Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Thu, 23 Mar 2023 07:12:05 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Fuzzing Finds CVE in Spring.io
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/dac85e83a02b
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #application_security #cybersecurity #fuzzing #spring #spring_framework
Medium
Fuzzing Finds CVE in Spring.io
Code Intelligenceβ€˜s fuzzer, integrated into the OSS-Fuzz fuzzing platform by Google, found a CVE in the Spring Framework which causes a DoS…
5 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Wed, 05 Jul 2023 05:48:06 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: From Spring to Hell: Exploring the Spring4Shell vulnerability
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/30bea7d2f3ce
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #spring_framework #information_security #cybersecurity #hacking #vulnerability
Medium
From Spring to Hell: Exploring the Spring4Shell vulnerability
Spring4Shell vulnerability
4 views
Daily Writeups
β€· Title: Spring Framework Flaw Allows Unauthorized Access via Security Bypass
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 20 May 2025 01:39:59 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2025_41232 #java #security #Spring Framework #Spring Security
Daily CyberSecurity
Spring Framework Flaw Allows Unauthorized Access via Security Bypass
A Spring Framework vulnerability can allow unauthorized access! Learn how it bypasses security annotations and how to fix it.
15 views
Daily Writeups
β€· Title: Spring Cloud Gateway Vulnerability Exposes Applications to Header Injection Risks
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 30 May 2025 01:41:32 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cybersecurity #header spoofing #Spring Cloud Gateway #Spring Framework #trust boundary
Daily CyberSecurity
Spring Cloud Gateway Vulnerability Exposes Applications to Header Injection Risks
A critical Spring Cloud Gateway flaw allows header spoofing from untrusted proxies. Update to fix or disable forwarding.
14 views
Daily Writeups
β€· Title: SBSCAN: penetration testing tool specifically designed for the Spring framework
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sun, 01 Jun 2025 00:00:38 +0000
════════════════════════
βŒ— Tags: #Vulnerability Assessment #Penetration Testing #Spring Framework #Spring framework penetration testing
Penetration Testing Tools
SBSCAN: penetration testing tool specifically designed for the Spring framework
SBSCAN is a penetration testing tool specifically designed for the Spring framework, capable of scanning specified sites
24 views
Daily Writeups
β€· Title: Actuator Endpoints Exposed? You Might Be Leaking Everything
════════════════════════
π€ͺ Author: Ujjawal Rohra
════════════════════════
β΄΅ Time: Sat, 13 Sep 2025 17:07:41 GMT
════════════════════════
βŒ— Tags: #spring_framework #hacking #cloud_security #spring #spring_boot
Medium
Actuator Endpoints Exposed? You Might Be Leaking Everything
Imagine this:
42 views
Daily Writeups
β€· Title: Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 16 Sep 2025 01:40:47 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #@PreAuthorize #Authorization Bypass #CVE_2025_41248 #CVE_2025_41249 #method security #Spring Framework #Spring Security #Vulnerability
Daily CyberSecurity
Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
Two medium-severity flaws in Spring Security and the Spring Framework allow authorization bypasses in applications that use method-level security on generic types.
19 views
Daily Writeups
β€· Title: How Filters Protect Your API (With Real Examples)
════════════════════════
π€ͺ Author: Ujjawal Rohra
════════════════════════
β΄΅ Time: Fri, 10 Oct 2025 17:39:41 GMT
════════════════════════
βŒ— Tags: #spring #filters #spring_boot #api_security #spring_framework
Medium
How Filters Protect Your API (With Real Examples)
Block bad requests, add custom logic, and keep your APIs safe...
31 views
Daily Writeups
β€· Title: Spring Patches Two Flaws: SpEL Injection (CVE-2025-41253) Leaks Secrets, STOMP CSRF Bypasses WebSocket Security
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 17 Oct 2025 01:51:39 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CSRF #CVE_2025_41253 #security advisory #SpEL injection #Spring Cloud Gateway #Spring Framework #WebSocket
Daily CyberSecurity
Spring Patches Two Flaws: SpEL Injection (CVE-2025-41253) Leaks Secrets, STOMP CSRF Bypasses WebSocket Security
Spring fixed two flaws: CVE-2025-41253 allows SpEL injection in Cloud Gateway to expose secrets, and CVE-2025-41254 allows STOMP CSRF to send unauthorized WebSocket messages. Update immediately.
17 views
Daily Writeups
β€· Title: Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 20 Mar 2026 04:13:00 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_22735 #CVE_2026_22737 #cybersecurity #infosec #Java security #patch management #Spring Framework #Spring MVC #Spring WebFlux #Vulnerability
Daily CyberSecurity
Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
Researchers found two flaws in Spring Framework (CVE-2026-22737 & CVE-2026-22735) allowing path bypasses and stream corruption. Patch your apps today.
29 views
Daily Writeups
β€· Title: Apache ActiveMQ Patches RCE and Path Traversal Flaws
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 08 Apr 2026 12:03:37 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #ActiveMQ #CVE_2026_33227 #CVE_2026_34197 #infosec #Java security #JMX #Jolokia #Message Broker #Patch Alert #rce #Spring Framework
Daily CyberSecurity
Apache ActiveMQ Patches RCE and Path Traversal Flaws
Apache ActiveMQ patches a critical 2026 RCE flaw. Learn how CVE-2026-34197 uses Jolokia and Spring XML to hijack the JVM. Update to 5.19.5 or 6.2.3 now!
19 views
Daily Writeups
β€· Title: CISA Adds Critical Apache ActiveMQ RCE Flaw to KEV Catalog
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 17 Apr 2026 01:53:39 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Apache ActiveMQ #CISA KEV #CVE_2026_34197 #cybersecurity #infosec #Jolokia #Message Broker Security #Patch Alert #rce #Remote Code Execution #Spring Framework
Daily CyberSecurity
CISA Adds Critical Apache ActiveMQ RCE Flaw to KEV Catalog
CISA adds CVE-2026-34197 to KEV. Apache ActiveMQ's Jolokia bridge flaw allows RCE via remote Spring XML loading. Remediate by April 30, 2026. Patch now!
14 views
Daily Writeups
β€· Title: Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 24 Apr 2026 12:42:19 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Apache ActiveMQ #CVE_2026_40466 #CVE_2026_41043 #CVE_2026_41044 #cybersecurity #infosec #Java security #Jolokia #JVM #Middleware Security #rce #Spring Framework #XSS
Daily CyberSecurity
Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS
Critical RCE and XSS vulnerabilities hit Apache ActiveMQ (CVE-2026-41044, 40466). Authenticated attackers can hijack the JVM. Update to 5.19.6 or 6.2.5 now.
28 views
Daily Writeups
β€· Title: The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 24 Apr 2026 13:10:53 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_40976 #CVSS 9.1 #cybersecurity #DevTools #infosec #Java security #Patch Alert #rce #Spring Boot #Spring Framework #Timing Attack
Daily CyberSecurity
The 9.1 CVSS Flaw: Why Millions of Spring Boot Apps May Be Exposed
In a major update for the Java ecosystem, several critical vulnerabilities have been disclosed in Spring Boot, the framework that powers millions of modern enterprise applications. These flawsβ€”CVE…
16 views