Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 22 Mar 2023 13:10:35 GMT
———————————————
✏️Title: Explaining Cross-Site Scripting (XSS) in Simple Terms
———————————————
📎Link: https://medium.com/p/9243329f7ed5
———————————————
Tags: #xss_attack #xss_vulnerability #cross_site_scripting #php_security #php_xss_vulnerability

Medium

Explaining Cross-Site Scripting (XSS) in Simple Terms

Cross-site scripting (XSS) is a type of security vulnerability that can allow attackers to inject malicious code into a web page viewed by…

6 views14:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 22 Mar 2023 13:08:08 GMT
———————————————
✏️Title: Explaining SQL Injection in Simple Terms
———————————————
📎Link: https://medium.com/p/a0fec8fb1f52
———————————————
Tags: #sql_injection #php_security #php_sql_injection #sql_injection_attack #sql_injection_examples

Medium

Explaining SQL Injection in Simple Terms

SQL injection is a type of cyber attack that exploits vulnerabilities in software systems that use SQL databases. In simple terms, it…

5 views14:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 24 Aug 2023 14:12:00 GMT
———————————————
✏️Title: Fortifying Your PHP Applications: Preventing SQL Injection
———————————————
📎Link: https://medium.com/p/7e857e4de741
———————————————
Tags: #php #php_security #best_practices #cybersecurity #sql_injection

Medium

Fortifying Your PHP Applications: Preventing SQL Injection

Safeguarding Your PHP Codebase from Malicious SQL Injection Attacks

15 views17:02

Daily Writeups

⤷ Title: PHP Security Tricks to Protect Your Applications
════════════════════════
𐀪 Author: Shuaeb Mohammad
════════════════════════
ⴵ Time: Fri, 14 Feb 2025 07:51:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #application_security #php #php_security

Medium

PHP Security Tricks to Protect Your Applications

In today’s digital landscape, where cyber threats are evolving at an alarming rate, securing your PHP applications is no longer optional —…

23 views09:04

Daily Writeups

⤷ Title: When PHP’s readfile() Goes Rogue: Exploiting LFI and SSRF in a SaaS Environment
════════════════════════
𐀪 Author: Avihay Eldad
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 14:00:09 GMT
════════════════════════
⌗ Tags: #php_security #ssrf #cloud_security #penetration_testing #lfi

Medium

When PHP’s readfile() Goes Rogue: Exploiting LFI and SSRF in a SaaS Environment

By Avihay Eldad & Sagi Dinar

57 views15:04

Daily Writeups

⤷ Title: PHP for Pentesting — Day 2
════════════════════════
𐀪 Author: Bazil Brohi
════════════════════════
ⴵ Time: Wed, 12 Nov 2025 18:54:10 GMT
════════════════════════
⌗ Tags: #php_security #web_app_pentesting #php #pentesting #cybersecurity

Medium

PHP for Pentesting — Day 2

In this Day 2 of PHP for Pentesters, we would learn how to create Polyglot Files and How to Defend against them, How to<html>
<head>…

14 views20:04

Daily Writeups

⤷ Title: CVE Hunting via Github Dorking
════════════════════════
𐀪 Author: Abhirup Konwar
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 13:55:42 GMT
════════════════════════
⌗ Tags: #cve #ethical_hacking #php_security #secure_code_review #programming

Medium

CVE Hunting via Github Dorking

Finding 0 days in PHP Open Source Code

19 views16:04

Daily Writeups

⤷ Title: Unpatched RCE: Livewire Filemanager Upload Flaw (CVE-2025-14894) Exposes Laravel Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:27:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_14894 #File Upload Vulnerability #Laravel #Livewire Filemanager #PHP Security #Remote Code Execution #Unpatched Vulnerability #Web Security

Daily CyberSecurity

Unpatched RCE: Livewire Filemanager Upload Flaw (CVE-2025-14894) Exposes Laravel Apps

Unpatched Livewire Filemanager flaw (CVE-2025-14894) allows unauthenticated RCE via malicious uploads. Check storage:link configurations immediately.

24 views02:04

Daily Writeups

⤷ Title: CVE-2026-34838 (CVSS 10): Critical RCE Flaw Uncovered in GroupOffice CRM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 14:03:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CRM Security #CVE_2026_34838 #GroupOffice #Guzzle #infosec #Insecure Deserialization #PHP Security #POP Chain #rce #Vulnerability Research #Web Shell

Daily CyberSecurity

CVE-2026-34838 (CVSS 10): Critical RCE Flaw Uncovered in GroupOffice CRM

CVE-2026-34838: A critical 10.0 flaw in GroupOffice allows authenticated users to trigger RCE via insecure deserialization. Update to v26.0.12 immediately!

