OnaEiuspkz - DEV Community

OnaEiuspkz

Oct 11

CVE-2026-103552: How a Deeply Nested LDAP Filter Overflows the Apache Directory LDAP API Stack

#cybersecurity #java #opensource #security

1

3 min read

OnaEiuspkz

Oct 11

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

#supplychain #npm #cicd #secrets

3 min read

OnaEiuspkz

Oct 10

40,059 Keycloak Servers: Where the Identity Provider Is the Asset

#keycloak #exposure #identity

1

3 min read

OnaEiuspkz

Oct 10

902,191 on Port 1911 and 816,986 on Port 4911: The Niagara Supervisor Layer

#attacksurface #niagara #tridium #buildingautomation

4 min read

OnaEiuspkz

Oct 10

Apache httpd 2.4.68 to 2.4.69: Upgrade Notes for the CVE-2026-63292 Fix and Companion Advisories

#apache #httpd #vulnerability #modvhostalias

2 min read

OnaEiuspkz

Oct 10

What CVE-2026-76266 shows about trusting installation content in package scripts

#security #vulnerability #splunk #cve202676266

2 min read

OnaEiuspkz

Oct 10

The Initial Access Broker Economy Behind Gunra: Why Your Boundary Is Someone Else's Product

#cybersecurity #infosec #security

3 min read

OnaEiuspkz

Oct 9

Drupal Webform XSS (CVE-2026-96367): what site builders need to check first

#security #vulnerability #drupal #xss

2 min read

OnaEiuspkz

Oct 9

SSH Rekey During Authentication: The Protocol Edge Case Behind CVE-2026-67279

#vulnerability #routeros #mikrotik #ssh

3 min read

OnaEiuspkz

Oct 9

CVE-2026-104467: YesWiki protects its administrator API with a check that never runs

#security #wiki #authorization #cve

2 min read

OnaEiuspkz

Oct 9

Reading the CVSS 7.1 Score for CVE-2025-38680: Local, Low Complexity, High Confidentiality Impact

#linuxkernel #cve202538680 #cvss #riskassessment

2 min read

OnaEiuspkz

Oct 9

Tandoor Recipes: 170 title matches and a small sample to read carefully

#exposure #selfhosted

2 min read

OnaEiuspkz

Oct 8

Exposed Web Applications and Shadow IT in Legal Firms: Reading a Sector's Visible Estate

#zoomeye #legalsector #ncsc #exposure

4 min read

OnaEiuspkz

Oct 8

An LLM observability platform stores prompts, and prompts are the application

#zoomeye #exposure #langfuse #attacksurface

3 min read

OnaEiuspkz

Oct 8

After the patch: verifying remediation for CVE-2026-88772 on NetScaler ADC and Gateway

#security #vulnerability #citrix #netscaler

3 min read

OnaEiuspkz

Oct 8

Why code execution in an LLM orchestrator carries more weight than its CVSS score

#vulnerability #langflow #ibm #remotecodeexecution

2 min read

OnaEiuspkz

Oct 8

Detecting Trust Abuse Around CVE-2026-67278 on RouterOS Devices

#vulnerability #mikrotik #routeros #detection

2 min read

OnaEiuspkz

Oct 7

Check Point's September: A VPN Certificate Flaw, a Management Server Gap, and Sixty-One Days

#vulnerability #networksecurity #vpn #kev

3 min read

OnaEiuspkz

Oct 7

Seccomp profiles for real workloads, not for demos

#containers #kubernetes #hardening #seccomp

3 min read

OnaEiuspkz

Oct 7

Blast Radius of an SD-WAN Controller Takeover: What CVE-2026-76504 Means for Network Operations

#vulnerability #cisco #sdwan #cve202676504

1

4 min read

OnaEiuspkz

Oct 7

Repeating the Measurement: What Changed Between Two ZoomEye Snapshots

#zoomeye #measurement #rabbitmq #elasticsearch

3 min read

OnaEiuspkz

Oct 7

Finding WordPress Click2Shell Exposure Starts With Knowing Where WordPress Runs

#wordpress #click2shell #zoomeye #rce

2 min read

OnaEiuspkz

Oct 6

Apache NiFi at 6,093 observed hosts: a data flow controller and the credentials it holds

#zoomeye #datapipeline #exposure

2 min read

OnaEiuspkz

Oct 6

Plane at three fields and three answers: 12,510 titles, 358 fingerprints and 72 product matches

#zoomeye #measurement #projectmanagement

2 min read

OnaEiuspkz

Oct 6

Metabase on 116,913 observed hosts: business intelligence as an unguarded data path

#zoomeye #analytics #exposure

2 min read

OnaEiuspkz

Oct 6

After CVE-2026-104286: A Compromise Assessment Plan for FortiMail

#vulnerability #fortinet #fortimail #cve2026104286

2 min read

OnaEiuspkz

Oct 6

CVE-2026-65660: a SharePoint code injection reachable with an ordinary user account

#microsoft #codeinjection #collaboration

2 min read

OnaEiuspkz

Oct 5

Rancher on 23,600 observed hosts: a management console with credentials for many clusters

#attacksurface #zoomeye #rancher #kubernetes

2 min read

OnaEiuspkz

Oct 5

Subdomain Takeover: The Dangling Record That Keeps Handing Out Your Brand

#websecurity #dns #assetmanagement

3 min read

OnaEiuspkz

Oct 5

Auditing file-serving permission checks, using CVE-2026-100727 as the model

#cybersecurity #infosec #security

3 min read

OnaEiuspkz

Oct 5

Server-side request forgery: the redirect that walks past your allowlist

#ssrf #web #cloud

2 min read

OnaEiuspkz

Oct 5

oc-mirror CVE-2026-75939: A Signature Check That Runs in the Wrong Order

#openshift #supplychain #pgp #disconnected

2 min read

OnaEiuspkz

Oct 4

Nexus Repository Manager: 81,550 title matches and 33,844 fingerprints on the artefact pipeline everything depends on

