Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: GitLab Patch: High-Severity XSS & AI Flaws Expose User Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 02:08:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Security #CVE_2025_9222 #DevSecOps #gitlab #GitLab Duo #software update #vulnerability management #XSS (Cross_Site Scripting)
Daily CyberSecurity
GitLab Patch: High-Severity XSS & AI Flaws Expose User Data
GitLab has issued a critical security release for its Community Edition (CE) and Enterprise Edition (EE) platforms, patching a raft of vulnerabilities that range from high-severity Cross-Site Scri…
18 views
Daily Writeups
⤷ Title: CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 08 Feb 2026 07:26:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Gateway #CVE_2026_1868 #CVSS 9.9 #DevSecOps #Duo Workflow #gitlab #Patch Alert #Remote Code Execution #Self_Hosted #Template Injection
Daily CyberSecurity
CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE
GitLab patches critical flaw CVE-2026-1868 (CVSS 9.9) in self-hosted AI Gateway. Vulnerability allows RCE via insecure templates. Update to v18.8.1 now.
40 views
Daily Writeups
⤷ Title: GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 01:58:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD #CVE_2025_7659 #Denial of Service #DevOps Security #gitlab #graphql #Markdown Vulnerability #Patch Alert #Token Theft #Web IDE
Daily CyberSecurity
GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
GitLab fixes critical CVE-2025-7659 (CVSS 8.0). Unauthenticated attackers can steal tokens via Web IDE. Update to v18.8.4 now to secure your code.
21 views
Daily Writeups
⤷ Title: GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 02:29:13 GMT
════════════════════════
⌗ Tags: #attack_surface_management #ssrf #cve_2021_39935 #gitlab #threat_intelligence
Medium
GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
In early February 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2021–39935, a Server-Side Request…
27 views
Daily Writeups
⤷ Title: How I Built a DevSecOps Pipeline That Catches Vulnerabilities Before They Hit Production
════════════════════════
𐀪 Author: Abed
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 09:57:42 GMT
════════════════════════
⌗ Tags: #sast #gitlab #ci_cd_pipeline #devsecops #application_security
Medium
How I Built a DevSecOps Pipeline That Catches Vulnerabilities Before They Hit Production
A hands-on guide to secret scanning, SAST, SCA, and automated vulnerability management with real GitLab CI configs and the offensive…
22 views
Daily Writeups
⤷ Title: Hired to Hack: North Korean Fake IT Workers Hijack Exec Identities in ‘Contagious Interview’ Scams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 00:18:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #Cyber Security #Fake IT Workers #GitLab Threat Intelligence #identity theft #infosec #Insider Threat #North Korean IT workers #Remote Work Security #social engineering
Daily CyberSecurity
Hired to Hack: North Korean Fake IT Workers Hijack Exec Identities in 'Contagious Interview' Scams
GitLab reveals how North Korean fake IT workers use 'Contagious Interview' scams to bypass hiring, steal data, and hijack executive digital identities.
15 views
Daily Writeups
⤷ Title: Code Red: GitLab’s Latest Security Update Patches High-Severity XSS and API DoS Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:37:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_1069 #CVE_2026_1090 #cybersecurity #Denial of Service #DevSecOps #GitLab security #infosec #Patch Alert #vulnerability management #XSS Vulnerability
Daily CyberSecurity
Code Red: GitLab's Latest Security Update Patches High-Severity XSS and API DoS Vulnerabilities
GitLab issues urgent security updates (18.9.2, 18.8.6, 18.7.6) fixing critical XSS (CVE-2026-1090) and DoS flaws. Patch self-managed instances today.
11 views
Daily Writeups
⤷ Title: Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:52:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Code Integrity #CVE_2026_5173 #DevOps Security #gitlab #GitLab CE #GitLab EE #graphql #infosec #privilege escalation #security update #terraform
Daily CyberSecurity
Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
GitLab releases critical patches (18.10.3+) for WebSocket flaws, Terraform DoS, and unauthorized privilege demotions. Update your self-managed instances!
29 views
Daily Writeups
⤷ Title: GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:30:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4922 #CVE_2026_5816 #DevSecOps #gitlab #GraphQL API #infosec #Patch Alert #security update #Session Hijacking #Web IDE
Daily CyberSecurity
GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
GitLab fixes high-severity GraphQL CSRF and Web IDE vulnerabilities in versions 18.11.1, 18.10.4, and 18.9.6. Protect your sessions and projects—patch now!
19 views
Daily Writeups
⤷ Title: Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:24:29 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure DevOps #CI/CD Security #DevSecOps #GitHub Actions #GitLab CI #jenkins #JFrog #Pentesting Tools #supply chain attack #Taint Tracking #Trajan #WebAssembly
Penetration Testing Tools
Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
Trajan isn't just a scanner. It maps dependency graphs and uses built-in attack plugins to simulate real-world CI/CD supply chain compromises.
23 views
Daily Writeups
⤷ Title: GitLab Critical Patch: High-Severity XSS and Unauthenticated DoS Flaws Hit Self-Managed Instances
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 01:39:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CE #CVE_2026_7481 #Cyber Security #DevOps Security #dos #EE #gitlab #GitLab 18.11.3 #GitLab Security Patch #infosec #Patch Alert #XSS
Daily CyberSecurity
GitLab Critical Patch: High-Severity XSS and Unauthenticated DoS Flaws Hit Self-Managed Instances
GitLab patches high-severity XSS (8.7 CVSS) and unauthenticated DoS flaws in versions 18.11.3, 18.10.6, and 18.9.7. Secure your DevOps pipeline now!
