Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Tue, 18 Jul 2023 14:56:49 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: How to Check URLs for SSRF Attacks in C/C++
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/6dcc89976ae2
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cybersecurity #c_programming #api #server_side_request #ssrf
Medium
How to Check URLs for SSRF Attacks in C/C++
If our web application isn’t validating user input properly, it can be vulnerable to SSRF (Server-Side Request Forgery) attack. Using the…
9 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Fri, 25 Aug 2023 09:18:29 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Server Side Request Forgery (SSRF)
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/64a5ddaaeda0
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #server_side_request #blacklist #ssrf #web_application_security #owasp_top_10
Medium
Server Side Request Forgery (SSRF)
SSRF Nedir?
 SSRF (Sunucu TaraflΔ± Δ°stek Sahteciliği), web uygulamalarΔ±nda bulunan ve OWASP Top 10 listesinde yer alan ΓΆnemli bir gΓΌvenlik…
18 views
Daily Writeups
β€· Title: Server-Side Request Forgery (SSRF)
════════════════════════
π€ͺ Author: SevdeGul
════════════════════════
β΄΅ Time: Mon, 13 Jan 2025 15:33:48 GMT
════════════════════════
βŒ— Tags: #ssrf #ssrf_vulnerability #server_side_request #ssrf_attack #blind_ssrf
Medium
Server-Side Request Forgery (SSRF)
SSRF Nedir?
28 views
Daily Writeups
β€· Title: Veeam Releases Patch for High-Risk SSRF Vulnerability CVE-2025-23082 in Azure Backup Solution
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Thu, 16 Jan 2025 01:31:33 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2025_23082 #Server_Side Request Forgery #Veeam Backup for Microsoft Azure
Cybersecurity News
Veeam Releases Patch for High-Risk SSRF Vulnerability CVE-2025-23082 in Azure Backup Solution
Learn about a critical vulnerability in Veeam Backup for Microsoft Azure (CVE-2025-23082) and its potential impact on network security.
19 views
Daily Writeups
β€· Title: How I Exploited an SSRF Vulnerability & Earned $5000β€Šβ€”β€ŠReal-World Exploit!
════════════════════════
π€ͺ Author: TheIndianNetwork
════════════════════════
β΄΅ Time: Sun, 23 Mar 2025 08:23:23 GMT
════════════════════════
βŒ— Tags: #ssrf_vulnerability #server_side_request #bug_bounty_tips #bug_bounty #ssrf_attack
Medium
πŸ”₯ How I Exploited an SSRF Vulnerability & Earned $5000 β€” Real-World Exploit! πŸ”₯
Introduction
πŸ‘1
40 views
Daily Writeups
β€· Title: Critical SSRF Vulnerability Patched in LNbits Lightning Wallet Server
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 10 Apr 2025 00:40:04 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Bitcoin #Cryptocurrency Security #CVE_2025_32013 #cybersecurity #Lightning Network #LNbits #LNURL #Server_Side Request Forgery #ssrf
Daily CyberSecurity
Critical SSRF Vulnerability Patched in LNbits Lightning Wallet Server
A critical SSRF vulnerability (CVE-2025-32013) has been patched in LNbits, the Lightning Network wallet server. Learn how attackers could exploit LNURL authentication to access internal services and how to protect your systems.
20 views
Daily Writeups
β€· Title: SSRF Flaw (CVE-2025-6087) in OpenNext for Cloudflare Allows Unauthenticated Content Proxying
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 19 Jun 2025 00:27:55 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #cloudflare #CVE_2025_6087 #cybersecurity #Image Proxy #Next.js #OpenNext #Server_Side Request Forgery #ssrf #Vulnerability #Web Security
Daily CyberSecurity
SSRF Flaw (CVE-2025-6087) in OpenNext for Cloudflare Allows Unauthenticated Content Proxying
A critical SSRF flaw (CVE-2025-6087) in @opennextjs/cloudflare allows unauthenticated users to proxy arbitrary remote content via /_next/image endpoint.
21 views
Daily Writeups
β€· Title: Critical Vulnerabilities Found in Nimesa Backup and Recovery Software
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 08 Jul 2025 00:13:18 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #AWS #CVE_2025_48501 #CVE_2025_53473 #cybersecurity #Disaster Recovery #JPCERT/CC #Nimesa Backup #rce #Remote Code Execution #Server_Side Request Forgery #ssrf #Vulnerability
Daily CyberSecurity
Critical Vulnerabilities Found in Nimesa Backup and Recovery Software
JPCERT/CC warns of critical flaws in Nimesa Backup and Recovery (CVE-2025-48501, CVSS 9.8 RCE; CVE-2025-53473 SSRF). Unsupported versions pose severe risk to AWS data.
15 views
Daily Writeups
β€· Title: Critical Manager.io Flaw (CVE-2025-54122, CVSS 10.0) Allows Unauthenticated SSRF & Cloud Takeover
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 23 Jul 2025 00:23:53 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Accounting Software #AWS #Azure #Cloud Security #cybersecurity #Google Cloud #Manager.io #Server_Side Request Forgery #ssrf #Vulnerability
Daily CyberSecurity
Critical Manager.io Flaw (CVE-2025-54122, CVSS 10.0) Allows Unauthenticated SSRF & Cloud Takeover
A critical unauthenticated SSRF vulnerability (CVE-2025-54122, CVSS 10.0) in Manager.io's accounting software allows bypassing network isolation and exfiltrating sensitive data from cloud environments.
