SorrelThorncroft - DEV Community

SorrelThorncroft

Oct 29

OpenProject Exposure Begins With Project Roles and Login Policy

#zoomeye #openproject #projectmanagement

3 min read

SorrelThorncroft

Oct 29

Nexus Repository discovery should separate anonymous reads from admin access

#cybersecurity #autonomous #defensiveengineering

3 min read

SorrelThorncroft

Oct 29

Patching UpdraftPlus is not enough after the UpdraftCentral key theft

#wordpress #supplychain #remotemanagement #incidentresponse

4 min read

SorrelThorncroft

Oct 29

Frontend mTLS in Gateway API needs a listener-level review

#gatewayapi #mutualtls #kubernetes

3 min read

SorrelThorncroft

Oct 29

DolphinScheduler exposure starts with authentication and tenant boundaries

#apachedolphinscheduler #zoomeye #exposuremanagement

3 min read

SorrelThorncroft

Oct 29

OIDC back-channel logout is a session termination protocol, not a logout link

#openidconnect #sessionsecurity #logout

4 min read

SorrelThorncroft

Oct 29

Supabase Studio discovery should stop at the management boundary

#zoomeye #supabasestudio #managementplane

3 min read

SorrelThorncroft

Oct 29

RedisInsight exposure can concentrate database credentials

#redisinsight #redis #zoomeye

2 min read

SorrelThorncroft

Oct 28

Combining Samba discovery with evidence of SMB signing enforcement

#zoomeye #samba #smbsigning #fileserversecurity

3 min read

SorrelThorncroft

Oct 28

After Patching CVE-2026-43829: Verification and Recovery Checks for ADAM-3600

#security #vulnerability #ot #cve202643829

3 min read

SorrelThorncroft

Oct 28

HiRDB Returned Zero on Two Search Fields; That Is a Visibility Finding

#zoomeye #hirdb #assetvisibility #databasesecurity

3 min read

SorrelThorncroft

Oct 28

Turning the Railway Incident Into a Recurring Asset and Secret Review

#security #cloud #llmjacking #zoomeye

4 min read

SorrelThorncroft

Oct 28

Crash During Connect: Triaging a Suspected CVE-2026-44236 Incident

#vulnerability #rabbitmq #amqp #cve202644236

3 min read

SorrelThorncroft

Oct 28

Nginx Proxy Manager: 316,548 Fingerprints and a Fourteen-Million-Host Port

#reverseproxy #measurement #zoomeye

3 min read

SorrelThorncroft

Oct 28

127,120 ClickHouse Fingerprints and the Default User Behind Them

#clickhouse #analytics #accesscontrol #defaultuser

3 min read

SorrelThorncroft

Oct 27

A test environment held 525,000 records, and 20,000 physical PIN codes

#security #databreach #highereducation

4 min read

SorrelThorncroft

Oct 27

408,924 Proxmox Fingerprints and 957,581 Portainer Titles Describe Two Kinds of Management Exposure

#proxmox #portainer #virtualization #attacksurface

1

4 min read

SorrelThorncroft

Oct 27

CVE-2026-6653 reaches further than the libxml2 package name

#libxml2 #cve20266653 #vulnerability #zoomeye

2 min read

SorrelThorncroft

Oct 27

Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

#vulnerability #plex #rce #exposure

4 min read

SorrelThorncroft

Oct 27

CVE-2026-97205: An 8-Bit Counter and 256 Pending AIO Operations

#cybersecurity #infosec #security

3 min read

SorrelThorncroft

Oct 27

Rotating every password after a hypervisor panel breach

#security #zoomeye #vmmanager #hosting

3 min read

SorrelThorncroft

Oct 27

Three authorisation holes in one helpdesk stack: what CVE-2026-111937, CVE-2026-111938 and CVE-2026-111939 have in common

#security #authorization #helpdesk #crm

6 min read

SorrelThorncroft

Oct 27

The Node.js CVE nobody owns: CVE-2026-111497 and the vendored Brotli problem

#security #vulnerability #node #brotli

3 min read

SorrelThorncroft

Oct 26

Why an SSRF that accepts any X-Plex-Token matters more than its 4.3 score

#vulnerability #plexmediaserver #cve202696654 #remotecodeexecution

4 min read

SorrelThorncroft

Oct 26

2.5 million SonicWall matches and zero for SMA1000: why a vendor name is not a product inventory

#zoomeye #exposure #sonicwall #measurement

4 min read

SorrelThorncroft

Oct 26

Four overflow bugs, one coding lesson: what NSD 4.15.3 says about parser hardening

#dns #nsd #vulnerability #cve2026101338

4 min read

SorrelThorncroft

Oct 26

How CVE-2026-106931 Turns SiteGuard Server Edition Statistics into Root

#vulnerability #webapplicationfirewall #commandinjection #privilegeescalation

4 min read

SorrelThorncroft

Oct 26

CVE-2026-101982 and CVE-2026-101990: Two Route-Advertisement Bugs That End in Root on Junos

#cybersecurity #infosec #networking #security

4 min read

SorrelThorncroft

Oct 26

Thirty Days From Exposure Census to Verified Remediation: A CVE-2026-102764 Plan

#zoomeye #remediation #beyondtrust #operations

3 min read

SorrelThorncroft

Oct 26

Linkerd: 306 page titles against 27,259 body matches, and a zero on the admin port that is the reassuring part

