Daily Writeups
@Daily_Writeups
4.08K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.08K subscribers
Daily Writeups
⤷ Title: HTML Injection & Content Spoofing: How Attackers Trick Users (and how to find & fix it)
════════════════════════
𐀪 Author: Omniaelagroudy
════════════════════════
ⴵ Time: Sat, 04 Oct 2025 18:54:58 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #html_injection #xss_vulnerability #web_security
Medium
HTML Injection & Content Spoofing: How Attackers Trick Users (and how to find & fix it)
HTML Injection & Content Spoofing: How Attackers Trick Users (and how to find & fix it) What is HTML injection and content spoofing? HTML injection occurs when user-provided data is rendered by the …
29 views
Daily Writeups
⤷ Title: bWAPP Series: HTML Injection — Reflected (POST) — High Severity
════════════════════════
𐀪 Author: Madhumathi chamarthi
════════════════════════
ⴵ Time: Tue, 07 Oct 2025 11:28:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_application_security #owasp_top_10 #owasp #html_injection
Medium
bWAPP Series: HTML Injection — Reflected (POST) — High Severity
Introduction
19 views
Daily Writeups
⤷ Title: Unescaped HTML in Email Templates — How I Turned a Simulator into a Phishing Vector
════════════════════════
𐀪 Author: Xormium
════════════════════════
ⴵ Time: Sat, 18 Oct 2025 08:02:39 GMT
════════════════════════
⌗ Tags: #html_injection #cybersecurity #websecurity_testing #ethical_hacking #bug_bounty
Medium
Unescaped HTML in Email Templates — How I Turned a Simulator into a Phishing Vector
When a harmless message box becomes a design time-bomb
35 views
Daily Writeups
⤷ Title: The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Wed, 22 Oct 2025 03:46:43 GMT
════════════════════════
⌗ Tags: #html_injection #web_security #infosec #coffinxp #bug_bounty
Medium
The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳
The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳ A short recon story about a delayed HTML injection, a surprising phishing vector, and why every output channel …
15 views
Daily Writeups
⤷ Title: High-Severity GitLab XSS Flaw (CVE-2025-12716) Risks Session Hijack via Malicious Wiki Pages
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 01:46:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_12716 #gitlab #HTML Injection #Information Disclosure #Session Hijack #Wiki #XSS
Daily CyberSecurity
High-Severity GitLab XSS Flaw (CVE-2025-12716) Risks Session Hijack via Malicious Wiki Pages
A High-severity XSS (CVSS 8.7) flaw in GitLab Wiki allows session hijack via malicious pages, enabling unauthorized actions. Other HTML Injection flaws patched. Self-managed admins must update to v18.6.2.
17 views
Daily Writeups
⤷ Title: HackerOne HTML Injection Fix Bypass‍
════════════════════════
𐀪 Author: ab.infosec
════════════════════════
ⴵ Time: Sun, 18 Jan 2026 16:22:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #hackerone #html_injection
Medium
HackerOne HTML Injection Fix Bypass👨‍💻
“Most bug bounty hunters stop after a fix is deployed. That’s a mistake.”
34 views
Daily Writeups
⤷ Title: Exploiting Stored HTML Injection via Broken Email Ownership Validation
════════════════════════
𐀪 Author: Aniket Singh
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 06:09:08 GMT
════════════════════════
⌗ Tags: #account_takeover #phishing #phishing_email #html_injection #bug_bounty
Medium
🔐 Exploiting Stored HTML Injection via Broken Email Ownership Validation
🕵️ Introduction
34 views
Daily Writeups
⤷ Title: 1-HTML Injection Bug- Web Penetration Testing Series
════════════════════════
𐀪 Author: Hackerssg
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 21:08:22 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #html_injection #owasp_top_10 #penetration_testing #bug_bounty
Medium
1-HTML Injection Bug- Web Penetration Testing Series
This article explains HTML Injection in the most beginner-friendly way — with examples, real impact, and how to prevent it. Whether you’re…
37 views
Daily Writeups
⤷ Title: Forcing an AI App to generate Payloads to Cause HTML Injection
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 01:11:07 GMT
════════════════════════
⌗ Tags: #html_injection #bug_bounty #cybersecurity #ai #bug_bounty_reports
Medium
Forcing an AI App to generate Payloads to Cause HTML Injection
Hi everyone, in this article, I’ll walk through a recent penetration test I conducted against a custom-built AI chatbot. As usual, we’ll…
12 views
Daily Writeups
⤷ Title: ️‍♂️ A Fun HTML Injection Story — When a “File Name” Became My Entry Point
════════════════════════
𐀪 Author: Diwas mundra
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 21:42:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #sql_injection #vulnerability #html_injection
Medium
🕵️‍♂️ A Fun HTML Injection Story — When a “File Name” Became My Entry Point
Sometimes, vulnerabilities don’t scream… They just quietly sit inside something as innocent as a file name field 😄
19 views
Daily Writeups
⤷ Title: Invisible Ink: Critical 9.6 CVSS jsPDF Flaw Turns Generated Documents into XSS Traps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 13:30:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_31938 #cybersecurity #HTML Injection #infosec #JavaScript Security #jsPDF #Vulnerability #web development #XSS
Daily CyberSecurity
Invisible Ink: Critical 9.6 CVSS jsPDF Flaw Turns Generated Documents into XSS Traps
A critical 9.6 CVSS vulnerability in jsPDF (CVE-2026-31938) allows attackers to inject malicious scripts via XSS. Update to version 4.2.1 immediately.