18 views
Daily Writeups
β€· Title: Critical BentoML SSRF (CVSS 9.9) Exposes AI Applications to Unauthenticated Network Recon & Cloud Credential Theft
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 30 Jul 2025 01:55:59 +0000
════════════════════════
βŒ— Tags: #Vulnerability #AI #BentoML #cybersecurity #machine_learning #python framework #Server_Side Request Forgery #ssrf
Daily CyberSecurity
Critical BentoML SSRF (CVSS 9.9) Exposes AI Applications to Unauthenticated Network Recon & Cloud Credential Theft
A critical SSRF vulnerability (CVE-2025-54381) in BentoML's file upload handling allows unauthenticated remote attackers to perform internal network reconnaissance and steal cloud metadata credentials from AI applications.
16 views
Daily Writeups
β€· Title: API7:2023β€Šβ€”β€ŠServer-Side Request Forgery: API’yi Δ°Γ§ Sistemlere KΓΆprΓΌ Olarak Kullanmak
════════════════════════
π€ͺ Author: Apifort
════════════════════════
β΄΅ Time: Tue, 02 Sep 2025 04:16:27 GMT
════════════════════════
βŒ— Tags: #server_side_request #apifort #owasp_api_security_top_10 #cybersecurity #ssrf
Medium
🚨API7:2023β€Šβ€”β€ŠServer-Side Request Forgery: API’yi Δ°Γ§ Sistemlere KΓΆprΓΌ Olarak Kullanmak
1. Giriş
10 views
Daily Writeups
β€· Title: Zimbra Issues Emergency Patch for Critical SSRF Vulnerability in Chat Proxy Configuration
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 17 Oct 2025 08:54:44 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Chat Proxy #cybersecurity #Server_Side Request Forgery #ssrf #Zimbra #Zimbra 10.1.x
18 views
Daily Writeups
β€· Title: Steering the Server: Critical 9.2 Severity SSRF Flaw in Angular SSR Allows Internal Network Probing
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 02 Mar 2026 00:14:39 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Angular #CVE_2026_27739 #Frontend Security #HttpClient #infosec #Patch Alert #Server_Side Request Forgery #SSR #ssrf #Vulnerability #Web Security
Daily CyberSecurity
Steering the Server: Critical 9.2 Severity SSRF Flaw in Angular SSR Allows Internal Network Probing
Angular patches a critical 9.2 CVSS SSRF vulnerability (CVE-2026-27739). Attackers can manipulate Host headers to steal credentials and probe internal networks.
15 views
Daily Writeups
β€· Title: CVE-2026-33626: High-Severity SSRF Exploited in the Wild to Hijack AI Inference Engines
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 23 Apr 2026 02:37:27 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #AI security #Cloud Security #CVE_2026_33626 #Cyber Defense #IMDSv2 #InternVL2 #LLM Inference #LMDeploy #Qwen2_VL #Server_Side Request Forgery #ssrf #Sysdig TRT
Daily CyberSecurity
CVE-2026-33626: High-Severity SSRF Exploited in the Wild to Hijack AI Inference Engines
CVE-2026-33626: A critical SSRF in LMDeploy exploited in under 13 hours. Learn how attackers hijack AI nodes and how to secure your inference cloud now.
20 views
Daily Writeups
β€· Title: Open Proxy Risk: High-Severity Next.js SSRF Flaw Exposes Cloud Metadata Endpoints
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 18 May 2026 06:56:21 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Cloud Metadata Exploit #CVE_2026_44578 #CWE_918 #Next.js #Security Patch 2026 #Self_Hosted Node.js #Server_Side Request Forgery #SSRF #Vercel #WebSocket Upgrade
Penetration Testing Tools
Open Proxy Risk: High-Severity Next.js SSRF Flaw Exposes Cloud Metadata Endpoints
The development framework Next.js has remediated a critical security vulnerability, designated as CVE-2026-44578, which afflicts applications deployed on
28 views
Daily Writeups
β€· Title: CVE-2026-15378: Blind SSRF Flaw in Red Hat OpenShift AI
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Thu, 16 Jul 2026 15:00:53 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_15378 #Kubernetes #OpenShift AI #red hat #Red Hat OpenShift AI #Server_Side Request Forgery #ssrf
Daily CyberSecurity
CVE-2026-15378: Blind SSRF Flaw in Red Hat OpenShift AI
TL;DR Red Hat has flagged a critical flaw in Red Hat OpenShift AI. Tracked as CVE-2026-15378, it scores 9.3 on CVSS. The bug lets a remote attacker run a blind SSRF and read local files. No exploi…
11 views
Daily Writeups
β€· Title: Next.js Patches Three CVSS 8.3 Flaws in Rewrites, Server Actions, and Middleware
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Thu, 23 Jul 2026 13:05:21 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_64642 #CVE_2026_64645 #CVE_2026_64649 #Next.js #Next.js vulnerabilities #Server_Side Request Forgery #Vercel
Daily CyberSecurity
Next.js Patches Three CVSS 8.3 Flaws in Rewrites, Server Actions, and Middleware
TL;DR Vercel fixed three Next.js vulnerabilities, each rated CVSS 8.3. Two of them allow Server-Side Request Forgery, while the third lets crafted requests slip past middleware-based authenticatio…
10 views