jeffrey - DEV Community

jeffrey

Oct 10

29,265 internet-reachable HashiCorp Vault instances: the secret store on the open internet

#zoomeye #hashicorpvault #secretsmanagement #exposuremanagement

4 min read

jeffrey

Oct 10

CouchDB: 984,440 fingerprint matches against 228 titles, a case study in what a count does not mean

#exposure #database

1

2 min read

jeffrey

Oct 10

Citrix NetScaler ADC and Gateway: eight advisories, two under active exploitation (CVE-2026-88776)

#security #vulnerability #citrix #netscaler

4 min read

jeffrey

Oct 10

Exposure Context for CVE-2026-96358: What 436,276 Drupal Fingerprints Mean

#security #drupal #cve #vulnerability

2 min read

jeffrey

Oct 10

What full control of a reverse proxy console means after CVE-2026-107806

#security #vulnerability #nginx

1

3 min read

jeffrey

Oct 10

When the model supplies the parameter: CVE-2026-54547 and CVE-2026-54549 in the Meta Ads MCP server

#cve202654547 #cve202654549 #mcp #ssrf

1

3 min read

jeffrey

Oct 9

Splunk, SIEM platforms and the risk of an unauthenticated management API

#splunk #cve202676268 #patroni #siem

2 min read

jeffrey

Oct 9

Redis: 142 Product Matches Beside 4.9 Million Answers on Port 6379

#redis #exposure #datastores

3 min read

jeffrey

Oct 9

Protecting access tokens on developer workstations: the attack path that skips your CI controls

#secrets #endpoint #developertools

3 min read

jeffrey

Oct 9

40,136,786 Answers on Port 500 and 303,376 on Port 4500: Reading the IKE Surface

#attacksurface #ipsec #ike #vpn

3 min read

jeffrey

Oct 9

CVE-2026-105763 remediation runbook: patching Twenty CRM and rotating what leaked

#security #vulnerability #twentycrm

2 min read

jeffrey

Oct 9

Prioritizing CVE-2025-38680 in a Heterogeneous Fleet: A Risk-Ranking Approach

#linuxkernel #cve202538680 #riskmanagement #operations

2 min read

jeffrey

Oct 8

CVE-2026-75937 patch planning for Digi DAL OS fleets

#security #vulnerability #cve202675937 #digi

2 min read

jeffrey

Oct 8

ONLYOFFICE: 86,750 fingerprints beside 86,744 titles, a near-exact match

#zoomeye #measurement #documentserver

3 min read

jeffrey

Oct 8

Remediation Playbook for CVE-2026-86326: Managing an Industrial Flaw With No Firmware Fix

#remediation #moxamgate #hardening #ics

2 min read

jeffrey

Oct 8

CVE-2026-93698: insufficient validation in cPanel and WP Squared Multilang adminbin

#security #hosting #sharedhosting #cve

2 min read

jeffrey

Oct 8

From Observation to Evidence: What a Defensible Exposure Record Needs

#exposuremanagement #evidence #zoomeye #methodology

2 min read

jeffrey

Oct 8

73,811 reachable PRTG instances: what exposure data does and does not prove

#security #vulnerability #prtg #cve20264637

2 min read

jeffrey

Oct 7

DokuWiki at 3,980 Matches: A File-Based Wiki and the Backup It Leaves Behind

#cybersecurity #infrastructure #security #software

2

3 min read

jeffrey

Oct 7

Stirling PDF: 12,660 title matches and no application fingerprint

#exposure #documents

2 min read

jeffrey

Oct 7

CVE-2026-102795 in Apache Traffic Server: building a version inventory before you patch

#vulnerability #apachetrafficserver #accesscontrol

3 min read

jeffrey

Oct 7

ZooKeeper Information Disclosure: Existence Watches Leak Restricted Znode Names

#apachezookeeper #vulnerability #cve202659739 #distributedsystems

1 min read

jeffrey

Oct 7

CVE-2026-95675: Unauthenticated Root Command Injection in D-Link DAP-1360 Firmware

#security #vulnerability #dlink #commandinjection

2 min read

jeffrey

Oct 7

426,677 titles against 12,055 fingerprints: locating the Tenda gateways behind CVE-2026-104610

#security #zoomeye #iot #measurement

3 min read

jeffrey

Oct 6

1,316,357 GitLab Matches and 456,436 Title Matches: Sizing a Self-Managed Code Host

#security #exposuremanagement #supplychain

3 min read

jeffrey

Oct 6

Audiobookshelf: no app fingerprint and 13,963 title matches

#exposure #media

2 min read

jeffrey

Oct 6

1538 Jenkins, 169 Harbor and 32 SonarQube Results: The Build Chain Has a Public Address

#zoomeye #supplychain #cicd #jenkins

4 min read

jeffrey

Oct 6

Why Port 2375 Alone Overstates the Docker Problem

#docker #querydesign #exposure #zoomeye

2 min read

jeffrey

Oct 6

29,151,855 Matches on Port 5060: The Signalling Layer Nobody Maps

#zoomeye #sip #voip #attacksurface

2 min read

jeffrey

Oct 6

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: two edge RCE flaws attacked before a fix existed

#vulnerability #networksecurity #citrix #netscaler

2 min read

jeffrey

Oct 5

603,475 Grafana and 77,968 Kibana Instances: Measuring the Observability Layer's Public Surface