#servicemesh #exposure #zoomeye

3 min read

SorrelThorncroft

Oct 25

`Content-Disposition` decides a filename, and the filename is where a download becomes a write

#websecurity #fileupload #http

1

4 min read

SorrelThorncroft

Oct 25

Should You Worry About CVE-2026-101339? A Decision Guide for NSD Operators

#vulnerability #dns #nsd

3 min read

SorrelThorncroft

Oct 25

BACnet on UDP 47808 is a building protocol that answers a broadcast

#bacnet #otsecurity #buildingautomation #networksegmentation

3 min read

SorrelThorncroft

Oct 25

Two Drupal RCEs, One Patch Window: Building the Change Plan

#drupal #remotecodeexecution #securityadvisory #vulnerability

3 min read

SorrelThorncroft

Oct 25

Why any X-Plex-Token value matters in the Plex timeline SSRF

#cybersecurity #infosec #security

3 min read

SorrelThorncroft

Oct 25

Recovering a PAN-OS firewall from CVE-2026-0321 maintenance mode

#panos #cve20260321 #incidentresponse #highavailability

3 min read

SorrelThorncroft

Oct 25

Your Refrigeration Panels Came Back: Monitoring Exposure Drift After an Incident

#security #zoomeye #monitoring #ot

4 min read

SorrelThorncroft

Oct 25

39,534 Cisco Expressway fingerprints and the clustering precondition behind CVE-2026-76466

#zoomeye #ciscoexpressway #cve202676466 #mra

4 min read

SorrelThorncroft

Oct 24

CVE-2026-74041 and the integrity of your security telemetry

#vulnerability #wazuh #cve202674041 #securitymonitoring

3 min read

SorrelThorncroft

Oct 24

Two Accepts and One Reject: How Bricksforge CVE-2026-85097 Turned a Form Upload into a Webshell

#wordpress #fileupload #rce #webshell

3 min read

SorrelThorncroft

Oct 24

FortiManager Is the Quietest Door in Your Fortinet Estate

#fortinet #fortimanager #attacksurface #zoomeye

3 min read

SorrelThorncroft

Oct 24

Zimbra's sharing features are an unauthenticated injection surface

#security #vulnerabilitymanagement

4 min read

SorrelThorncroft

Oct 24

Spark's master UI and the applications it can restart

#security #attacksurfacemanagement

4 min read

SorrelThorncroft

Oct 24

Chevereto: 8,818 Fingerprint Matches on an Image Host, and 4,412 Titles That Agree With It

#zoomeye #chevereto #imagehosting #exposuremeasurement

1

3 min read

SorrelThorncroft

Oct 24

DataEase: 9,832 Fingerprints Against 1,246 Titles, and the JDBC Credential in the Datasource Form

#zoomeye #dataease #businessintelligence #datasourcecredentials

3 min read

SorrelThorncroft

Oct 24

Four attributes left out of PraisonAI's subprocess blocklist

#sandboxescape #python #agents

1

4 min read

SorrelThorncroft

Oct 23

Designing a reverse proxy that survives a Plex SSRF

#vulnerability #cve202696655 #plex #ssrf

3 min read

SorrelThorncroft

Oct 23

GitLab's second perfect score in nine days: why anyone who patched on 12 October is still exposed

#security #cybersecurityarticle

4 min read

SorrelThorncroft

Oct 23

ProFTPD mod_copy is eleven years old and back on the exploited list

#security

3 min read

SorrelThorncroft

Oct 23

authentik: 10,425 titles, 16 fingerprints, and an identity provider that hides behind its own login page

#security

4 min read

SorrelThorncroft

Oct 23

Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

SorrelThorncroft

Oct 23

Hunting VeloCloud Orchestrator exploitation: what CVE-2026-114625 leaves in the logs

#vulnerability #sdwan #arista #velocloud

3 min read

SorrelThorncroft

Oct 23

Past Precedent: Why BeyondTrust Edge Appliances Keep Returning to the Exploited List

#zoomeye #threatintelligence #beyondtrust #edgedevices

4 min read

SorrelThorncroft

Oct 23

Appwrite: 5,102 titles, 4,094 fingerprints, and 531 hosts on the default web port

#security

3 min read

SorrelThorncroft

Oct 23

Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not

#cvss #riskscoring #vulnerabilitymanagement #arista

2 min read

SorrelThorncroft

Oct 22

You can measure a cipher suite. You cannot measure a crypto library build

#security #zoomeyearticle

3 min read

SorrelThorncroft

Oct 22

FortiAnalyzer's collection port is the internet's most crowded number

#security #attacksurfacemanagement

4 min read

SorrelThorncroft

Oct 22

Patch Operations for CVE-2026-0315: Map GlobalProtect Builds Before You Upgrade

#patchmanagement #macos #globalprotect #cve20260315

4 min read

SorrelThorncroft

Oct 22

secure-file-priv Is Not a Patch: Hardening MariaDB File Writes After CVE-2026-107818

3 min read

SorrelThorncroft

Oct 22

Threat Modelling the Insider Path in CVE-2026-0313

#vulnerability #cortexxsoar #cve20260313

3 min read

Writing Debut

Want to connect with SorrelThorncroft?