Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: CVE-2026-10577: CVSS 10 Access Control Vulnerability Hits Rockwell Automation 1715 Redundant I/O Modules
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 07:32:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #ICS #OT Security #Rockwell Automation
Daily CyberSecurity
CVE-2026-10577: CVSS 10 Access Control Vulnerability Hits Rockwell Automation 1715 Redundant I/O Modules
TL;DR A maximum-severity Rockwell Automation vulnerability, CVE-2026-10577, affects the 1715 Redundant I/O EtherNet/IP adapter (1715-AENTR). The access control flaw scores 10.0 on both CVSS 3.1 an…
8 views
Daily Writeups
⤷ Title: CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 15:01:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #API Token #DevSecOps #Gitea
Daily CyberSecurity
CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed
TL;DR A critical Gitea vulnerability, CVE-2026-58443 (CVSS 9.6), lets a public-only token push commits into a private repository. Maintainers fixed it in v1.27.0. The security advisory publishes b…
19 views
Daily Writeups
⤷ Title: How Hackers Take Control of Your Accounts — With PortSwigger Labs
════════════════════════
𐀪 Author: Pranav Aggarwal
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 08:03:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #access_control
Medium
How Hackers Take Control of Your Accounts — With PortSwigger Labs
Introduction
21 views
Daily Writeups
⤷ Title: Automating Access Control: How I Built a Python Script to Protect Patient Data
════════════════════════
𐀪 Author: Devminimah
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 16:21:28 GMT
════════════════════════
⌗ Tags: #automation #cybersecurity #access_control #infosec #python
Medium
Automating Access Control: How I Built a Python Script to Protect Patient Data
Learning to automate security tasks that matter
8 views
Daily Writeups
⤷ Title: The Invisible Workforce: Why Non-Human Identities Are a Major Cloud Security Blind Spot
════════════════════════
𐀪 Author: Innovations Arm
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 09:16:16 GMT
════════════════════════
⌗ Tags: #api_security #access_management #cloud_security #cybersecurity #aws_iam_security
Medium
The Invisible Workforce: Why Non-Human Identities Are a Major Cloud Security Blind Spot
In some enterprise environments, machine identities outnumber people by more than 100 to 1 — and excessive access remains widespread.
34 views
Daily Writeups
⤷ Title: A SaaS Pentest Isn’t Buyer-Ready Until Authorization Is Proven
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 10:59:42 GMT
════════════════════════
⌗ Tags: #api_security #access_control #b2b_saas #penetration_testing #saas_security
Medium
A SaaS Pentest Isn’t Buyer-Ready Until Authorization Is Proven
Enterprise security reviews care less about whether users can log in and more about whether tenants, roles, objects, exports, and…
15 views
Daily Writeups
⤷ Title: How to Inventory and Lock Down the API Surfaces on Your Network Appliances
════════════════════════
𐀪 Author: Anthony Bahn
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:59:46 GMT
════════════════════════
⌗ Tags: #attack_surface_management #api_security #network_appliance #cybersecurity #access_control_list
Medium
How to Inventory and Lock Down the API Surfaces on Your Network Appliances
Infrastructure ACLs only work if you know every listener an appliance exposes. Six steps to enumerate API surfaces, map their…
46 views
Daily Writeups
⤷ Title: CVE-2026–2619: How a Read-Only GitLab Auditor Could Modify Vulnerability Flags
════════════════════════
𐀪 Author: KabishDahal
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 06:51:38 GMT
════════════════════════
⌗ Tags: #application_security #bug_bounty_writeup #gitlab #access_control #cybersecurity
Medium
CVE-2026–2619: How a Read-Only GitLab Auditor Could Modify Vulnerability Flags
An authorization flaw in GitLab’s AI detection API, the evidence behind my report, and the permission change that fixed it.
14 views
Daily Writeups
⤷ Title: Why Admin Panel Subdomain vs Path Isn’t a Security Decision
════════════════════════
𐀪 Author: FOLAKE SOWONOYE
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 18:55:31 GMT
════════════════════════
⌗ Tags: #backend_development #cybersecurity #access_control #web_development #api_security
Medium
Why Admin Panel Subdomain vs Path Isn’t a Security Decision
A decision framework for backend and frontend teams weighing where the admin portal should live, and the RBAC, MFA, and gateway controls
❤1
45 views
Daily Writeups
⤷ Title: From a Blocked Login Screen to Full Data Chain — How I Exploited Broken Access Control on Schneider…
════════════════════════
𐀪 Author: Xsora7
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 13:01:04 GMT
════════════════════════
⌗ Tags: #access_control #ethical_hacking #bug_bounty #hacking #cybersecurity
Medium
From a Blocked Login Screen to Full Data Chain — How I Exploited Broken Access Control on Schneider…
Can a broken login screen with zero access lead to an 8.2 High vulnerability?
