Daily Writeups
@Daily_Writeups
3.88K subscribers
4 photos
134K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.88K subscribers
Daily Writeups
⤷ Title: Web Frameworks: Code Review | TryHackMe Walkthrough (A Beginner’s Guide )
════════════════════════
𐀪 Author: Hibullahi AbdulAzeez
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 14:15:32 GMT
════════════════════════
⌗ Tags: #code_review #tryhackme_walkthrough #cybersecurit #web_security #tryhackme
Medium
Web Frameworks: Code Review | TryHackMe Walkthrough (A Beginner’s Guide )
“Read web app source like an attacker: trace user input to dangerous sinks, triage with Semgrep.”
28 views
Daily Writeups
⤷ Title: SQL Injection Bypass: Why Network-Level Fixes Fail to Secure Vulnerable Applications
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:45:04 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #infosec #cybersecurity #code_review
Medium
SQL Injection Bypass: Why Network-Level Fixes Fail to Secure Vulnerable Applications
Executive Summary
11 views
Daily Writeups
⤷ Title: From Source Code Disclosure to a Hardcoded Backdoor: How I Achieved Full Authentication Bypass
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:31:00 GMT
════════════════════════
⌗ Tags: #code_review #infosec #web_security #cybersecurity #bug_bounty
Medium
From Source Code Disclosure to a Hardcoded Backdoor: How I Achieved Full Authentication Bypass
Executive Summary
15 views
Daily Writeups
⤷ Title: CVE-2026-15409: SonicWall SMA1000 SSRF Vulnerability (CVSS 10.0) Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 00:00:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #SMA1000 #SonicWall #ssrf
Daily CyberSecurity
CVE-2026-15409: SonicWall SMA1000 SSRF Vulnerability (CVSS 10.0) Exploited in the Wild
TL;DR SonicWall has released hotfixes for two actively exploited flaws in SMA1000 secure access appliances. The SonicWall SMA1000 SSRF vulnerability, tracked as CVE-2026-15409, carries a maximum C…
12 views
Daily Writeups
⤷ Title: NGINX Code Execution Vulnerability CVE-2026-42533 Patched Alongside Two Memory Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 02:04:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2026_42533 #CVE_2026_56434 #CVE_2026_60005 #F5 #nginx
Daily CyberSecurity
NGINX Code Execution Vulnerability CVE-2026-42533 Patched Alongside Two Memory Flaws
TL;DR F5 has patched three memory safety flaws in NGINX Plus and NGINX Open Source. The most severe, CVE-2026-42533, is an NGINX code execution vulnerability in the map directive. It scores 9.2 (C…
25 views
Daily Writeups
⤷ Title: Golden Gh0st RAT: Inside the DigiCert Certificate Theft
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 07:33:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Code Signing #CylindricalCanine #DigiCert #Golden Gh0st RAT #GoldenEyeDog #SmartScreen
Information Security News
Golden Gh0st RAT: Inside the DigiCert Certificate Theft
Cybercriminals have found a way to weaponise Windows’ faith in digital signatures. They compromised the workstation of a DigiCert employee and intercepted certificates bound for the company&…
12 views
Daily Writeups
⤷ Title: Secure Code Review Challenge #1: Schooled — Solution (One Whitespace Character Away From Admin)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 22:56:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #code_review #software_development #application_security
Medium
Secure Code Review Challenge #1: Schooled — Solution (One Whitespace Character Away From Admin)
📢 The solution to Challenge #1: Schooled is live. Watch the video walkthrough here, or read the full write-up on GitHub.
18 views
Daily Writeups
⤷ Title: NVIDIA BlueField Flaw CVE-2026-65094 Allows Code Execution (CVSS 9.0)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:15:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #ConnectX #CVE_2026_65094 #DOCA #nvidia #NVIDIA BlueField #VIRTIO_Net
Daily CyberSecurity
NVIDIA BlueField Flaw CVE-2026-65094 Allows Code Execution (CVSS 9.0)
TL;DR NVIDIA patched a critical NVIDIA BlueField vulnerability tracked as CVE-2026-65094. The VIRTIO-Net flaw scores a CVSS of 9.0. A virtual machine user could trigger code execution in the affec…
12 views
Daily Writeups
⤷ Title: NVIDIA Dynamo Code Execution Flaw CVE-2026-24254 CVSS 9.8
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 09:29:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2026_24254 #CVE_2026_47619 #Linux Security #NVIDIA Dynamo Flaw
Daily CyberSecurity
NVIDIA Dynamo Code Execution Flaw CVE-2026-24254 CVSS 9.8
TL;DR NVIDIA recently published an urgent software update for NVIDIA Dynamo for Linux. This update patches several security issues, including a critical NVIDIA Dynamo flaw. The most severe vulnera…
17 views
Daily Writeups
⤷ Title: Docker CopyEscape Flaw (CVE-2026-17106) Enables Host File Overwrite and Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 14:22:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Write #Code Execution #container security #CopyEscape #CVE_2026_17106 #docker #Docker Sandboxes
Daily CyberSecurity
Docker CopyEscape Flaw (CVE-2026-17106) Enables Host File Overwrite and Code Execution
TL;DR: Imperva’s Red Team disclosed a Docker CopyEscape vulnerability that turns the ordinary docker cp command into a host file-write primitive. Tracked as CVE-2026-17106, the flaw carries …
19 views
Daily Writeups
⤷ Title: CVE-2026-19478 (CVSS 9.4): GitLab GraphQL Code Injection Flaw Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 01:40:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CSRF #CVE_2026_19478 #CVE_2026_19650 #gitlab #graphql
Daily CyberSecurity
CVE-2026-19478 (CVSS 9.4): GitLab GraphQL Code Injection Flaw Patched
TL;DR GitLab shipped an out-of-band critical patch on August 17, 2026. It fixes CVE-2026-19478, a GraphQL code injection flaw rated CVSS 9.4. Under certain conditions, an unauthenticated attacker …
15 views
Daily Writeups
⤷ Title: OpenAI Codex Security vs Anthropic Claude Security vs Google CodeMender: Who Is Building the Future…
════════════════════════
𐀪 Author: D09r
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 05:29:40 GMT
════════════════════════
⌗ Tags: #app_security #application_security #appsec #claude_security #code_security
Medium
OpenAI Codex Security vs Anthropic Claude Security vs Google CodeMender: Who Is Building the Future of AI-Powered AppSec?
