Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:05:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40342 #CVSS 10.0 #CWE_22 #database security #Firebird #infosec #Patch Alert #Path Traversal #rce #Remote Code Execution #sql injection
Daily CyberSecurity
CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database
Critical 10.0 CVSS flaw in Firebird Database allows RCE via path traversal in the engine loader. Attackers gain root/SYSTEM privileges. Patch to 5.0.4+ now.
15 views
Daily Writeups
⤷ Title: Total Database Collapse: Inside the ElectricSQL CVSS 10.0 SQL Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 14:06:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40906 #CVSS 10 #cyber attack #database security #ElectricSQL #infosec #Multi_tenancy #Patch Alert #PostgreSQL #sql injection #sqli
Daily CyberSecurity
Total Database Collapse: Inside the ElectricSQL CVSS 10.0 SQL Injection
ElectricSQL reveals a critical 10.0 CVSS SQL injection (CVE-2026-40906). Attackers can hijack PostgreSQL and bypass tenant isolation. Patch to v1.5.0 now.
24 views
Daily Writeups
⤷ Title: Critical 9.0 CVSS Flaw in ArcadeDB Allows Total Cross-Database Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 02:17:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ArcadeDB #Authorization Bypass #CVE_2026_44221 #cybersecurity #Data Isolation #database security #infosec #Multi_Model DBMS #Multi_tenancy #Patch Alert
Daily CyberSecurity
Critical 9.0 CVSS Flaw in ArcadeDB Allows Total Cross-Database Access
ArcadeDB 26.4.1 fixes a critical 9.0 CVSS authorization bypass (CVE-2026-44221) that dismantles database isolation. Secure your multi-model data and patch now!
22 views
Daily Writeups
⤷ Title: Critical MongoDB Flaw CVE-2026-8053 Paves the Way for Server Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 01:09:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_8053 #Cyber Security #database security #infosec #Mongod #mongodb #Patch Alert #rce #Time_Series Data
Daily CyberSecurity
Critical MongoDB Flaw CVE-2026-8053 Paves the Way for Server Takeover
Urgent: A memory corruption flaw in MongoDB time-series collections (CVE-2026-8053) enables server takeover. Patch to versions 8.3.2, 8.0.23, or 7.0.34 now.
9 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:36:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Redshift #aws security #CVE_2026_8178 #Cyber Security #Data Warehouse #database security #infosec #Java security #JDBC Driver #Patch Alert #rce
Daily CyberSecurity
Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
CVE-2026-8178 in Amazon Redshift JDBC Driver allows RCE via unsafe class loading. Protect your data warehouse and update to version 2.2.2 now!
12 views
Daily Writeups
⤷ Title: Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:20:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_7813 #Cyber Security #database security #infosec #Patch Alert #pgAdmin 4 #pgAdmin 9.15 #PostgreSQL #rce #sql injection
Daily CyberSecurity
Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution
pgAdmin 4 v9.15 fixes a 9.4 CVSS auth bypass and multiple RCE flaws. Attackers can execute OS commands via SQL tools. Upgrade your pgAdmin server now!
20 views
Daily Writeups
⤷ Title: Kubernetes Alert: 9.4 Severity RCE in CloudNativePG Enables PostgreSQL Superuser Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:01:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloud_native #CloudNativePG #CVE_2026_44477 #database security #infosec #Kubernetes Security #Patch Alert #PostgreSQL #privilege escalation #rce
Daily CyberSecurity
Kubernetes Alert: 9.4 Severity RCE in CloudNativePG Enables PostgreSQL Superuser Takeover
CVE-2026-44477 in CloudNativePG allows low-privilege users to gain root-level RCE via metrics exporters. Update to version 1.29.1 or 1.28.3 now!
25 views
Daily Writeups
⤷ Title: Massive PostgreSQL Update: 11 Vulnerabilities Patched as Version 14 Hits End-of-Life Warning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 02:12:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2026_6477 #CVE_2026_6637 #database security #DevOps #infosec #Patch Alert #Postgres Update #PostgreSQL #sql injection #SysAdmin
Daily CyberSecurity
Massive PostgreSQL Update: 11 Vulnerabilities Patched as Version 14 Hits End-of-Life Warning
PostgreSQL releases updates for versions 14-18 fixing 11 vulnerabilities (CVSS 8.8). Plus, critical End-of-Life deadline issued for Postgres 14.
8 views
Daily Writeups
⤷ Title: PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:51:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_2005 #database security #Heap Buffer Overflow #infosec #Patch Alert #pgcrypto #PoC Exploit #PostgreSQL #Public Disclosure #rce #Superuser Escalation
Daily CyberSecurity
PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE
Technical details and GitHub PoC exploits disclosed for PostgreSQL pgcrypto CVE-2026-2005. Low-privilege users can seize root superuser RCE. Patch now!
