Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: OpenAEV (OpenBAS) Unauthenticated Account Takeover Vulnerability Leads to Platform Compromise
════════════════════════
𐀪 Author: Nahit Sogutlu
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:19:39 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #code_review #account_takeover #hacking
Medium
OpenAEV (OpenBAS) Unauthenticated Account Takeover Vulnerability Leads to Platform Compromise
Prelude
25 views
Daily Writeups
⤷ Title: How-To Series: AI-Assisted Security Review of Commits and Merge Requests
════════════════════════
𐀪 Author: Andrew Kutuzov
════════════════════════
ⴵ Time: Thu, 14 May 2026 17:02:56 GMT
════════════════════════
⌗ Tags: #security #mcp_server #generative_ai_tools #application_security #code_review
Medium
How-To Series: AI-Assisted Security Review of Commits and Merge Requests
Hi everyone.
16 views
Daily Writeups
⤷ Title: Desktop Power, Mobile Control: OpenAI Brings Remote Codex Management to the ChatGPT App
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 03:57:18 +0000
════════════════════════
⌗ Tags: #Technology #android #ChatGPT Mobile #Code Review #Codex #DevOps 2026 #ios #macOS #mobile coding #OpenAI #remote development #Secure Relay
Daily CyberSecurity
Desktop Power, Mobile Control: OpenAI Brings Remote Codex Management to the ChatGPT App
OpenAI integrates Codex into the ChatGPT app! Monitor tasks, approve code, and manage remote macOS environments from your phone with encrypted secure relays.
20 views
Daily Writeups
⤷ Title: Kernel Chaos: Linus Torvalds Blasts “Drive-By” AI Bug Reports Paralyzing Linux Maintainers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:48:05 +0000
════════════════════════
⌗ Tags: #Linux #AI Bug Reports #Automated Vulnerability Submissions #Bug Regression #Code Review Fatigue #DevSecOps 2026 #Drive_By Patching #Linus Torvalds #Linux Kernel Development #Open Source Maintainers #Security Mailing List Bottleneck
Daily CyberSecurity
Kernel Chaos: Linus Torvalds Blasts “Drive-By” AI Bug Reports Paralyzing Linux Maintainers
The integration of automated artificial intelligence workflows engineered to unearth and submit security vulnerabilities has begun to heavily impact the Linux Kernel development ecosystem. In his …
21 views
Daily Writeups
⤷ Title: CVE-2025–54123 Hoverfly ≤1.11.3 Command Injection (RCE) Case Study & Patch Diffing
════════════════════════
𐀪 Author: phantom_hat
════════════════════════
ⴵ Time: Wed, 27 May 2026 23:02:16 GMT
════════════════════════
⌗ Tags: #vulnerability_research #command_injection #rce #vulnerability #code_review
Medium
CVE-2025–54123 Hoverfly ≤1.11.3 Command Injection (RCE) Case Study & Patch Diffing
﷽
30 views
Daily Writeups
⤷ Title: Remote Code Execution via Custom JS Function in Flowise
════════════════════════
𐀪 Author: Ajith Prabhu
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:38:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_research #code_review #remote_code_execution #application_security
Medium
Remote Code Execution via Custom JS Function in Flowise
During a security review of Flowise v3.1.1, I identified a path that allows authenticated users capable of creating chatflows to achieve…
10 views
Daily Writeups
⤷ Title: Introducing the Secure Code Review Challenge (Practice Real-World Reviews)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 18:53:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #code_review #software_development #application_security
Medium
Introducing the Secure Code Review Challenge (Practice Real-World Reviews)
📢 I have some exciting news: I’m launching a new series called the Secure Code Review Challenge. Check out the video version of this story…
13 views
Daily Writeups
⤷ Title: Web Frameworks: Code Review | TryHackMe Walkthrough (A Beginner’s Guide )
════════════════════════
𐀪 Author: Hibullahi AbdulAzeez
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 14:15:32 GMT
════════════════════════
⌗ Tags: #code_review #tryhackme_walkthrough #cybersecurit #web_security #tryhackme
Medium
Web Frameworks: Code Review | TryHackMe Walkthrough (A Beginner’s Guide )
“Read web app source like an attacker: trace user input to dangerous sinks, triage with Semgrep.”
28 views
Daily Writeups
⤷ Title: SQL Injection Bypass: Why Network-Level Fixes Fail to Secure Vulnerable Applications
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:45:04 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #infosec #cybersecurity #code_review
Medium
SQL Injection Bypass: Why Network-Level Fixes Fail to Secure Vulnerable Applications
Executive Summary
13 views
Daily Writeups
⤷ Title: From Source Code Disclosure to a Hardcoded Backdoor: How I Achieved Full Authentication Bypass
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:31:00 GMT
════════════════════════
⌗ Tags: #code_review #infosec #web_security #cybersecurity #bug_bounty
Medium
From Source Code Disclosure to a Hardcoded Backdoor: How I Achieved Full Authentication Bypass
Executive Summary
17 views
Daily Writeups
⤷ Title: Secure Code Review Challenge #1: Schooled — Solution (One Whitespace Character Away From Admin)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 22:56:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #code_review #software_development #application_security
Medium
Secure Code Review Challenge #1: Schooled — Solution (One Whitespace Character Away From Admin)
📢 The solution to Challenge #1: Schooled is live. Watch the video walkthrough here, or read the full write-up on GitHub.