17 views15:04

Daily Writeups

⤷ Title: Laravel Passport Patches Machine-to-Human Authentication Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:36:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Authentication Bypass #CVE_2026_39976 #infosec #Laravel #OAuth2 #passport #PHP Security #TokenGuard #web development

Daily CyberSecurity

Laravel Passport Patches Machine-to-Human Authentication Bypass

Laravel Passport is widely recognized as an OAuth2 server and API authentication package that is both simple and enjoyable for developers to implement. However, a newly disclosed security flaw has…

8 views09:04

Daily Writeups

⤷ Title: Supply Chain Sabotage: The Critical RCE Flaws Lurking in PHP Composer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 10:39:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Composer #CVE_2026_40176 #CVE_2026_40261 #cybersecurity #patch management #Perforce #PHP Security #remote command injection #Supply Chain Security #Vulnerability

Daily CyberSecurity

Supply Chain Sabotage: The Critical RCE Flaws Lurking in PHP Composer

Critical Remote Command Injection flaws in PHP Composer's Perforce integration (CVE-2026-40176 & CVE-2026-40261) could lead to full system compromise. Patch now.

18 views11:04

Daily Writeups

⤷ Title: CVE-2026-38526: Critical CVSS 10 Vulnerability Discovered in Krayin CRM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 12:35:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CRM Vulnerability #CVE_2026_38526 #CVSS 10 #infosec #Krayin CRM #Laravel Security #PHP Security #rce #Remote Code Execution #TinyMCE #Web Security

Daily CyberSecurity

CVE-2026-38526: Critical CVSS 10 Vulnerability Discovered in Krayin CRM

Krayin CRM faces a critical CVSS 10 RCE flaw in its TinyMCE upload endpoint. Authenticated users can seize server control. Patch version 2.2.x immediately!

10 views13:04

Daily Writeups

⤷ Title: Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 12:30:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVSS 10 #cybersecurity #Froxlor #infosec #Open Source Security #Path Traversal #PHP Security #rce #Server Management #vulnerability management #Web Shell

Daily CyberSecurity

Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors

Froxlor faces two critical flaws, including a CVSS 10. Learn how path traversal and config injection allow persistent RCE. Patch your server management today!

21 views13:04

Daily Writeups

⤷ Title: High-Severity PHPUnit Vulnerability Enables Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 13:45:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation Security #CI/CD security #CVE_2026_41570 #DevSecOps #infosec #Patch Alert #PHP Security #PHPUnit #Poisoned Pipeline #rce

Daily CyberSecurity

High-Severity PHPUnit Vulnerability Enables Remote Code Execution

PHPUnit CVE-2026-41570 allows RCE via invisible newline injection in CI/CD pipelines. Secure your build servers—update to 12.5.22 or 13.1.6 today.

15 views15:04

Daily Writeups

⤷ Title: Critical PrestaShop Flaw Allows Hijacking via “Contact Us” Form
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 02:11:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Back_office Hijacking #Cross_Site Scripting #CVE_2026_44212 #e_commerce security #infosec #Patch Alert #PHP Security #PrestaShop #Stored XSS #Web Security #XSS

Daily CyberSecurity

Critical PrestaShop Flaw Allows Hijacking via "Contact Us" Form

Urgent: PrestaShop patches a 9.3 severity XSS flaw (CVE-2026-44212) that allows unauthenticated attackers to hijack your store's back office. Update now!

32 views03:03

Daily Writeups

⤷ Title: Critical PHP SOAP Vulnerabilities Put Web Applications at Risk of Remote Code Execution
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Tue, 12 May 2026 09:55:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_application_security #remote_code_execution #application_security #php_security

Medium

Critical PHP SOAP Vulnerabilities Put Web Applications at Risk of Remote Code Execution

Security researchers have disclosed critical vulnerabilities in PHP’s SOAP extension that could allow attackers to execute arbitrary code…

14 views11:04

Daily Writeups

⤷ Title: Dual Sandbox Bypasses Threaten PHP Applications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 01:30:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_46633 #CVE_2026_46640 #PHP Security #Remote Code Execution #Sandbox Bypass #Twig Engine

Daily CyberSecurity

Dual Sandbox Bypasses Threaten PHP Applications

Twig project maintainers patched critical Twig RCE flaws allowing arbitrary code execution via sandbox bypasses. Update to 3.26.0.

8 views03:04

Daily Writeups

⤷ Title: CodeIgniter Vulnerability Enables Arbitrary Code Execution (CVSS 9.8)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 00:54:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CodeIgniter #CVE_2026_48062 #File Upload Vulnerability #PHP Security #rce

Daily CyberSecurity

CodeIgniter Vulnerability Enables Arbitrary Code Execution (CVSS 9.8)

A critical CodeIgniter vulnerability (CVE-2026-48062, CVSS 9.8) lets attackers bypass upload checks and trigger arbitrary code execution. Update now.

11 views02:04

About

Blog

Apps

Platform