Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:00:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2026_29146 #CVE_2026_34486 #Encryption Bypass #infosec #Java security #Kubernetes Security #request smuggling #vulnerability management #web server
Daily CyberSecurity
Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
Apache Tomcat discloses 10 vulnerabilities including encryption bypasses and Kubernetes token leaks. Upgrade now to secure your Java-based web applications.
11 views
Daily Writeups
⤷ Title: Log4j’s “Silent” Security Gap: New Advisories Warn of Data Loss and TLS Bypasses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 14:03:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Log4j #CVE_2026_34477 #CVE_2026_34480 #cybersecurity #infosec #Java security #Log Injection #Log4j 2.25.4 #Syslog Security #TLS Bypass
Daily CyberSecurity
Log4j’s "Silent" Security Gap: New Advisories Warn of Data Loss and TLS Bypasses
Apache Log4j 2.25.4 fixes 4 "silent" flaws, including TLS bypasses and log injection. Secure your infrastructure—upgrade now to prevent data loss.
32 views
Daily Writeups
⤷ Title: Critical 9.8 RCE Flaw in Qlik Talend Threatens Enterprise Data Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 08:03:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_6264 #Data Orchestration #infosec #Java security #JMX Port #Patch Alert #QlikTech #rce #Remote Code Execution #Talend
Daily CyberSecurity
Critical 9.8 RCE Flaw in Qlik Talend Threatens Enterprise Data Pipelines
Qlik issues a critical 9.8 CVSS alert for Talend JobServer and Runtime. Unauthenticated RCE via JMX ports puts data pipelines at risk. Patch immediately.
9 views
Daily Writeups
⤷ Title: Critical Pre-Auth RCE Found in OpenAM Identity Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:14:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Management #CVE_2026_33439 #Deserialization #infosec #JATO Framework #Java security #OpenAM #Patch Alert #Pre_Auth RCE #rce #Remote Code Execution
Daily CyberSecurity
Critical Pre-Auth RCE Found in OpenAM Identity Platform
Critical 9.3 RCE in OpenAM (CVE-2026-33439) allows unauthenticated attackers to execute OS commands via jato.clientSession. Patch your 16.0.5 servers now!
13 views
Daily Writeups
⤷ Title: Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 13:30:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40477 #CVE_2026_40478 #infosec #Java security #Patch Alert #rce #Server Side Template Injection #Spring Security #ssti #Thymeleaf #web development
Daily CyberSecurity
Critical 9.1 SSTI Flaws Unmasked in Thymeleaf Template Engine
Thymeleaf 3.1.4 fixes two critical 9.1 CVSS vulnerabilities. Unauthenticated attackers can bypass security for SSTI. Audit your user input and patch today!
13 views
Daily Writeups
⤷ Title: 7 Critical Vulnerabilities Threaten Spring Security 7.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:54:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_22752 #infosec #Java security #JWT Security #Patch Alert #Spring Security #Spring Security 7.0 #ssrf #TOCTOU #X.509 Impersonation
Daily CyberSecurity
7 Critical Vulnerabilities Threaten Spring Security 7.0
The Spring Security team has issued a series of security advisories detailing seven distinct vulnerabilities impacting the widely used authentication and authorization framework. While several fla…
15 views
Daily Writeups
⤷ Title: Critical Authentication Bypass in Apache HttpClient 5.6
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:45:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache HttpClient #Apache Software Foundation #CVE_2026_40542 #HTTP Components #infosec #Java security #Microservices Security #Mutual Authentication #Patch Alert #SCRAM_SHA_256
Daily CyberSecurity
Critical Authentication Bypass in Apache HttpClient 5.6
Apache HttpClient 5.6 reveals a critical auth flaw (CVE-2026-40542) in SCRAM-SHA-256. Secure your Java microservices—upgrade to 5.6.1 immediately.
30 views
Daily Writeups
⤷ Title: Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:42:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache ActiveMQ #CVE_2026_40466 #CVE_2026_41043 #CVE_2026_41044 #cybersecurity #infosec #Java security #Jolokia #JVM #Middleware Security #rce #Spring Framework #XSS
Daily CyberSecurity
Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
Critical RCE and XSS vulnerabilities hit Apache ActiveMQ (CVE-2026-41044, 40466). Authenticated attackers can hijack the JVM. Update to 5.19.6 or 6.2.5 now.
28 views
Daily Writeups
⤷ Title: The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 13:10:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40976 #CVSS 9.1 #cybersecurity #DevTools #infosec #Java security #Patch Alert #rce #Spring Boot #Spring Framework #Timing Attack
Daily CyberSecurity
The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
In a major update for the Java ecosystem, several critical vulnerabilities have been disclosed in Spring Boot, the framework that powers millions of modern enterprise applications. These flaws—CVE…
16 views
Daily Writeups
⤷ Title: Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 02:39:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CosmosDB #CVE_2026_40967 #CVE_2026_40978 #infosec #Java security #Patch Alert #RAG #Spring AI #sql injection #Vector Database
Daily CyberSecurity
Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores
Spring AI discloses two critical injection flaws (CVE-2026-40967 & 40978) in Vector Store implementations. Upgrade to v1.0.6 or v1.1.5 now to prevent data leaks.