#exposure #supplychain

2 min read

OnaEiuspkz

Oct 4

Shai-Hulud 2.0 and the npm Maintainer Account Problem

#cybersecurity #javascript #node #security

3 min read

OnaEiuspkz

Oct 4

Apache ZooKeeper Authorization Bypass: How deleteContainer Skips Session and ACL Checks

#apachezookeeper #vulnerability #cve202659739 #distributedsystems

2 min read

OnaEiuspkz

Oct 4

Evidence for the Auditor: Proving Adobe Connect Reached 12.12

#audit #patchverification #adobeconnect #compliance

3 min read

OnaEiuspkz

Oct 4

1,531,046 Internet-Reachable iSCSI Endpoints and Only 521 Confirmed Fingerprints

#attacksurface #iscsi #storage #measurement

4 min read

OnaEiuspkz

Oct 3

AI Systems Became an Inventory Problem: What the NCSC 2027 Assessment Means for Exposure Discovery

#security #ai #exposure #zoomeye

3 min read

OnaEiuspkz

Oct 3

A self-hosted remote control relay is reachable by design, which is exactly why it needs a check

#zoomeye #exposure #rustdesk #remoteaccess

3 min read

OnaEiuspkz

Oct 3

CVE-2026-84411 in MikroTik RouterOS: why a pre-authentication integer underflow reaches root

#security #mikrotik #routeros #cve

2 min read

OnaEiuspkz

Oct 3

The FBI and EPA Warning on Water-Sector PLCs: What the MicroLogix Campaign Exposed

#ics #watersector #plc #criticalinfrastructure

4 min read

OnaEiuspkz

Oct 3

918,415 GitLab Assets on HTTP: Measuring the Source of Truth

#zoomeye #gitlab #sourcecontrol #exposuremeasurement

2 min read

OnaEiuspkz

Oct 3

Password Managers at Organisational Scale: The Recovery Problem Returns

#security #identity #credentials

2 min read

OnaEiuspkz

Oct 2

Visibility Before Detection: What the GeoServer Case Teaches About Out-of-Band Telemetry

#security #geoserver #cve202436401 #attacksurface

1

3 min read

OnaEiuspkz

Oct 2

Hardening a Self-Managed GitLab Instance After CVE-2026-85706

#gitlab #incidentresponse #hardening #cve202685706

2

2 min read

OnaEiuspkz

Oct 2

Why Patching CVE-2026-96369 Often Fails in Composer and Container Deployments

#security #vulnerability #drupal #cve202696369

2

3 min read

OnaEiuspkz

Oct 2

PaperCut CVE-2026-81578 and CVE-2026-82078: A Two-Flaw Chain That Ran at Agent Speed

#papercut #chainexploitation #unsafereflection #domaincredentials

3 min read

OnaEiuspkz

Oct 2

Patch Priorities for CVE-2026-78249: What MFP Owners Should Do First

#vulnerability #pathtraversal #mfp #printing

2 min read

OnaEiuspkz

Oct 1

CVE-2026-65660: a SharePoint flaw that never writes a file to disk

#cybersecurity #infosec #microsoft #security

3 min read

OnaEiuspkz

Oct 1

CVE-2026-60004: code injection through the Gitea diffpatch API, and why a forge holds everything

#gitea #supplychain #codeinjection

2 min read

OnaEiuspkz

Oct 1

SonicWall SMA1000 exposure: what a CVSS 10.0 edge-device chain means for attack surface inventory

#exposuremanagement #edgedevices #sonicwall #zoomeye

3 min read

OnaEiuspkz

Oct 1

Three Ways to Reach a Docker Daemon, and What Each One Looks Like Externally

#docker #remoteapi #tls #zoomeye

3 min read

OnaEiuspkz

Oct 1

Which Drupal Modules an Automated Scanner Hits First After WID-SEC-2026-3554

#security #drupal #exposure #cve202696359

1

3 min read

OnaEiuspkz

Oct 1

GitHub Actions Supply Chain Risk: Pinning, OIDC and Least-Privilege Tokens

#supplychain #cicd #githubactions

1

2 min read

OnaEiuspkz

Sep 30

5432 and 1433: two database ports, ten million answers, and the question of what answered

#postgres #sqlserver #zoomeye

1

3 min read

OnaEiuspkz

Sep 30

3,199 Apache Druid instances: an analytics engine with an administrative side

#druid #analytics #exposure #ingestion

1

2 min read

OnaEiuspkz

Sep 30

CVE-2026-8452 in Citrix NetScaler: how a SAML parsing overflow became pre-auth code execution

#citrixnetscaler #saml #edgeappliance

1

2 min read

OnaEiuspkz

Sep 30

Messaging and Logging Layers: 143,047 ActiveMQ and 32,169 Graylog Matches

#security #exposuremanagement #zoomeye

2

2 min read

OnaEiuspkz

Sep 30

Comment2Shell CVE-2026-93485: An Anonymous Comment That Reaches the Server

#wordpress #crosssitescripting #cms #patchmanagement

1

3 min read

OnaEiuspkz

Sep 30

GitLab Self-Managed Patch Guide: Moving to 19.4.1, 19.3.3, or 19.2.7

#vulnerability #gitlab #remotecodeexecution #cicd

1

2 min read

1 Week Community Wellness Streak

Want to connect with OnaEiuspkz?