Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: Prototype Pollution Masterclass: Practical Exploits, Detection & Node.js RCE
════════════════════════
𐀪 Author: PyUs3r
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 00:00:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #prototype_pollution #web_security #nodejs
Medium
Prototype Pollution Masterclass: Practical Exploits, Detection & Node.js RCE
Complete, hands-on guide to Prototype Pollution. Client & server exploitation, jQuery/hash vectors, DOM XSS, Node.js RCE for bug bounty.
17 views
Daily Writeups
⤷ Title: CyCTF25: I Hate Tasks Official Writeup
════════════════════════
𐀪 Author: Abdelnour Osman (DarkT)
════════════════════════
ⴵ Time: Sat, 08 Nov 2025 21:15:19 GMT
════════════════════════
⌗ Tags: #web_exploitation #ctf_writeup #prototype_pollution #capture_the_flag #cybersecurity
Medium
CyCTF25: I Hate Tasks Official Writeup
I Hate Tasks — a Node.js/Express web application using SQLite for persistence. The application allows users to create tasks and mark them…
20 views
Daily Writeups
⤷ Title: “RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:33:19 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CloudSEK #CVE_2025_55182 #IoT security #Next.js #Prototype Pollution #rce #React2Shell #RondoDox #Server Actions #Web Framework Security #XMRig
Daily CyberSecurity
“RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
The RondoDoX botnet has resurfaced with a potent new arsenal, shifting its sights from simple routers to enterprise-grade web frameworks. A new intelligence report from CloudSEK details a sprawlin…
20 views
Daily Writeups
⤷ Title: Prototype Pollution → Template Injection → RCE The Vulnerable Node Lab That Finally Made It Click
════════════════════════
𐀪 Author: ParadoxYab
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 09:03:44 GMT
════════════════════════
⌗ Tags: #rce #ssti #prototype_pollution #web_hacking #cybersecurity
Medium
Prototype Pollution → Template Injection → RCE The Vulnerable Node Lab That Finally Made It Click
Prototype Pollution was one of those vulnerabilities that I kept seeing in CVEs, blogs, and conference slides… but never felt like I truly…
43 views
Daily Writeups
⤷ Title: Menemukan Kerentanan Prototype Pollution di Absensi Pemerintahan: Lessons Learned dari Penetration…
════════════════════════
𐀪 Author: Ahmadfaizabdillah
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 11:27:49 GMT
════════════════════════
⌗ Tags: #hacking #cve #vulnerability #prototype_pollution #bug_hunting
Medium
Menemukan Kerentanan Prototype Pollution di Absensi Pemerintahan: Lessons Learned dari Penetration…
Selama penetration testing terhadap sistem absensi pemerintah daerah, saya menemukan kerentanan kritis CVE-2019–11358 (Prototype Pollution)…
58 views
Daily Writeups
⤷ Title: HTTP Down: High-Severity Axios Flaw (CVSS 7.5) Crashes Node.js Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 03:54:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_25639 #Denial of Service #HTTP Client #JavaScript Security #JSON Parsing #Node.js #Patch Alert #Prototype Pollution #web development
Daily CyberSecurity
HTTP Down: High-Severity Axios Flaw (CVSS 7.5) Crashes Node.js Servers
A high-severity vulnerability has been discovered in Axios, the immensely popular HTTP client used by millions of developers for Node.js and browser-based applications. The flaw, tracked as CVE-20…
25 views
Daily Writeups
⤷ Title: Sandbox Breakout: Critical SandboxJS Flaw (CVE-2026-25881) Allows Host Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:37:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Array Taint Bypass #CVE_2026_25881 #JavaScript Security #Patch Alert #Prototype Pollution #Remote Code Execution #Sandbox Escape #SandboxJS #Web Security
Daily CyberSecurity
Sandbox Breakout: Critical SandboxJS Flaw (CVE-2026-25881) Allows Host Takeover
Critical SandboxJS flaw CVE-2026-25881 allows sandbox escape via prototype pollution. Malicious code can modify host logic & execute RCE. Update to v0.8.31.
21 views
Daily Writeups
⤷ Title: CVE-2026-27212: Critical Swiper Prototype Pollution Flaw (CVSS 9.4) Exposes Global Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 00:12:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AppSec #CVE_2026_27212 #Cyber Security #infosec #JavaScript Security #npm Vulnerability #Patch Alert #Prototype Pollution #Remote Code Execution #Swiper
Daily CyberSecurity
CVE-2026-27212: Critical Swiper Prototype Pollution Flaw (CVSS 9.4) Exposes Global Apps
Critical prototype pollution flaw (CVE-2026-27212) in the Swiper npm package allows RCE, DoS, and auth bypass. Update to version 12.1.2 immediately.
15 views
Daily Writeups
⤷ Title: CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 12 Apr 2026 17:10:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS IMDSv2 #Axios #Cloud Security #CVE_2026_40175 #Header injection #infosec #javascript #Node.js #Prototype Pollution #rce #request smuggling
Daily CyberSecurity
CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
A critical CVSS 10 flaw in Axios (CVE-2026-40175) allows attackers to bypass AWS IMDSv2 and achieve RCE via header injection. Upgrade to v1.15.0 now!
