Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 07:38:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_41769 #CVE_2025_41771 #ICS security #Phoenix Contact #PLCnext #sql injection
Daily CyberSecurity
CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext
TL;DR Phoenix Contact disclosed three vulnerabilities in PLCnext firmware on August 12, 2026. One flaw, CVE-2025-41771, lets a low-privileged attacker execute unauthorized SQL queries. A second, c…
21 views
Daily Writeups
⤷ Title: My First Bug Bounty : A Beginner's Web Security Investigation
════════════════════════
𐀪 Author: BHARANIDHARAN
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 11:17:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #sql_injection #cybersecurity #bug_bounty
Medium
My First Bug Bounty : A Beginner's Web Security Investigation
A beginner's journey from self-doubt and endless overthinking to taking action and conducting my first real web security investigation.
14 views
Daily Writeups
⤷ Title: SQL injection
════════════════════════
𐀪 Author: Trayuj
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 18:49:38 GMT
════════════════════════
⌗ Tags: #sql_injection
Medium
SQL injection
Estudando um pouco mais sobre SQL Injection através da PortSwigger Web Security Academy, decidi pegar 17 dos 18 desafios disponíveis e…
40 views
Daily Writeups
⤷ Title: SQL injection — Filter bypass
════════════════════════
𐀪 Author: Ali Amed
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 11:10:46 GMT
════════════════════════
⌗ Tags: #filters #ctf #root_me #sql_injection
Medium
SQL injection — Filter bypass
Login pageSQL injection — Filter bypass
33 views
Daily Writeups
⤷ Title: FreePBX CVE-2025–57819: From Unauthenticated SQL Injection to Remote Code Execution
════════════════════════
𐀪 Author: Raj Kumar M
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 04:55:39 GMT
════════════════════════
⌗ Tags: #rce #freepbx #cve2026 #pentesting #sql_injection
Medium
FreePBX CVE-2025–57819: From Unauthenticated SQL Injection to Remote Code Execution
A vulnerability in a PBX system is more than just a web application security issue.
35 views
Daily Writeups
⤷ Title: Prompt Injection Attacks: The New SQL Injection Moment for AI Systems
════════════════════════
𐀪 Author: Shashank Joshi
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 04:48:37 GMT
════════════════════════
⌗ Tags: #prompt_engineering #llm #sql_injection #ai_cubersecurity #agentic_ai
Medium
Prompt Injection Attacks: The New SQL Injection Moment for AI Systems
Why AI applications need a different approach to application security.
33 views
Daily Writeups
⤷ Title: SQL Injection Lab — From Login Bypass to Chained Query Exploitation | TryHackMe
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 06:31:06 GMT
════════════════════════
⌗ Tags: #web_development #cybersecurity #ethical_hacking #sql_injection #penetration_testing
Medium
SQL Injection Lab — From Login Bypass to Chained Query Exploitation | TryHackMe
Twelve challenges. One vulnerability class. Integer inputs, blind injection, second-order attacks, and a two-query chain where the output…
15 views
Daily Writeups
⤷ Title: SQL Categories Explained: What They Are and How SQL Queries Actually Work
════════════════════════
𐀪 Author: yshn4v
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 06:14:56 GMT
════════════════════════
⌗ Tags: #sql_server #sql #database #sql_injection #postgresql
Medium
SQL Categories Explained: What They Are and How SQL Queries Actually Work
When learning SQL, one of the first confusing things is seeing terms like DDL, DML, DQL, DCL, and TCL.
