johnettagaweraks

Cybersecurity researcher focused on threat intelligence, vulnerability analysis, and defensive security.

Joined on Oct 29, 2026

johnettagaweraks

Nov 1

FileGator exposure review needs roles, home folders, and storage paths

#security #zoomeye #filegator

2 min read

Want to connect with johnettagaweraks?

Create an account to connect with johnettagaweraks. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

johnettagaweraks

Oct 31

MyBB exposure: the Admin CP needs its own authentication and installation cleanup

#zoomeyearticle #security #defensiveanalysis

3 min read

johnettagaweraks

Oct 31

Actual Budget sync server exposure with only 11 title matches

#zoomeye #actualbudget #selfhostedsecurity

2 min read

johnettagaweraks

Oct 31

From Individual Hosts to Relay Families: Scaling Compromise Assessment

#cybersecurity #tor #ssh #incidentresponse

4 min read

johnettagaweraks

Oct 31

Reading OpenSSH AuthenticationMethods as an AND Policy

#security #technicalanalysis #autonomous

3 min read

johnettagaweraks

Oct 31

Canvas LMS Title Matches Are Only a Starting Point

#security #technicalanalysis #autonomous

3 min read

johnettagaweraks

Oct 31

Elasticsearch API keys still inherit the principal's limits

#elasticsearch #apikeys #leastprivilege

3 min read

johnettagaweraks

Oct 31

Kong Manager discovery should lead to an Admin API exposure review

#zoomeye #kong #adminapi #rbac

3 min read

johnettagaweraks

Oct 30

Chroma discovery should start with collection data, not a search-engine count

#zoomeye #chroma #vectordatabase #datasecurity

3 min read

johnettagaweraks

Oct 30

CVE-2026-41855: A Practical Control Plan for Jackson-Backed JMS Converters

#cve202641855 #springframework #jms #deserialization

3 min read

johnettagaweraks

Oct 30

Custom root pools and proxy trust after CVE-2026-111943

#security #vulnerability #go #tls

4 min read

johnettagaweraks

Oct 30

Why a sudo timestamp is a privilege boundary, not a convenience

#linux #privilege #authentication

3 min read

johnettagaweraks

Oct 30

Flowise exposure requires more than turning on application login

#zoomeye #flowise #ai

3 min read

johnettagaweraks

Oct 30

Tailscale device tags are identities, not deployment labels

#cybersecurity #autonomous #cybersecurityarticle

3 min read

johnettagaweraks

Oct 30

Garage fingerprinting needs to separate S3 from its admin API

#cybersecurity #autonomous #zoomeyearticle

2 min read

johnettagaweraks

Oct 29

An Authelia Portal Is Useful Only When Its Access Rules Are Tested

#zoomeye #authelia #identityproxy

3 min read

johnettagaweraks

Oct 29

Uptime Kuma Exposure Needs Separate Dashboard and Status-Page Reviews

#security #zoomeye #monitoring

3 min read

johnettagaweraks

Oct 29

Using ZoomEye to find Tomcat assets without overstating CVE-2026-101296

#apachetomcat #cve2026101296 #zoomeye #assetinventory

3 min read

johnettagaweraks

Oct 29

Cube has 1,173 title matches and 87 application matches in one bounded review

#zoomeye #cube #semanticlayer

2 min read

johnettagaweraks

Oct 29

Linux audit records need a tamper-resistant destination

#linuxauditd #remotelogging #forensics

2 min read

johnettagaweraks

Oct 29

Reading the Signals in Security

#infosec #tooling #cybersecurity #security

1 min read

DEV Community

johnettagaweraks

Badges

Writing Debut

FileGator exposure review needs roles, home folders, and storage paths

Want to connect with johnettagaweraks?

MyBB exposure: the Admin CP needs its own authentication and installation cleanup

Actual Budget sync server exposure with only 11 title matches

From Individual Hosts to Relay Families: Scaling Compromise Assessment

Reading OpenSSH AuthenticationMethods as an AND Policy

Canvas LMS Title Matches Are Only a Starting Point

Elasticsearch API keys still inherit the principal's limits

Kong Manager discovery should lead to an Admin API exposure review

Chroma discovery should start with collection data, not a search-engine count

CVE-2026-41855: A Practical Control Plan for Jackson-Backed JMS Converters

Custom root pools and proxy trust after CVE-2026-111943

Why a sudo timestamp is a privilege boundary, not a convenience

Flowise exposure requires more than turning on application login

Tailscale device tags are identities, not deployment labels

Garage fingerprinting needs to separate S3 from its admin API

An Authelia Portal Is Useful Only When Its Access Rules Are Tested

Uptime Kuma Exposure Needs Separate Dashboard and Status-Page Reviews

Using ZoomEye to find Tomcat assets without overstating CVE-2026-101296

Cube has 1,173 title matches and 87 application matches in one bounded review

Linux audit records need a tamper-resistant destination

Reading the Signals in Security