27 views
Daily Writeups
⤷ Title: Apache MINA Hit by Twin Critical RCE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 01:00:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AbstractIoBuffer #Apache MINA #CVE_2026_41635 #cybersecurity #Deserialization #infosec #Java security #network_security #Patch Alert #rce
Daily CyberSecurity
Unfiltered: The 9.8 CVSS Deserialization Loophole Hijacking Apache MINA
Apache MINA (CVE-2026-41635) suffers a critical 9.8 CVSS RCE flaw. Learn how a deserialization filter bypass puts servers at risk and how to patch today.
22 views
Daily Writeups
⤷ Title: Apache MINA Fixes Critical RCE Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 02:30:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache MINA #CVE_2026_42778 #CVE_2026_42779 #Deserialization #infosec #IoBuffer #Java security #patch management #rce #Vulnerability Research
Daily CyberSecurity
Apache MINA Fixes Critical RCE Vulnerabilities
Apache MINA issues emergency patches for two 9.8 CVSS RCE flaws left behind by mistake. Unauthenticated attackers can bypass filters via deserialization.
16 views
Daily Writeups
⤷ Title: Apache Neethi Patches Triple Threat of DoS and Redirection Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 01:25:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Neethi #CVE_2026_42402 #CVE_2026_42403 #CVE_2026_42404 #Denial of Service #infosec #Java security #Patch Alert #ssrf #Web Services #WS_Policy
Daily CyberSecurity
Apache Neethi Patches Triple Threat of DoS and Redirection Flaws
Apache Neethi v3.2.2 patches critical flaws, including an exponential complexity attack and infinite loops. Secure your Java web services and patch today!
15 views
Daily Writeups
⤷ Title: Critical Flaws in Apache Thrift Threaten Multi-Language
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 01:00:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #CVE_2026_43868 #CVE_2026_43869 #CVE_2026_43870 #Denial of Service #infosec #Java security #Man in the Middle #Microservices Security #Node.js #Rust Security
Daily CyberSecurity
Critical Flaws in Apache Thrift Threaten Multi-Language
Apache Thrift v0.23.0 fixes critical Rust DoS, Java MitM, and Node.js path traversal flaws. Secure your cross-language microservices and upgrade immediately!
26 views
Daily Writeups
⤷ Title: Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 12:38:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41901 #cybersecurity #infosec #Java security #Patch Alert #rce #Sandbox Bypass #Server Side Template Injection #ssti #Thymeleaf #web development
Daily CyberSecurity
Critical 9.0 CVSS Flaw in Thymeleaf Enables Remote Server Injection
Critical 9.0 CVSS flaw in Thymeleaf (CVE-2026-41901) allows SSTI and arbitrary code execution. Secure your Java web apps—upgrade to v3.1.5.RELEASE now!
10 views
Daily Writeups
⤷ Title: Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:01:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Wicket #CVE_2026_40010 #CVE_2026_43646 #CVE_2026_43975 #infosec #Java security #Patch Alert #Path Traversal #Session Fixation #web development #XSS
Daily CyberSecurity
Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
Apache Wicket 10.9.0 fixes 3 Critical flaws: Path Traversal (CVE-2026-43975), Session Fixation, and Resource Guard bypass. Secure your Java apps and patch now!
13 views
Daily Writeups
⤷ Title: Apache Tomcat RCE Details and Exploit Code Now Public
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 03:22:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #Cyber Security #EncryptInterceptor #Exploit PoC #infosec #Java security #Patch Alert #rce #vulnerability disclosure
Daily CyberSecurity
Apache Tomcat RCE Details and Exploit Code Now Public
Apache Tomcat RCE alert: CVE-2026-34486 exploit code and details are now public. A "fail-open" flaw enables RCE via Tribes clustering. Update immediately.
21 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 01:36:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Redshift #aws security #CVE_2026_8178 #Cyber Security #Data Warehouse #database security #infosec #Java security #JDBC Driver #Patch Alert #rce
Daily CyberSecurity
Critical 9.2 CVSS RCE Found in Amazon Redshift JDBC Driver
CVE-2026-8178 in Amazon Redshift JDBC Driver allows RCE via unsafe class loading. Protect your data warehouse and update to version 2.2.2 now!
12 views
Daily Writeups
⤷ Title: How I Found a P2 Cryptographic Vulnerability in Android’s KeyManager — Google VRP
════════════════════════
𐀪 Author: Rajagiri Sai Ganesh
════════════════════════
ⴵ Time: Thu, 28 May 2026 19:55:39 GMT
════════════════════════
⌗ Tags: #android_security #java_security #bug_bounty #google_vrp #cryptography
Medium
How I Found a P2 Cryptographic Vulnerability in Android’s KeyManager — Google VRP
Unauthorised KeyManager modification via Java reflection bypass — enabling cryptographic registry tampering inside Google’s ecosystem
34 views
Daily Writeups
⤷ Title: Apache Fory Vulnerability: High Severity Flaw Bypasses Core Java Serialization Checks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 16:36:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Fory #CVE_2026_50076 #deserialization flaw #fory_core #Java security #Software Patch
Daily CyberSecurity
Apache Fory Vulnerability: High Severity Flaw Bypasses Core Java Serialization Checks
Learn how a new Apache Fory vulnerability impacts Java platforms. Apply the urgent Apache Fory vulnerability patch to protect your enterprise nodes.
30 views