43 views
Daily Writeups
⤷ Title: Belajar VAPT #1: Membongkar Data Rahasia dengan SQL Injection (PortSwigger Lab)
════════════════════════
𐀪 Author: BIT Journal
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 10:28:24 GMT
════════════════════════
⌗ Tags: #sql_injection #vapt #learning
Medium
Belajar VAPT #1: Membongkar Data Rahasia dengan SQL Injection (PortSwigger Lab)
SQL Injection
28 views
Daily Writeups
⤷ Title: GeoServer Unauthenticated SQL Injection (CVSS 9.8) Exploited in the Wild, PoC Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 04:35:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #exploited in the wild #GeoServer #GeoTools #jsonArrayContains #proof_of_concept #RondoDox #sql injection
Daily CyberSecurity
GeoServer Unauthenticated SQL Injection (CVSS 9.8) Exploited in the Wild, PoC Public
TL;DR A GeoServer unauthenticated SQL injection flaw is under active attack. It lives in the jsonArrayContains filter function against PostGIS layers. Attackers began probing within hours of publi…
17 views
Daily Writeups
⤷ Title: Web Application Logic Flaws: 12 Practical Examples Every Cybersecurity Pro Should Know
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 05:57:27 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #cybersecurity #sql #hacking
Medium
Web Application Logic Flaws: 12 Practical Examples Every Cybersecurity Pro Should Know
Ever spent hours looking for SQLi, XSS, or RCE — only to miss a basic logic bug that lets attackers walk right through the front door? Web…
9 views
Daily Writeups
⤷ Title: SQL Injection — PortSwigger Web Security Academy Labs (Write-up)
════════════════════════
𐀪 Author: 0x_root
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 15:22:52 GMT
════════════════════════
⌗ Tags: #web_security_academy #web_security #sql #sql_injection #cybersecurity
Medium
SQL Injection — PortSwigger Web Security Academy Labs (Write-up)
A walkthrough of SQL injection labs from PortSwigger Web Security Academy, covering WHERE-clause injection, login bypass, UNION-based…
36 views
Daily Writeups
⤷ Title: How I Found an Unauthenticated Blind SQL Injection in a European Payment API (and Why You Should…
════════════════════════
𐀪 Author: MEHDI KR
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 14:40:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #aspnet
Medium
How I Found an Unauthenticated Blind SQL Injection in a European Payment API (and Why You Should Never Trust the "Sorting" Parameter)
By Mehdi (MadaraHaxor)
36 views
Daily Writeups
⤷ Title: Recruit — TryHackMe Walkthrough: From Local File Inclusion to Administrator
════════════════════════
𐀪 Author: Yussif Selim
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 07:58:40 GMT
════════════════════════
⌗ Tags: #local_file_inclusion #tryhackme_walkthrough #tryhackme #ctf_walkthrough #sql_injection
Medium
Recruit — TryHackMe Walkthrough: From Local File Inclusion to Administrator
Introduction
11 views
Daily Writeups
⤷ Title: CVE-2026–40901: DataEase Root RCE via Unfiltered Quartz Deserialization
════════════════════════
𐀪 Author: Guidancewhite
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 06:57:55 GMT
════════════════════════
⌗ Tags: #sql_injection #rce #vulnerability #database #java
Medium
CVE-2026–40901: DataEase Root RCE via Unfiltered Quartz Deserialization
1. Overview
33 views
Daily Writeups
⤷ Title: CVE-2026-0075: PoC Discloses Android EoP With No User Interaction
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 13:26:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #android #ContactsProvider2 #CVE_2026_0075 #Elevation of Privilege #proof_of_concept #sql injection
Daily CyberSecurity
CVE-2026-0075: PoC Discloses Android EoP With No User Interaction
TL;DR Google patched CVE-2026-0075, an Android elevation of privilege flaw in ContactsProvider2. The bug can expose the contacts database through SQL injection, with no user interaction required. …
6 views
Daily Writeups
⤷ Title: Error-Based SQL Injection: Extracting Database Information Through SQL Errors
════════════════════════
𐀪 Author: Ayobami olaniyi
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 16:07:22 GMT
════════════════════════
⌗ Tags: #sql #hacking #cybersecurity #software_development
Medium
Error-Based SQL Injection: Extracting Database Information Through SQL Errors
Introduction
15 views
Daily Writeups
⤷ Title: PortSwigger Blind SQL Injection -Lab Walkthrough
════════════════════════
𐀪 Author: 0x_root
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 19:59:22 GMT
════════════════════════
⌗ Tags: #blind_sql_injection #portswigger #sql_injection #penetration_testing #web_security
Medium
PortSwigger Blind SQL Injection -Lab Walkthrough
General tips
21 views
Daily Writeups
⤷ Title: CVE-2026-20030: Cisco Crosswork SQL Command Injection Scores CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 02:24:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco BroadWorks #Cisco Crosswork #CVE_2026_20030 #CVE_2026_20320 #sql injection #xxe
Daily CyberSecurity
CVE-2026-20030: Cisco Crosswork SQL Command Injection Scores CVSS 10.0
TL;DR Cisco fixed a critical SQL injection flaw in Crosswork, tracked as CVE-2026-20030 at CVSS 10.0. The same hardening release patches three more critical bugs. Cisco separately fixed an XML ext…
10 views
Daily Writeups
⤷ Title: SQL Injection to RCE: Understanding the Attack Chain
════════════════════════
𐀪 Author: Vibecyberv
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 06:03:54 GMT
════════════════════════
⌗ Tags: #rce #cybersecurity #attack #vapt #sql_injection
Medium
SQL Injection to RCE: Understanding the Attack Chain
In 2017, Equifax lost the personal data of 147 million people. In 2008, Heartland Payment Systems leaked over 130 million card numbers…
85 views