Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: फोनपे के खिलाफ शिकायत दर्ज करने के लिए, आप PhonePe ग्राहक सहायता से ☄️✓924~482~0361✓ ☄️या पर कॉल…
════════════════════════
𐀪 Author: [email protected]
════════════════════════
ⴵ Time: Sun, 10 Aug 2025 07:51:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #food #sports #typescript #nonfiction
Medium
फोनपे के खिलाफ शिकायत दर्ज करने के लिए, आप PhonePe ग्राहक सहायता से ☄️✓924~482~0361✓ ☄️या पर कॉल…
फोनपे के खिलाफ शिकायत दर्ज करने के लिए, आप PhonePe ग्राहक सहायता से ☄️✓924~482~0361✓ ☄️या पर कॉल करके या पर ऑनलाइन शिकायत दर्ज करके संपर्क कर सकते हैं ! फोनपे के खिलाफ शिकायत दर्ज करने के लिए, आप…
12 views
Daily Writeups
⤷ Title: Stopping Bad Actors: Inside 1Password’s Security Model
════════════════════════
𐀪 Author: Ely
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 18:50:02 GMT
════════════════════════
⌗ Tags: #cryptography #typescript #password_manager #cybersecurity #web_development
Medium
Stopping Bad Actors: Inside 1Password’s Security Model
“That’s Encryption, Baby!”
21 views
Daily Writeups
⤷ Title: Critical Auth Bypass (CVE-2025-61928) in Better Auth Allows Hackers to Steal User API Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Oct 2025 00:30:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Key Theft #Authentication Bypass #Better Auth #Critical Vulnerability #CVE_2025_61928 #Next.js #TypeScript
Daily CyberSecurity
Critical Auth Bypass (CVE-2025-61928) in Better Auth Allows Hackers to Steal User API Keys
A Critical (CVSS 9.3) flaw (CVE-2025-61928) in Better Auth allows unauthenticated attackers to create/modify API keys for any user, risking full account compromise.
13 views
Daily Writeups
⤷ Title: Octoverse 2025: India to Surpass U.S. Developers; AI Becomes Baseline
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 03:19:36 +0000
════════════════════════
⌗ Tags: #Technology #AI #Copilot #Github #India Developers #Octoverse #Software Development #TypeScript
Penetration Testing Tools
Octoverse 2025: India to Surpass U.S. Developers; AI Becomes Baseline
India's developer count will hit 57.5M by 2030, surpassing the U.S., fueled by AI and digital education. TypeScript also dominates GitHub contributors.
14 views
Daily Writeups
⤷ Title: The AI Revolution in Writing:
════════════════════════
𐀪 Author: Ki Lov3 | Bestselling Indie Author
════════════════════════
ⴵ Time: Sun, 02 Nov 2025 08:41:11 GMT
════════════════════════
⌗ Tags: #social_media #freelancing #cybersecurity #typescript #media
Medium
The AI Revolution in Writing:
The AI Revolution in Writing: From Pen to Prompt; How Artificial Intelligence Has Redefined the Writer's Craft in Two Years October 20, 2025 By: Ki Lov3 © Editor: Toni The Editor © The writing …
23 views
Daily Writeups
⤷ Title: Secure Practices Implementations in Node.js
════════════════════════
𐀪 Author: Mark O'Keeffe
════════════════════════
ⴵ Time: Tue, 04 Nov 2025 10:35:50 GMT
════════════════════════
⌗ Tags: #application_security #typescript #secure_coding #nodejs #cyber_security_awareness
Medium
Secure Practices Implementations in Node.js
Introduction
13 views
Daily Writeups
⤷ Title: Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 03:15:54 +0000
════════════════════════
⌗ Tags: #Data Leak #App Store #Apple #Data Exposure #Procedural Lapse #source code #SourceMap #Svelte #TypeScript
Daily CyberSecurity
Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap
Apple failed to disable SourceMap in its new App Store web version, inadvertently leaking the entire Svelte/TypeScript front-end codebase to the public.
29 views
Daily Writeups
⤷ Title: Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 03:15:54 +0000
════════════════════════
⌗ Tags: #Data Leak #App Store #Apple #Data Exposure #Procedural Lapse #source code #SourceMap #Svelte #TypeScript
Daily CyberSecurity
Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap
Apple failed to disable SourceMap in its new App Store web version, inadvertently leaking the entire Svelte/TypeScript front-end codebase to the public.
37 views
Daily Writeups
⤷ Title: Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 03:15:54 +0000
════════════════════════
⌗ Tags: #Data Leak #App Store #Apple #Data Exposure #Procedural Lapse #source code #SourceMap #Svelte #TypeScript
Daily CyberSecurity
Dev Oversight: Apple Accidentally Leaked Entire App Store Web Source Code via SourceMap
Apple failed to disable SourceMap in its new App Store web version, inadvertently leaking the entire Svelte/TypeScript front-end codebase to the public.