#security #attacksurface #observability #zoomeye

1

3 min read

jeffrey

Oct 5

CVE-2026-70585: A Use-After-Free in the Windows NFS Client Stack

#windows #nfs #kernel #memorysafety

3 min read

jeffrey

Oct 5

Zabbix at 4,861 Matches: A Monitoring Frontend With Real Credentials Behind It

#zoomeye #attacksurface #exposure

2 min read

jeffrey

Oct 5

Four libxml2 Flaws, One Release: Why 2.15.4 Matters Beyond the Library Itself

#security #library #memorysafety #xml

3 min read

jeffrey

Oct 5

What CVE-2026-84411 says about trusting perimeter assumptions on network devices

#security #network #architecture

2 min read

jeffrey

Oct 5

CVE-2026-15896: an unauthenticated path traversal in the Super Forms WordPress plugin

#security #wordpress #pathtraversal #cve

2 min read

jeffrey

Oct 4

Detection engineering for CVE-2026-100382: hunting the External Data web shell

#security #vulnerability #detectionengineering #webshell

3 min read

jeffrey

Oct 4

Cisco ISE CVE-2026-76460: When the Policy Engine Becomes the Weakest Link

#cisco #ise #authenticationbypass #kev

4 min read

jeffrey

Oct 4

Request Smuggling in the ASGI Stack: Starlette and LiteLLM

#cybersecurity #infosec #python #security

3 min read

jeffrey

Oct 4

A patch plan for CVE-2026-88773 that accounts for FIPS, NDcPP and hybrid deployments

#vulnerability #citrix #netscaler #patching

2 min read

jeffrey

Oct 4

Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for CVE-2026-85102

#security #vulnerability #checkpoint #vpn

3 min read

jeffrey

Oct 4

Detection and verification limits for CVE-2026-96364 on a live Drupal estate

#security #drupal #cve202696364 #contributedmodules

3 min read

jeffrey

Oct 3

Redis RCE identifiers in August 2026: a use-after-free and a fix that left work behind

#cybersecurity #database #infosec #security

3 min read

jeffrey

Oct 3

WordPress CVE-2026-87902: an Unauthenticated Path Traversal That Escalates into Remote Code Execution

#vulnerability #wordpress #pathtraversal #rce

3 min read

jeffrey

Oct 3

Patch Matrix for CVE-2026-86350: Which Apache Tomcat Builds Need 11.0.26, 10.1.60 or 9.0.122

#security #vulnerability #apachetomcat #cve202686350

2 min read

jeffrey

Oct 3

What the WordPress 4.7.0 to 7.1.1 file inclusion bug teaches about patch windows

#wordpress #patchmanagement #cve202687902 #websecurity

1

3 min read

jeffrey

Oct 3

The Five-Month Gap: Zimbra Exposure Between Zero-Day Exploitation and Public Disclosure

#zimbra #cve202566376 #exposuremanagement #zoomeye

3 min read

jeffrey

Oct 3

OpenMediaVault: 123,886 title matches beside four fingerprints

#zoomeye #storage #internetmeasurement #exposure

3 min read

jeffrey

Oct 2

Rundeck on 4,729 hosts: a job scheduler that holds the credentials to run them

#security #zoomeye #exposure #automation

3 min read

jeffrey

Oct 2

Why 14 BIND CVEs Landed at Once: Reading the September 2026 DNS Advisory

#dns #iscbind #vulnerability

3 min read

jeffrey

Oct 2

What Click2Shell Teaches About Reporting a Parser Discrepancy

#wordpress #click2shell #zoomeye #rce

2 min read

jeffrey

Oct 2

Shared and Managed Fortinet Estates: Whose Gateway Is It When Credentials Leak?

#security #fortinet #credentialexposure #zoomeye

6 min read

jeffrey

Oct 2

CVE-2026-96362: What the September 2026 Drupal Contributed Module Batch Means for Site Operators

#security #drupal #vulnerability #cve202696362

1

3 min read

jeffrey

Oct 2

1,160,264 Mosquitto fingerprints: the MQTT broker that ends up on the public internet

#mqtt #mosquitto #iot #exposure

2 min read

jeffrey

Oct 1

F5 BIG-IP management interfaces: 1.58 million fingerprint matches and 55,390 on 443

#loadbalancer #f5 #managementplane

1

2 min read

jeffrey

Oct 1

LXD Backup Import as an Attack Surface: CVE-2026-87799 and the btrfs Restore Path

#security #vulnerability #lxd #cve202687799

1

2 min read

jeffrey

Oct 1

Internet-Exposed Drupal Sites and the September 2026 Extension Advisory

#security #drupal #vulnerability

3 min read

jeffrey

Oct 1

Policy Drift on Application Delivery Controllers: The Setting Behind CVE-2026-88774

#security #citrix #netscaler #cve202688774

3 min read

jeffrey

Oct 1

1,890,595 MongoDB Service Matches: The Default-Configuration Problem at Internet Scale

#zoomeye #mongodb #exposure

1

2 min read

jeffrey

Oct 1

Browser extensions are an enterprise control problem, not a user hygiene problem

#browsersecurity #extensionmanagement #enterprisepolicy #supplychain

1

4 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with jeffrey?