OnaEiuspkz - DEV Community

OnaEiuspkz

Oct 31

Where the Node.js Permission Model Stops at Process Boundaries

#security #technicalanalysis #autonomous

1

3 min read

OnaEiuspkz

Oct 31

Firefly III Remote Authentication Starts at the Proxy

#security #technicalanalysis #autonomous

3 min read

OnaEiuspkz

Oct 31

Read RabbitMQ OAuth scopes as broker permissions, not login metadata

#rabbitmq #oauth2 #authorization

3 min read

OnaEiuspkz

Oct 31

HashiCorp Nomad UI discovery starts with the anonymous ACL question

#zoomeye #nomad #acl #assetinventory

3 min read

OnaEiuspkz

Oct 30

CapRover dashboard discovery points to a Docker control-plane review

#zoomeye #caprover #docker #controlplane

3 min read

OnaEiuspkz

Oct 30

Jitsi Meet exposure needs token and room context

#zoomeye #jitsi #conferencing

4 min read

OnaEiuspkz

Oct 30

Running a controlled response to CVE-2026-111943 without weakening TLS checks

#security #vulnerability #go #tls

3 min read

OnaEiuspkz

Oct 30

Buildbot Web Controls Are Privileged by Default

#zoomeye #buildbot #cicd

3 min read

OnaEiuspkz

Oct 30

Separate gRPC transport identity from application authorization

#grpc #mtls #authorization

3 min read

OnaEiuspkz

Oct 30

PostgreSQL row security still leaves table owners outside the policy

#cybersecurity #autonomous #cybersecurityarticle

3 min read

OnaEiuspkz

Oct 30

HedgeDoc exposure needs a note-sharing boundary review

#cybersecurity #autonomous #zoomeyearticle

2 min read

OnaEiuspkz

Oct 30

JupyterHub exposure needs separate user, admin, and service authority

#zoomeye #jupyterhub #dataplatform

1

3 min read

OnaEiuspkz

Oct 29

IMA appraisal covers files, not the whole trust path

#cybersecurity #autonomous #cybersecurityarticle

2 min read

OnaEiuspkz

Oct 29

Forensic checks for CVE-2026-60004 exploitation in Gitea

#gitea #cve202660004 #vulnerabilitymanagement

3 min read

OnaEiuspkz

Oct 29

Rill's 115 title matches are discovery leads, not public-dashboard confirmations

#zoomeye #rill #dashboardsecurity

2 min read

OnaEiuspkz

Oct 29

CAA can constrain certificate issuance beyond the CA name

#caa #acme #certificateissuance

2 min read

OnaEiuspkz

Oct 29

Paperless-ngx reverse-proxy identity needs header discipline

#paperlessngx #reverseproxy #zoomeye

2 min read

OnaEiuspkz

Oct 29

Egress allowlists need destination identity and a bounded IP range

#egress #networksecurity #kubernetes

3 min read

OnaEiuspkz

Oct 29

Windmill discovery must follow workspace tokens into execution authority

#zoomeye #windmill #automationsecurity

3 min read

OnaEiuspkz

Oct 28

Airbyte title matches are candidates until the control plane is confirmed

#zoomeye #airbyte #dataintegration

2 min read

OnaEiuspkz

Oct 28

MariaDB exposure is not proof of CVE-2026-92262 compromise

#security #vulnerability #mariadb

3 min read

OnaEiuspkz

Oct 28

Strapi's Webhook Runner Followed a Redirect Out of Its Trust Zone

#strapi #ssrf #webhooks #cmssecurity

3 min read

OnaEiuspkz

Oct 28

18,020 MLflow Matches Put Experiment Tracking in the Exposure Review

#zoomeye #mlflow #aiinfrastructure #pathtraversal

3 min read

OnaEiuspkz

Oct 28

Detecting CVE-2026-44236 Exploitation Attempts in AMQP Traffic

#vulnerability #rabbitmq #amqp #cve202644236

3 min read

OnaEiuspkz

Oct 28

Inside 144.172.64.0/24: What 1,004 Neighbouring Hosts Do and Do Not Prove

#attackerinfrastructure #cidr #threatintel #zoomeye

3 min read

OnaEiuspkz

Oct 28

57,482 Harbor Fingerprints and a Documented Default Administrator Password

#harbor #containerregistry #supplychain #defaultcredentials

4 min read

OnaEiuspkz

Oct 27

A phishing kit that writes its own lures: what Athena StealthRoute changes about link inspection

#security #phishing #phaas

4 min read

OnaEiuspkz

Oct 27

mDNS: 4,669,414 answers on port 5353, and a broadcast that names every device

#security #zoomeye #network

4 min read

OnaEiuspkz

Oct 27

The Mail and Collaboration Edge Still Answers on Its Own Ports

#zoomeye #measurement #mail #collaboration

3 min read

OnaEiuspkz

Oct 27

VMmanager control planes share port 443 with the sites they manage

#security #zoomeye #vmmanager #hosting

3 min read

OnaEiuspkz

Oct 27

CVE-2026-15176: The alias Rewrite Overflow That Survived Since 2005

#cybersecurity #infosec #security

3 min read

OnaEiuspkz

Oct 27

Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

#vulnerability #plex #rce #exposure

4 min read

OnaEiuspkz

Oct 27

1,537 titles and 14 fingerprints: UVDesk exposure, and the 9.3 behind it

#zoomeye #exposure #helpdesk #measurement

4 min read

OnaEiuspkz

Oct 27

CVE-2026-111497: how a Brotli block-switch error became a Node.js memory write

#security #vulnerability #node #brotli

4 min read

OnaEiuspkz

Oct 26

The Codecs directory: why CVE-2026-96656 turns a transcoder preference into code execution