32 views
Daily Writeups
⤷ Title: Bypassing Access Control by Simply Changing the HTTP Method — A PortSwigger Lab Walkthrough
════════════════════════
𐀪 Author: Vivek Yadav
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 14:39:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #cybersecurity #access_control #web_security
Medium
Bypassing Access Control by Simply Changing the HTTP Method — A PortSwigger Lab Walkthrough
Lab: Method-based access control can be circumvented Difficulty: Practitioner Category: Access Control Vulnerabilities
18 views
Daily Writeups
⤷ Title: 302 Found & Bypass Techniques: A Practical Methodology for Security Testing
════════════════════════
𐀪 Author: N0aziXss
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 02:34:29 GMT
════════════════════════
⌗ Tags: #access_control #open_redirect #bug_bounty #302found #web_security
Medium
302 Found & Bypass Techniques: A Practical Methodology for Security Testing
Subtitle:
16 views
Daily Writeups
⤷ Title: Norwegian Cruise Line Vulnerability Permits Keycard Replay
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 13:06:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #CVE_2026_75907 #cybersecurity #Norwegian Cruise Line #RFID
Daily CyberSecurity
Norwegian Cruise Line Vulnerability Permits Keycard Replay
TL;DR CERT/CC published an advisory detailing an improper authentication flaw in shipboard door controllers. This Norwegian Cruise Line vulnerability allows attackers to clone passenger keycards b…
21 views
Daily Writeups
⤷ Title: HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 03:36:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access point security #CVE_2026_76721 #CVE_2026_76722 #HPE #HPE Instant ON vulnerabilities #HPE Networking #Instant On #Remote Code Execution
Daily CyberSecurity
HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical
TL;DR HPE Networking disclosed 18 HPE Instant ON vulnerabilities on September 29, 2026, in its Instant ON access points. Five are rated Critical, and the two worst score CVSS 9.8 with unauthentica…
24 views
Daily Writeups
⤷ Title: Access Control: Concepts, Vulnerabilities, and Prevention
════════════════════════
𐀪 Author: Harikishan
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 06:03:02 GMT
════════════════════════
⌗ Tags: #ethical_hacking #owasp_top_10 #privilege_escalation #idor_vulnerability #access_control
Medium
Access Control: Concepts, Vulnerabilities, and Prevention
Author: Harikishan Sharma
32 views
Daily Writeups
⤷ Title: Broken Access Control, NCIIPC — Responsible Disclosure - CASE STUDY
════════════════════════
𐀪 Author: Saffrin
════════════════════════
ⴵ Time: Sun, 11 Oct 2026 13:50:52 GMT
════════════════════════
⌗ Tags: #nodejs #application_security #access_control #secure_coding
Medium
Broken Access Control, NCIIPC — Responsible Disclosure - CASE STUDY
Finding and Fixing Broken Access Control: A Case Study on Unauthenticated Admin Pages
17 views
Daily Writeups
⤷ Title: The Hacker’s Cheat Sheet: OWASP Top 10.(2026)
════════════════════════
𐀪 Author: Nikhilvarun
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 10:50:02 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #cybersecurity #owasp_top_10 #access_control
Medium
The Hacker’s Cheat Sheet: OWASP Top 10.(2026)
Websites get hacked every day, and most of the time it’s not some Hollywood genius. It’s a basic mistake: a missing permission check, a…
24 views
Daily Writeups
⤷ Title: Broken Access Control: I Deleted a User Without Logging In (OWASP Top 10 #1)
════════════════════════
𐀪 Author: Zahid Hussain Shah
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 04:29:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #access_control #web_hacking #broken_access_control
Medium
Broken Access Control: I Deleted a User Without Logging In (OWASP Top 10 #1)
Part 1 of my OWASP Top 10 series — explained for beginners, with a live hands-on lab.
35 views
Daily Writeups
⤷ Title: Authentication & Authorization Eğitim Serisi — Bölüm 16: ABAC — Attribute-Based Access Control
════════════════════════
𐀪 Author: Sahin Yelkenci
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:45:40 GMT
════════════════════════
⌗ Tags: #application_security #spring_security #access_control #authorization #attribute_based_access
Medium
Authentication & Authorization Eğitim Serisi — Bölüm 16: ABAC — Attribute-Based Access Control
Modül V — Authorization Modelleri
32 views
Daily Writeups
⤷ Title: The User Was Removed. The Access Wasn’t.
════════════════════════
𐀪 Author: Ashour0x
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 16:19:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #access_control #web_security #idor #bug_bounty
Medium
The User Was Removed. The Access Wasn’t.
An unexpected API documentation discovery led me to a Broken Access Control vulnerability.
25 views