19 views
Daily Writeups
⤷ Title: C# API CRUD Done Wrong, Then Done Right: A Complete Bad-Practices-vs-Best-Practices Walkthrough
════════════════════════
𐀪 Author: Manohari Jayachandran
════════════════════════
ⴵ Time: Sat, 29 Aug 2026 14:58:28 GMT
════════════════════════
⌗ Tags: #crud_api #sql_injection #debugging_csharp #code_review
Medium
C# API CRUD Done Wrong, Then Done Right: A Complete Bad-Practices-vs-Best-Practices Walkthrough
Most bad-code examples in tutorials are contrived — obviously wrong in a way real code never actually looks. This post takes a different…
15 views
Daily Writeups
⤷ Title: The Secure Code Review Challenge — Solution #4: File Converter (A Guessable ID Is an Accessible ID)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 21:49:05 GMT
════════════════════════
⌗ Tags: #software_development #code_review #application_security #cybersecurity
Medium
The Secure Code Review Challenge — Solution #4: File Converter (A Guessable ID Is an Accessible ID)
📢 The solution to Challenge #4: File Converter is live. Watch the video walkthrough here, or read the full write-up on GitHub.
12 views
Daily Writeups
⤷ Title: Your Code Works… But Is It Secure? A Free Review Can Tell You
════════════════════════
𐀪 Author: Jhavtech Studios
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 03:19:43 GMT
════════════════════════
⌗ Tags: #code_review #software_development #devops #application_security #cybersecurity
Medium
Your Code Works… But Is It Secure? A Free Review Can Tell You
If you are a tech founder or a lead developer, you’ve likely felt that incredible rush when a new feature finally goes live. The UI is…
14 views
Daily Writeups
⤷ Title: The Secure Code Review Challenge — Solution #5: Notekeeper (Insecure Deserialization)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 21:19:18 GMT
════════════════════════
⌗ Tags: #software_development #code_review #cybersecurity #application_security
Medium
The Secure Code Review Challenge — Solution #5: Notekeeper (Insecure Deserialization)
📢 The solution to Challenge #5: Notekeeper is live. Watch the video walkthrough here, or read the full write-up on GitHub.
24 views
Daily Writeups
⤷ Title: SuiteCRM SQL Injection: Breaking an XSS-Oriented Input Sanitization Layer
════════════════════════
𐀪 Author: Ahmed Rabeaa Mosaa (SadC0d3r)
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 13:39:43 GMT
════════════════════════
⌗ Tags: #security_research #pentester_labs #code_review #web_penetration_testing #penetration_testing
Medium
SuiteCRM SQL Injection: Breaking an XSS-Oriented Input Sanitization Layer
A Code Review and Vulnerability Research Journey
16 views
Daily Writeups
⤷ Title: The Secure Code Review Challenge — Solution #6: FileDrop (Username Is User Input Too)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Thu, 01 Oct 2026 16:55:52 GMT
════════════════════════
⌗ Tags: #software_development #cybersecurity #software_engineering #code_review #application_security
Medium
The Secure Code Review Challenge — Solution #6: 📥 FileDrop (Username Is User Input Too)
FileDrop looks like a textbook example of a well-built Node app: bcrypt, JWT with a pinned algorithm, NoSQL-injection sanitization, React…
10 views
Daily Writeups
⤷ Title: The two-minute API security checklist I run on every pull request
════════════════════════
𐀪 Author: Isaac Emmanuel
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 11:39:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #backend_development #software_engineering #code_review #api_security
Medium
The two-minute API security checklist I run on every pull request
Seven questions that catch more real bugs than most scanners
35 views
Daily Writeups
⤷ Title: Triage Copilot Security Review Findings Before You Apply the Fixes
════════════════════════
𐀪 Author: The Review Surface
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 12:01:02 GMT
════════════════════════
⌗ Tags: #ai_coding #application_security #github_copilot #secure_coding #code_review
Medium
Triage Copilot Security Review Findings Before You Apply the Fixes
A finding-by-finding ledger for verifying evidence, fix scope, re-testing, and optional PR dispositions before Copilot security suggestions…
7 views
Daily Writeups
⤷ Title: The Secure Code Review Challenge — Solution #7: Blogger (One Raw Query Is All It Takes)
════════════════════════
𐀪 Author: Mohamed AboElKheir
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 19:04:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #code_review #software_engineering #software_development #application_security
Medium
The Secure Code Review Challenge — Solution #7: Blogger (One Raw Query Is All It Takes)
Blogger gets almost everything right: every edit and delete checks who owns the post, the database layer uses the Knex query builder (so…
19 views