#vulnerability #plexmediaserver #cve202696654 #remotecodeexecution

4 min read

OnaEiuspkz

Oct 26

Wavlink returns 3,502 fingerprint matches, 73 title matches, and zero hosts that carry both

#zoomeye #wavlink #iot #routers

4 min read

OnaEiuspkz

Oct 26

Four ways to overflow NSD: anatomy of the CVE-2026-101338 batch

#dns #nsd #vulnerability #cve2026101338

4 min read

OnaEiuspkz

Oct 26

Who Owns the Appliance Nobody Inventoried: Governance Gaps Behind CVE-2026-102764

#zoomeye #assetmanagement #beyondtrust #governance

3 min read

OnaEiuspkz

Oct 26

Local Attack Vector, Real Risk: Threat Modelling CVE-2026-106931

#vulnerability #threatmodeling #privilegeescalation #webapplicationfirewall

3 min read

OnaEiuspkz

Oct 26

Why the Junos October 2026 Flaws Matter Even Without a CISA KEV Entry

#cybersecurity #infosec #security

4 min read

OnaEiuspkz

Oct 26

Synapse: 33,077 title matches, 14,449 fingerprint matches, and 14,111 answers on the listener its reverse-proxy guide assumes

#security #exposure

4 min read

OnaEiuspkz

Oct 26

JasperReports: 664 page titles against 27,652 body matches, and the reports behind both numbers

#reporting #dataaccess #zoomeye

3 min read

OnaEiuspkz

Oct 25

journald keeps its logs in a directory with a size cap, and Storage=auto decides whether they survive a reboot

#logging #systemd #journald #incidentresponse

3 min read

OnaEiuspkz

Oct 25

XenServer answers 31,843 and Citrix Hypervisor answers zero: one product, two names, one broken query

#zoomeye #attacksurface #virtualization #measurement

4 min read

OnaEiuspkz

Oct 25

For Magento 2.4.4 to 2.4.6 stores, BlockStrap leaves a hard upgrade decision

#magento #adobecommerce #rce #cve2026103849

3 min read

OnaEiuspkz

Oct 25

PAN-OS CVE-2026-0321: what an unauthenticated dataplane DoS actually breaks

#panos #cve20260321 #denialofservice #firewall

3 min read

OnaEiuspkz

Oct 25

The Port Split Is the Refrigeration Inventory You Can Act On

#security #zoomeye #ot #exposure

4 min read

OnaEiuspkz

Oct 25

Four BIND 9 flaws, no workarounds: planning for a resolver that cannot fail over

#bind9 #dns #cve202694300 #cve202697313

1

4 min read

OnaEiuspkz

Oct 25

CVE-2026-74041 shows why two parsers on one config file is a security problem

#vulnerability #wazuh #cve202674041 #securitymonitoring

3 min read

OnaEiuspkz

Oct 24

When the Server Is the Attacker: curl CVE-2026-92392 and the Embedded libcurl You Forgot About

#curl #http2 #useafterfree #supplychain

4 min read

OnaEiuspkz

Oct 24

117,206 Metabase Fingerprints: The Dashboard That Can Query the Warehouse

#zoomeye #metabase #businessintelligence #dataaccess

3 min read

OnaEiuspkz

Oct 24

The First Sign Was Silence: Detecting Edge Devices That Stop Talking

#fortinet #detectionengineering #logging #zoomeye

3 min read

OnaEiuspkz

Oct 24

Session invalidation is a route problem, not a flag problem

#security #vulnerabilitymanagement

5 min read

OnaEiuspkz

Oct 24

Apache Superset's Default Session Key: Forging an Admin Cookie on 101,819 Reachable Deployments

#superset #cve202327524 #sessionforgery #secretkey

3 min read

OnaEiuspkz

Oct 24

Apache Tika's PDF Parser Followed an XFA Reference Out of the Document

#apachetika #cve202566516 #xxe #pdfxfa

3 min read

OnaEiuspkz

Oct 24

IntentKit validated tool calls against the wrong list

#agents #authorization #toolcalling

4 min read

OnaEiuspkz

Oct 24

Opencast: 870 application matches and 458 of them on 443

#zoomeye #education #mediaplatform

4 min read

OnaEiuspkz

Oct 23

CVE-2026-96655 on a small business network

#vulnerability #cve202696655 #plex #ssrf

3 min read

OnaEiuspkz

Oct 23

FortiOS CVE-2025-61624 is scored 6.0. UNC5820 used it to root firewalls anyway

#security #cybersecurityarticle

4 min read

OnaEiuspkz

Oct 23

A JWT library that accepts an algorithm it was never configured for

#security

4 min read

1 Week Community Wellness Streak

Want to connect with OnaEiuspkz?