11 views
Daily Writeups
⤷ Title: Oracle Releases Massive May 2026 Critical Security Patch Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:40:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #database security #Enterprise Software #Oracle #Patch Tuesday #REST Data Services #security advisory #vulnerability management
Daily CyberSecurity
Oracle Releases Massive May 2026 Critical Security Patch Update
Stay secure with the latest Oracle security patch updates. Learn how these fixes address critical software vulnerabilities across multiple enterprise platforms.
8 views
Daily Writeups
⤷ Title: Apache Ignite Vulnerability Fixes Critical Security Loophole
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 30 May 2026 13:07:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Ignite #database security #Path Traversal #Software Patch #Vulnerability Advisory
Daily CyberSecurity
Apache Ignite Vulnerability Fixes Critical Security Loophole
A newly fixed Apache Ignite vulnerability allows arbitrary file read attacks via path traversal. Learn how to secure your database immediately.
37 views
Daily Writeups
⤷ Title: Critical MCP Toolbox Vulnerability Exposes Enterprise Databases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 11:52:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CORS Bypass #database security #MCP Toolbox #Model Context Protocol #Vulnerability
Daily CyberSecurity
Critical MCP Toolbox Vulnerability Exposes Enterprise Databases
A critical MCP Toolbox vulnerability exposes enterprise databases. Learn how this security flaw allows session hijacking and how to fix it.
38 views
Daily Writeups
⤷ Title: Your Firewall Is Lying to You: UFW, Docker, and the Ports You Thought Were Blocked
════════════════════════
𐀪 Author: Mohamed Mowafy
════════════════════════
ⴵ Time: Sun, 31 May 2026 15:34:58 GMT
════════════════════════
⌗ Tags: #database_security #application_security #cybersecurity #docker_security #docker
Medium
Your Firewall Is Lying to You: UFW, Docker, and the Ports You Thought Were Blocked
UFW is one of the first tools many of us enable on a fresh Linux server.
28 views
Daily Writeups
⤷ Title: The value of your business is not your database. It’s the data inside it.
════════════════════════
𐀪 Author: Humberto Spatz
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 15:13:12 GMT
════════════════════════
⌗ Tags: #startup #cybersecurity #data_integrity #database_security #infosec
Medium
The value of your business is not your database. It’s the data inside it.
### Zyko Shield watches the data inside your database and reverts unauthorized changes in real time — the layer your other tools don’t…
11 views
Daily Writeups
⤷ Title: Apache Doris SQL Injection Vulnerability CVE-2025-66336
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 08:01:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Doris #CVE_2025_66336 #cybersecurity #database security #sql injection
Daily CyberSecurity
Apache Doris SQL Injection Vulnerability CVE-2025-66336
A critical Apache Doris SQL injection vulnerability identified as CVE-2025-66336 allows attackers to bypass authentication. Upgrade your servers now.
8 views
Daily Writeups
⤷ Title: MariaDB Server Vulnerabilities Allow CVSS 10 Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 01:00:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48163 #CVE_2026_48165 #CVE_2026_49261 #database security #Galera Cluster #MariaDB #Shell Execution
Daily CyberSecurity
MariaDB Server Vulnerabilities Allow CVSS 10 Attacks
Three critical MariaDB server vulnerabilities, including a CVSS 10 flaw, allow attackers to execute shell commands. Patch your database servers immediately.
18 views
Daily Writeups
⤷ Title: DBSAT in 12c
════════════════════════
𐀪 Author: Zahir Mohideen
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 15:04:16 GMT
════════════════════════
⌗ Tags: #database_security #oracle_database #oracle_database_security #penetration_testing #dbsat
Medium
DBSAT in 12c
Oracle has provided a new tool to assess the security configuration and advise on it. It is a lightweight utility and the most important…
22 views
Daily Writeups
⤷ Title: Author: Hassan Mohammed Said
Platform: PortSwigger Web Security Academy
Difficulty: Easy…
════════════════════════
𐀪 Author: HASSAN MOHAMMED SAID
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 04:41:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #database_security #sql_injection #ethical_hacking
Medium
Author: Hassan Mohammed Said Platform: PortSwigger Web Security Academy Difficulty: Easy…
Introduction
24 views
Daily Writeups
⤷ Title: The Code Was Fine. The Access Model Was Not.
════════════════════════
𐀪 Author: Shiki65536@TechRoamer
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 09:05:37 GMT
════════════════════════
⌗ Tags: #application_security #postgresql #database_security #backend_development #supabase
Medium
The Code Was Fine. The Access Model Was Not.
This week, Supabase flagged several backend tables with: RLS Disabled in Public.
16 views
Daily Writeups
⤷ Title: Critical Apache Doris Flaw (CVE-2026-58319) Exposes Admin APIs to Unauthenticated Attackers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 13:30:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Doris #CVE_2026_58319 #database security #improper authentication #Vulnerability
Daily CyberSecurity
Critical Apache Doris Flaw (CVE-2026-58319) Exposes Admin APIs to Unauthenticated Attackers
TL;DR The Apache Doris project has patched a critical Apache Doris vulnerability, tracked as CVE-2026-58319. Some Frontend (FE) HTTP REST admin APIs were reachable without authentication. As a res…
11 views