12 views
Daily Writeups
⤷ Title: Stop Leaking Your Secrets: Solving the Hidden API Key/Secret Problem in Web Apps
════════════════════════
𐀪 Author: Jens@Fivesec
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 10:46:54 GMT
════════════════════════
⌗ Tags: #typescript #web_development #angular #cybersecurity #javascript
Medium
Stop Leaking Your Secrets: Solving the Hidden API Key/Secret Problem in Web Apps
Every frontend developer hits this question at some point —
18 views
Daily Writeups
⤷ Title: Introducing dssrf: A Safe‑by‑Construction SSRF Defense Library for Node.js
════════════════════════
𐀪 Author: Relun Sec
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 09:57:35 GMT
════════════════════════
⌗ Tags: #ssrf #cybersecurity #typescript #security #javascript
Medium
Introducing dssrf: A Safe‑by‑Construction SSRF Defense Library for Node.js
Introducing dssrf: A Safe‑by‑Construction SSRF Defense Library for Node.js # Introducing **dssrf** — A Safe‑by‑Construction SSRF Defense Library for Node.js Server-Side Request Forgery …
55 views
Daily Writeups
⤷ Title: “Better Auth” Framework Alert: The Double-Slash Trick That Bypasses Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:33:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Better Auth #CVSS 8.6 #javascript #Path Normalization #Proxy Security #Rate Limit Evasion #rou3 #TypeScript #Web Security
Daily CyberSecurity
"Better Auth" Framework Alert: The Double-Slash Trick That Bypasses Security Controls
A normalization flaw in Better Auth's router allows attackers to bypass access controls and rate limits using simple double-slash URLs.
26 views
Daily Writeups
⤷ Title: NestJS Validation That Actually Secures
════════════════════════
𐀪 Author: Syntal
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:31:01 GMT
════════════════════════
⌗ Tags: #backend #web_development #api_security #nestjs #typescript
Medium
NestJS Validation That Actually Secures
Stop “valid” requests from becoming privilege escalations with DTO boundaries, strict pipes, and response shaping that won’t leak internal…
38 views
Daily Writeups
⤷ Title: Poisoned Comments: Critical Orval Flaw (CVE-2026-25141) Injects Code
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:36:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_23947 #CVE_2026_25141 #Developer Tools #JavaScript Security #OpenAPI #Orval #Supply Chain Security #TypeScript #web development
Daily CyberSecurity
Poisoned Comments: Critical Orval Flaw (CVE-2026-25141) Injects Code
Critical Orval flaw CVE-2026-25141 (CVSS 9.3) allows code injection via OpenAPI comments. 2.8M+ downloads affected. Update to v7.21.0 now.
13 views
Daily Writeups
⤷ Title: Password Hijack in the Modern Stack: Payload CMS Patches Critical 9.1 CVSS Reset Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 14:30:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backend Security #CVE_2026_34751 #Headless CMS #infosec #Next.js #password reset #Patch Alert #Payload CMS #React #TypeScript #Vulnerability #Web Security
Daily CyberSecurity
Password Hijack in the Modern Stack: Payload CMS Patches Critical 9.1 CVSS Reset Flaw
Payload CMS fixes a critical 9.1 CVSS flaw (CVE-2026-34751) in its password reset flow. Attackers could hijack accounts. Update to v3.79.1 immediately!
7 views
Daily Writeups
⤷ Title: The WordPress Killer? Cloudflare Unveils EmDash, the AI-Native CMS Built for the Serverless Epoch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 09:15:52 +0000
════════════════════════
⌗ Tags: #Technology #AI_native #Astro 6.0 #cloudflare #cms #Cybersecurity 2026 #EmDash #open_source #serverless #TypeScript #V8 Isolate #WordPress Alternative
Daily CyberSecurity
The WordPress Killer? Cloudflare Unveils EmDash, the AI-Native CMS Built for the Serverless Epoch
Cloudflare debuts EmDash, an AI-native, serverless CMS built on Astro 6.0. Say goodbye to WordPress plugin hacks with V8 isolate sandboxing and passkey security.
6 views
Daily Writeups
⤷ Title: High-Severity SSRF Flaw Uncovered in Angular’s Server-Side Rendering
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 02:32:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@angular/platform_server #Angular #CVE #infosec #javascript #Origin Hijacking #Server_Side Rendering #SSR #ssrf #TypeScript #Web Security
Daily CyberSecurity
High-Severity SSRF Flaw Uncovered in Angular’s Server-Side Rendering
Angular patches a critical 8.7 SSRF flaw in @angular/platform-server. Attackers can hijack SSR origins via URL normalization. Patch v19, v20, or v21 now!
16 views
Daily Writeups
⤷ Title: Stop Fighting “For you”: Making X’s Timeline Stick to Following + Latest
════════════════════════
𐀪 Author: DAC
════════════════════════
ⴵ Time: Thu, 07 May 2026 14:17:46 GMT
════════════════════════
⌗ Tags: #chrome_extension #twitter #typescript #tools #xs
Medium
Stop Fighting “For you”: Making X’s Timeline Stick to Following + Latest
If you use X (formerly Twitter) in a serious way — for work, tech, or market watching — you’ve probably had this experience:
37 views
Daily Writeups
⤷ Title: From “Following Pin” to an Anti-Algorithm Fatigue Tool
════════════════════════
𐀪 Author: DAC
════════════════════════
ⴵ Time: Fri, 08 May 2026 14:02:45 GMT
════════════════════════
⌗ Tags: #xs #frontend #chrome_extension #ux #typescript
Medium
From “Following Pin” to an Anti-Algorithm Fatigue Tool
The evolution of X Following Auto Pin (v0.4.2 → v0.8.3)
33 views
Daily Writeups
⤷ Title: Better Auth SSRF Flaw CVE-2026-53513 (CVSS 9.6) Threatens 19M-Download Auth Library
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 01:00:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Better Auth #CVE_2026_53513 #OIDC #SSO #ssrf #TypeScript Authentication
Daily CyberSecurity
Better Auth SSRF Flaw CVE-2026-53513 (CVSS 9.6) Threatens 19M-Download Auth Library
TL;DR A critical Better Auth SSRF flaw, tracked as CVE-2026-53513, lets any logged-in user reach internal services. The bug carries a CVSS score of 9.6 and sits in the @better-auth/sso plugin. Mai…
23 views