13 views
Daily Writeups
⤷ Title: Velvet Chollima Leaves Backend Keys Inside Critical GitLab Dead-Drop Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:16:41 +0000
════════════════════════
⌗ Tags: #Malware #Cryptocurrency Theft #cyber_espionage #EV Code Signing #GitLab Dead_Drop #infosec #Keylogger #Malware Analysis #OPSEC Failure #threat intelligence #Tralert FX #Velvet Chollima
Daily CyberSecurity
Velvet Chollima Leaves Backend Keys Inside Critical GitLab Dead-Drop Malware
A routine investigation into a low-detection installer has blown the doors off a highly organized, financially motivated cyber-espionage campaign. Orchestrated by a single operator or small team l…
20 views
Daily Writeups
⤷ Title: New GitLab Security Updates Fix Critical Flaws in Duo AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 00:14:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Security #CVE_2026_4868 #Duo AI Workflows #GitLab CE #GitLab EE #GitLab Patch #SecOps
Daily CyberSecurity
New GitLab Security Updates Fix Critical Flaws in Duo AI
The latest GitLab security updates address high-severity bugs. Download the patch to ensure the Duo AI flaw fixed protects your DevSecOps pipeline.
15 views
Daily Writeups
⤷ Title: Auditing GitLab: The CI/CD Kill Chain
════════════════════════
𐀪 Author: BHIS
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:00:00 +0000
════════════════════════
⌗ Tags: #Blue Team Tools #External/Internal #InfoSec 301 #Recon #Red Team #Red Team Tools #attacking #cicd #Defending #devops #GitLab #gogatoz #Phil Miller
Black Hills Information Security, Inc.
Auditing GitLab: The CI/CD Kill Chain - Black Hills Information Security, Inc.
Welcome to GoGatoZ — a purpose-built Go tool for GitLab CI/CD security auditing that can perform and automate the entire CI/CD kill chain along with everything those one-off scripts did and then some.
19 views
Daily Writeups
⤷ Title: Non-group members can be added to projects even though the “Users cannot be added to projects in…
════════════════════════
𐀪 Author: Rohmad Hidayah
════════════════════════
ⴵ Time: Tue, 09 Jun 2026 12:31:47 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #business_logic_flaw #gitlab
Medium
Non-group members can be added to projects even though the “Users cannot be added to projects in…
https://gitlab.com/gitlab-org/gitlab/-/work_items/551267
7 views
Daily Writeups
⤷ Title: Important GitLab Security Updates Address 12 Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 02:24:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_10087 #CVE_2026_10733 #CVE_2026_1500 #CVE_2026_3553 #CVE_2026_6269 #CVE_2026_6277 #CVE_2026_6552 #CVE_2026_6976 #CVE_2026_7250 #CVE_2026_8589 #CVE_2026_9204 #CVE_2026_9694 #cybersecurity #gitlab
Daily CyberSecurity
Important GitLab Security Updates Address 12 Vulnerabilities
Discover the latest GitLab security updates in patch release 19.0.2. Protect your self-managed servers from critical vulnerabilities like CVE-2026-6552.
11 views
Daily Writeups
⤷ Title: GitLab Security Updates Fix 13 Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 07:41:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_10086 #CVE_2026_10712 #CVE_2026_12053 #gitlab #Patch Release
Daily CyberSecurity
GitLab Security Updates Fix 13 Flaws
GitLab released critical security updates addressing 13 vulnerabilities, including severe cross-site scripting and information disclosure flaws.
8 views
Daily Writeups
⤷ Title: GitLab Addresses Critical Security Flaws: A Reminder of the Importance of Secure Development…
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 11:52:41 GMT
════════════════════════
⌗ Tags: #software_security #devseops #gitlab #application_security #cybersecurity
Medium
GitLab Addresses Critical Security Flaws: A Reminder of the Importance of Secure Development…
Organizations worldwide rely on GitLab to manage software development, collaboration, and DevSecOps workflows. Recently, GitLab released…
8 views
Daily Writeups
⤷ Title: CVE-2026–10087: Cross-Site Scripting in GitLab EE Analytics Dashboard
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 13:01:02 GMT
════════════════════════
⌗ Tags: #web_application_security #xss_vulnerability #cve #application_security #gitlab
Medium
CVE-2026–10087: Cross-Site Scripting in GitLab EE Analytics Dashboard
When analytics dashboards become a client-side execution surface
7 views
Daily Writeups
⤷ Title: GitLab Patch Release Fixes Eight Flaws, Including a High-Severity XSS Bug (CVE-2026-6896)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 02:15:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_13320 #CVE_2026_6896 #DevSecOps #GitLab EE #GitLab patch release #HTML Injection
Daily CyberSecurity
GitLab Patch Release Fixes Eight Flaws, Including a High-Severity XSS Bug (CVE-2026-6896)
TL;DR This GitLab patch release, shipped on July 8, 2026, covers versions 19.1.2, 19.0.4, and 18.11.7. The update fixes eight security flaws across Community and Enterprise Edition. The most sever…
19 views