47 views
Daily Writeups
⤷ Title: Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 12:01:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automation #CVSS 10 #infosec #JavaScript Security #n8n #Node.js #Patch Alert #Prototype Pollution #rce #Webhook Security #XML parsing
Daily CyberSecurity
Workflow Warning: The n8n CVSS 10.0 Prototype Pollution Crisis
Critical CVSS 10 and 9.4 vulnerabilities hit n8n. Prototype pollution in XML nodes can lead to full RCE. Patch to v2.18.1 or v1.123.32 immediately.
17 views
Daily Writeups
⤷ Title: Gadget Hunting in Practice
════════════════════════
𐀪 Author: Marduk I Am
════════════════════════
ⴵ Time: Sun, 17 May 2026 21:34:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #xss_attack #prototype_pollution #web_security #bug_bounty
Medium
Gadget Hunting in Practice
A practical workflow for finding prototype pollution gadgets and tracing them to XSS sinks
28 views
Daily Writeups
⤷ Title: Three Critical 9.4 CVSS Flaws Expose n8n Automation Nodes to Full RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 01:20:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Argument Injection #CVE_2026_44789 #CVE_2026_44790 #CVE_2026_44791 #DevSecOps #infosec #n8n #Patch Alert #Prototype Pollution #rce #Workflow Automation
Daily CyberSecurity
Three Critical 9.4 CVSS Flaws Expose n8n Automation Nodes to Full RCE
n8n fixes three critical 9.4 CVSS flaws (CVE-2026-44790/91/89). Authenticated users can break sandboxes for local file read and server-level RCE. Patch now!
13 views
Daily Writeups
⤷ Title: Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 02:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_47137 #CVE_2026_47140 #CVE_2026_47210 #Cyber Security #infosec #JSPI Promise #Node.js Sandbox Escape #patch bypass #Prototype Hijacking #Remote Code Execution #vm2 sandbox
Daily CyberSecurity
Five Critical vm2 Vulnerabilities Grant Instant Node.js Host RCE
Five critical sandbox escape flaws in vm2 (CVE-2026-47140 & more) allow unauthenticated remote code execution on the host server. Update now!
15 views
Daily Writeups
⤷ Title: React Router Vulnerabilities Patched in New Framework Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 02:40:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42211 #Denial of Service #npm Package #Prototype Pollution #React Router #software update
Daily CyberSecurity
React Router Vulnerabilities Patched in New Framework Releases
Recent updates address critical React Router vulnerabilities. Apply the latest React Router vulnerabilities patch to secure your web applications.
12 views
Daily Writeups
⤷ Title: New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 01:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_44492 #CVE_2026_44494 #infosec #Node.js #Prototype Pollution #Proxy Bypass
Daily CyberSecurity
New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
New Axios proxy vulnerabilities expose apps. A critical prototype pollution gadget allows full traffic interception. Secure patches are now available.
11 views
Daily Writeups
⤷ Title: i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 01:00:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_48713 #CVE_2026_48714 #i18next #i18next_fs_backend #Node.js Security #npm Vulnerability #Prototype Pollution
Daily CyberSecurity
i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads
CVE-2026-48713 exposes i18next prototype pollution in i18next-fs-backend, a CVSS 9.1 flaw threatening 1M+ weekly downloads. Update to 2.6.6 now.
14 views
Daily Writeups
⤷ Title: A Deep-Dive Into Hunting Prototype Pollution on Hashnode Live
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 10:21:49 GMT
════════════════════════
⌗ Tags: #hashcode #nodejsecurity #javascript_security #prototype_pollution #penetration_testing
Medium
A Deep-Dive Into Hunting Prototype Pollution on Hashnode Live
Hashnode is a popular blogging platform built on Next.js. While exploring its API surface during a routine security assessment, I noticed…
46 views
Daily Writeups
⤷ Title: Fools Mate, Revenge — TryHackMe Writeup
════════════════════════
𐀪 Author: ghosteye
════════════════════════
ⴵ Time: Sun, 05 Jul 2026 15:06:54 GMT
════════════════════════
⌗ Tags: #cwe_1321 #api_security #tryhackme #penetration_testing #prototype_pollution
Medium
Fools Mate, Revenge — TryHackMe Writeup
https://tryhackme.com/room/foolsm8v2
28 views
Daily Writeups
⤷ Title: [Fools Mate, Revenge] — Prototype Pollution in a Express.js Chess App
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 06:28:53 GMT
════════════════════════
⌗ Tags: #express_vulnerability #prototype_pollution #tryhackme_walkthrough #tryhackme
Medium
[Fools Mate, Revenge] — Prototype Pollution in a Express.js Chess App
A hands-on writeup on discovering and exploiting a prototype pollution flaw in an Express.js
27 views
Daily Writeups
⤷ Title: Fool’s Mate (TryHackMe): I Checkmated the Bot, the Server Still Said No — So I Polluted Its…
════════════════════════
𐀪 Author: Syedmohathashimali
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 03:58:05 GMT
════════════════════════
⌗ Tags: #prototype_pollution #tryhackme #ctf #cybersecurity #web_security
Medium
Fool’s Mate (TryHackMe): I Checkmated the Bot, the Server Still Said No — So I Polluted Its Prototype
TryHackMe writeup — Fool’s Mate, “Can you bypass the engine?”
21 views