Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: Você provavelmente está implementando filtros errado na sua API REST
════════════════════════
𐀪 Author: Erik Barroso
════════════════════════
ⴵ Time: Thu, 07 May 2026 22:11:41 GMT
════════════════════════
⌗ Tags: #filtros #sql_injection #sql #api #rest_api
Medium
Você provavelmente está implementando filtros errado na sua API REST
Filtros parecem apenas query params, mas envolvem validação, segurança, autorização, performance, paginação, cache e consistência de…
43 views
Daily Writeups
⤷ Title: Under Siege: Critical Auth Bypass Flaw in Burst Statistics Plugin Puts 115,000+ WordPress Sites at Risk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 06:44:34 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Hijacking #authentication bypass #Burst Statistics #CVE_2026_8181 #Patch Update 2026 #Plugin Flaw #REST API Exploit #website security #Wordfence #WordPress Vulnerability
Penetration Testing Tools
Under Siege: Critical Auth Bypass Flaw in Burst Statistics Plugin Puts 115,000+ WordPress Sites at Risk
WordPress websites have once again fallen under siege due to a critical flaw in a popular extension. On
17 views
Daily Writeups
⤷ Title: CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:49:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Secure Workload #Cisco Security Advisory #CVE_2026_20223 #CVSS 10 #Cyber Security #infosec #Patch Alert #privilege escalation #REST API Exploit #Tenant Cross_Bypass #Zero_Trust Microsegmentation
Daily CyberSecurity
CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
Cisco drops an urgent advisory for CVE-2026-20223 (CVSS 10.0) in Secure Workload. Unauthenticated remote attackers can steal full Site Admin privileges.
14 views
Daily Writeups
⤷ Title: API Pentesting | TryHackMe | practical challenge
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Sun, 24 May 2026 19:36:00 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #pentesting #api_security #rest_api #cybersecurity
Medium
API Pentesting | TryHackMe | practical challenge
Explore how to identify and exploit common API security vulnerabilities.
41 views
Daily Writeups
⤷ Title: Finding and Exploiting an unused API endpoint
════════════════════════
𐀪 Author: Dalila
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:00:05 GMT
════════════════════════
⌗ Tags: #rest_api_security #api_security #owasp_api #owasp_api_security_top_10 #api_endpoint_monitoring
Medium
Finding and Exploiting an unused API endpoint
This lab demonstrates how an unused API endpoint can be exploited. By analyzing HTTP requests and taking advantage of gaps revealed in…
36 views
Daily Writeups
⤷ Title: The Security Implications of HTTP QUERY: Analyzing RFC 10008
════════════════════════
𐀪 Author: Kabil Preetham K
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 14:15:54 GMT
════════════════════════
⌗ Tags: #api_security #rest_api #https #web_security #cybersecurity
Medium
The Security Implications of HTTP QUERY: Analyzing RFC 10008
The publication of Request for Comments (RFC) 10008 in June 2026 represents the most fundamental restructuring of HTTP protocol semantics…
14 views
Daily Writeups
⤷ Title: HTTP QUERY Method Explained:
════════════════════════
𐀪 Author: Simran Madhok
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 16:28:50 GMT
════════════════════════
⌗ Tags: #http_query #api_development #rest_api #api_security #web_development
Medium
HTTP QUERY Method Explained: RFC 10008 and the Future of Safe API Queries
Switch to QUERY http method Secure coding should always be the top priority for developers while building applications. Hence it was a welcome news when the HTTP QUERY Method was formally introduced …
23 views
Daily Writeups
⤷ Title: OWASP Top 10
════════════════════════
𐀪 Author: Gamuchirai
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 11:13:08 GMT
════════════════════════
⌗ Tags: #security #rest_api #api #hacking #owasp
Medium
OWASP Top 10
The OWASP Top 10 is one of the most widely used references for understanding critical web application security risks. It is not a complete…
15 views
Daily Writeups
⤷ Title: WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 01:55:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60137 #CVE_2026_63030 #Pre_Auth RCE #proof_of_concept #REST API #Searchlight Cyber #sql injection #wordpress #wp2shell
Daily CyberSecurity
WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public
TL;DR WordPress shipped 7.0.2 on July 17, 2026 to fix a critical flaw chain. The bug is a WordPress pre-auth RCE tracked as CVE-2026-63030, built on an SQL injection issue, CVE-2026-60137. Technic…
31 views
Daily Writeups
⤷ Title: wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 01:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60137 #CVE_2026_63030 #Pre_Auth RCE #REST API batch #webshell #WordPress Core RCE #wordpress security #wp2shell exploit
Daily CyberSecurity
wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
Attackers are already dropping webshells on WordPress sites through a flaw in WordPress Core itself. The bug chain, named wp2shell, delivers an unauthenticated WordPress Core RCE. No plugin, no th…
31 views
Daily Writeups
⤷ Title: The three layers approach to Secure REST API: OpenAPI, MuleSoft configuration and application code
════════════════════════
𐀪 Author: Nunzio Giovinazzi
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 11:28:58 GMT
════════════════════════
⌗ Tags: #api_security #mulesoft #openapi_specification #cybersecurity #rest_api_security
Medium
The three layers approach to Secure REST API: OpenAPI, MuleSoft configuration and application implementation
This is a more in-depth look at the presentation I gave at the Salesforce Agentforce World Tour in Milan last May about REST API security
42 views
Daily Writeups
⤷ Title: What Is an API Gateway? How Does It Work?