Application security is entering a new phase.
25 views
Daily Writeups
⤷ Title: C# API CRUD Done Wrong, Then Done Right: A Complete Bad-Practices-vs-Best-Practices Walkthrough
════════════════════════
𐀪 Author: Manohari Jayachandran
════════════════════════
ⴵ Time: Sat, 29 Aug 2026 14:58:28 GMT
════════════════════════
⌗ Tags: #crud_api #sql_injection #debugging_csharp #code_review
Medium
C# API CRUD Done Wrong, Then Done Right: A Complete Bad-Practices-vs-Best-Practices Walkthrough
Most bad-code examples in tutorials are contrived — obviously wrong in a way real code never actually looks. This post takes a different…
15 views
Daily Writeups
⤷ Title: The Secure Code Review Challenge — Solution #4: File Converter (A Guessable ID Is an Accessible ID)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 21:49:05 GMT
════════════════════════
⌗ Tags: #software_development #code_review #application_security #cybersecurity
Medium
The Secure Code Review Challenge — Solution #4: File Converter (A Guessable ID Is an Accessible ID)
📢 The solution to Challenge #4: File Converter is live. Watch the video walkthrough here, or read the full write-up on GitHub.
12 views
Daily Writeups
⤷ Title: Your Code Works… But Is It Secure? A Free Review Can Tell You
════════════════════════
𐀪 Author: Jhavtech Studios
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 03:19:43 GMT
════════════════════════
⌗ Tags: #code_review #software_development #devops #application_security #cybersecurity
Medium
Your Code Works… But Is It Secure? A Free Review Can Tell You
If you are a tech founder or a lead developer, you’ve likely felt that incredible rush when a new feature finally goes live. The UI is…
14 views
Daily Writeups
⤷ Title: TryHackMe: Flag Vault 2 Walkthrough
════════════════════════
𐀪 Author: Seyon Suriyakumaran
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 04:31:02 GMT
════════════════════════
⌗ Tags: #tryhackme #code #ctf #vulnerability
Medium
TryHackMe: Flag Vault 2 Walkthrough
Hackfinity Battle 2025 — PWN: Breaking a “Fixed” Format String Vulnerability
24 views
Daily Writeups
⤷ Title: The Secure Code Review Challenge — Solution #5: Notekeeper (Insecure Deserialization)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 21:19:18 GMT
════════════════════════
⌗ Tags: #software_development #code_review #cybersecurity #application_security
Medium
The Secure Code Review Challenge — Solution #5: Notekeeper (Insecure Deserialization)
📢 The solution to Challenge #5: Notekeeper is live. Watch the video walkthrough here, or read the full write-up on GitHub.
23 views
Daily Writeups
⤷ Title: SuiteCRM SQL Injection: Breaking an XSS-Oriented Input Sanitization Layer
════════════════════════
𐀪 Author: Ahmed Rabeaa Mosaa (SadC0d3r)
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 13:39:43 GMT
════════════════════════
⌗ Tags: #security_research #pentester_labs #code_review #web_penetration_testing #penetration_testing
Medium
SuiteCRM SQL Injection: Breaking an XSS-Oriented Input Sanitization Layer
A Code Review and Vulnerability Research Journey
14 views
Daily Writeups
⤷ Title: AI Coding Assistants are quietly shipping vulnerabilities into your codebase
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 15:46:01 GMT
════════════════════════
⌗ Tags: #infosec #code #cybersecurity #ai
Medium
AI Coding Assistants are quietly shipping vulnerabilities into your codebase
The productivity gain is real. So is the debt you’re not tracking.
22 views
Daily Writeups
⤷ Title: The Secure Code Review Challenge — Solution #6: FileDrop (Username Is User Input Too)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 16:55:52 GMT
════════════════════════
⌗ Tags: #software_development #cybersecurity #software_engineering #code_review #application_security
Medium
The Secure Code Review Challenge — Solution #6: 📥 FileDrop (Username Is User Input Too)
FileDrop looks like a textbook example of a well-built Node app: bcrypt, JWT with a pinned algorithm, NoSQL-injection sanitization, React…
5 views