security Vulnerabilities Patched in v1.21.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 03:48:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Allura #CVE_2026_80180 #CVE_2026_80181 #CVE_2026_81270 #Server_Side Request Forgery
Daily CyberSecurity
Apache Allura Security Vulnerabilities Patched in v1.21.0
Apache released a critical software update to fix multiple Apache Allura security vulnerabilities. These flaws include severe cross-site scripting, server-side request forgery, and data exposure b…
26 views
Daily Writeups
⤷ Title: CVE-2026-89049 (CVSS 9.9): AWS SSM Agent SSRF Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 13:55:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS SSM Agent #AWS Systems Manager #CVE_2026_89049 #Server_Side Request Forgery #Vulnerability
Daily CyberSecurity
CVE-2026-89049 (CVSS 9.9): AWS SSM Agent SSRF Flaw
Amazon released a security update addressing a critical server-side request forgery vulnerability in the AWS Systems Manager Agent. This severe security flaw, tracked as CVE-2026-89049, allows aut…
24 views
Daily Writeups
⤷ Title: Windows Server 2022 Mainstream Support Ends Soon
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:32:33 +0000
════════════════════════
⌗ Tags: #Windows #Microsoft #Server Update #Windows Server 2022
Daily CyberSecurity
Windows Server 2022 Mainstream Support Ends Soon
Microsoft launched the Windows Server 2022 operating system back in March 2021. Currently, all Microsoft server platforms operate on the Long-Term Servicing Channel (LTSC). Consequently, the compa…
31 views
Daily Writeups
⤷ Title: HPE Fixes Critical iLO 7 Admin Access Flaw and iMC Authentication Bypass
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 09 Oct 2026 01:51:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_79820 #CVE_2026_79842 #HPE #HPE iLO #HPE iMC #Server Security
Daily CyberSecurity
HPE Fixes Critical iLO 7 Admin Access Flaw and iMC Authentication Bypass
TL;DR HPE has patched two critical flaws in its server and network management tools. The first is an HPE iLO 7 vulnerability, CVE-2026-79820 (CVSS 9.0), which could give a remote attacker administ…
26 views
Daily Writeups
⤷ Title: AI Agent Attack Turns One Exposed Endpoint Into a Full Server Takeover in Under 24 Hours
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 07:15:24 +0000
════════════════════════
⌗ Tags: #Malware #AI agent attack #AI Agents #Cairn #GodPotato #LLM #privilege escalation #ReliaQuest #Server Takeover #Spring Batch
Daily CyberSecurity
AI Agent Attack Turns One Exposed Endpoint Into a Full Server Takeover in Under 24 Hours
At a glance Malware family None new; public tools GodPotato and PrintSpoofer plus built-in Windows utilities Threat actor Unknown; no attribution to any group Target One organization’s Apach…
13 views