22 views
Daily Writeups
⤷ Title: HTML Injection Bug Bounty: How I Found a Persistent Vulnerability on a Government of India Portal
════════════════════════
𐀪 Author: Vanshrathore
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 18:22:08 GMT
════════════════════════
⌗ Tags: #bug_bounty #html_injection #pentesting #money #bug_hunting
Medium
HTML Injection Bug Bounty: How I Found a Persistent Vulnerability on a Government of India Portal
LinkedIn:- https://www.linkedin.com/in/vansh-rathore-cybersecurity?utm_source=share_via&utm_content=profile&utm_medium=member_android
29 views
Daily Writeups
⤷ Title: From P4 to Critical: How I Weaponized target.com’s Email Infrastructure
════════════════════════
𐀪 Author: Vanshrathore
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 15:18:58 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #html_injection #bug_hunting #money
Medium
🔥From P4 to Critical: How I Weaponized target.com’s Email Infrastructure
LinkedIn:- https://www.linkedin.com/in/vansh-rathore-cybersecurity?utm_source=share_via&utm_content=profile&utm_medium=member_android
22 views
Daily Writeups
⤷ Title: bWAPP: HTML Injection — Reflected (GET) Challenge (Low & Medium Security)
════════════════════════
𐀪 Author: Kamal S
════════════════════════
ⴵ Time: Sat, 09 May 2026 12:04:24 GMT
════════════════════════
⌗ Tags: #injection #owasp #html_injection #bwapp #bug_bounty
Medium
bWAPP: HTML Injection — Reflected (GET) Challenge (Low & Medium Security)
HTML Injection is one of the most fundamental web application vulnerabilities and often serves as a stepping stone to more advanced attacks…
16 views
Daily Writeups
⤷ Title: The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Tue, 19 May 2026 09:00:53 GMT
════════════════════════
⌗ Tags: #html_injection #web_security #infosec #coffinxp #bug_bounty
Medium
The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳
The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳ A short recon story about a delayed HTML injection, a surprising phishing vector, and why every output channel …
6 views
Daily Writeups
⤷ Title: HTML Injection in Outbound Emails: An Overlooked Security Risk
════════════════════════
𐀪 Author: vibhuti bhatt
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 12:26:37 GMT
════════════════════════
⌗ Tags: #html_injection #vulnerability #application_security #pentesting #injection_in_email
Medium
HTML Injection in Outbound Emails: An Overlooked Security Risk
Introduction
20 views
Daily Writeups
⤷ Title: I Turned a “What’s Your Name?” Field Into a Malicious Link — My First HTML Injection
════════════════════════
𐀪 Author: Prashant Raj
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:46:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #bug_hunting #html_injection #technology
Medium
I Turned a “What’s Your Name?” Field Into a Malicious Link — My First HTML Injection
TryHackMe — How Websites Work
12 views
Daily Writeups
⤷ Title: bWAPP HTML Injection — Reflected (URL) and Stored (Blog)
════════════════════════
𐀪 Author: Kamal S
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 14:03:38 GMT
════════════════════════
⌗ Tags: #injection #html_injection #owasp #bug_bounty #bwapp
Medium
bWAPP HTML Injection — Reflected (URL) and Stored (Blog)
Web applications heavily rely on user input, but improper handling of this input often introduces security vulnerabilities. One such…
11 views
Daily Writeups
⤷ Title: GitLab Patch Release Fixes Eight Flaws, Including a High-Severity XSS Bug (CVE-2026-6896)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 02:15:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_13320 #CVE_2026_6896 #DevSecOps #GitLab EE #GitLab patch release #HTML Injection
Daily CyberSecurity
GitLab Patch Release Fixes Eight Flaws, Including a High-Severity XSS Bug (CVE-2026-6896)
TL;DR This GitLab patch release, shipped on July 8, 2026, covers versions 19.1.2, 19.0.4, and 18.11.7. The update fixes eight security flaws across Community and Enterprise Edition. The most sever…
22 views
Daily Writeups
⤷ Title: How I Turned an “Informative” HTML Injection into My First Paid Bounty
════════════════════════
𐀪 Author: Muhammadmaftuhk
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 23:57:41 GMT
════════════════════════
⌗ Tags: #web_security #html_injection #bug_bounty #bug_bounty_writeup #cybersecurity
Medium
How I Turned an “Informative” HTML Injection into My First Paid Bounty
TL;DR: HTML Injection is often marked as Informative or N/A by triagers. However, by demonstrating how a hidden CSS overlay bypassed the…
27 views