════════════════════════
𐀪 Author: Code Crack
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 16:53:24 GMT
════════════════════════
⌗ Tags: #api_gateway #rest_api #api_security #dotnet_core #api_development
Medium
What Is an API Gateway? How Does It Work?
Modern applications often consist of multiple microservices, each responsible for a specific task. Instead of allowing clients to…
32 views
Daily Writeups
⤷ Title: REST API Design Best Practices: Build Reliable APIs
════════════════════════
𐀪 Author: Filemakr
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 18:21:58 GMT
════════════════════════
⌗ Tags: #api_security #api_design #api_quality #rest_api
Medium
REST API Design Best Practices: Build Reliable APIs
Design predictable, secure and backward-compatible REST APIs using resource-oriented endpoints, HTTP semantics, structured errors…
21 views
Daily Writeups
⤷ Title: APIs in 2026: The New Digital Currency
════════════════════════
𐀪 Author: Jits Rit
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 10:21:50 GMT
════════════════════════
⌗ Tags: #api_security #ai #api_development #graphql #rest_api_design
Medium
APIs in 2026: The New Digital Currency
How design, security, and monetization are redefining what an API is for
26 views
Daily Writeups
⤷ Title: How Would You Prevent Unauthorized Users From Accessing Other Users’ Data?
════════════════════════
𐀪 Author: Gokulapriyan
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 02:19:19 GMT
════════════════════════
⌗ Tags: #security #api_security #prevention #unauthorized_access #rest_api_security
Medium
How Would You Prevent Unauthorized Users From Accessing Other Users’ Data?
One of the most important responsibilities of a backend application is protecting user data.
25 views
Daily Writeups
⤷ Title: REST API Security Best Practices: How to Secure REST API in 2026
════════════════════════
𐀪 Author: Andrew Hayes
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 12:12:27 GMT
════════════════════════
⌗ Tags: #api_security #bot_detection #rest_api #cybersecurity
Medium
REST API Security Best Practices: How to Secure REST API in 2026
What Is REST API Security?
17 views
Daily Writeups
⤷ Title: Building Custom Controllers in Odoo 19 Web Framework
════════════════════════
𐀪 Author: Byte Legions
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 13:40:45 GMT
════════════════════════
⌗ Tags: #rest_api #api_security #odoo_development #web_development #odoo
Medium
Building Custom Controllers in Odoo 19 Web Framework
Controllers are the seam where Odoo stops being a closed ERP and starts being a platform other systems can talk to. Every payment callback…
34 views
Daily Writeups
⤷ Title: API Security Standards: Protecting Modern Applications and Data
════════════════════════
𐀪 Author: Piyush Bhuyan
════════════════════════
ⴵ Time: Thu, 10 Sep 2026 10:35:00 GMT
════════════════════════
⌗ Tags: #api_security #rest_api_security #web_api_security #owasp_api_security_top_10
Medium
API Security Standards: Protecting Modern Applications and Data
APIs have become an important part of modern software. They allow websites, mobile apps, cloud platforms, and business systems to…
22 views
Daily Writeups
⤷ Title: Securing and Managing a Node.js REST API with WSO2 API Manager
════════════════════════
𐀪 Author: Kyaginthan
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 20:58:25 GMT
════════════════════════
⌗ Tags: #api_security #wso2 #api_management #rest_api #nodejs
Medium
Securing and Managing a Node.js REST API with WSO2 API Manager
Building a REST API is only one part of exposing a service to consumers. Once an API is used by multiple applications or users, additional…
21 views
Daily Writeups
⤷ Title: What Is Rate Limiting?
════════════════════════
𐀪 Author: Gamika Punsisi
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 15:37:01 GMT
════════════════════════
⌗ Tags: #backend_development #api_security #web_development #rest_api #rate_limiting
Medium
What Is Rate Limiting?
Rate limiting is a security and performance technique used to control the number of requests a user, device, or application can send to a…
51 views