DEV Community

#exposureinventory

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Invoice Ninja: The Client Portal Is Part of the Exposure Surface

Invoice Ninja: The Client Portal Is Part of the Exposure Surface

Comments
2 min read
Actual Budget Server Exposure: Password Access Is Only the First Boundary

Actual Budget Server Exposure: Password Access Is Only the First Boundary

Comments
3 min read
Komga: API Keys and Library Restrictions Need to Be Reviewed Together

Komga: API Keys and Library Restrictions Need to Be Reviewed Together

Comments
2 min read
Bytebase at the Database Control Plane: Measure the Instance, Then Review Its Authority

Bytebase at the Database Control Plane: Measure the Instance, Then Review Its Authority

Comments
2 min read
Dagu's Default Execution Path Turns Exposure Into Command Execution

Dagu's Default Execution Path Turns Exposure Into Command Execution

Comments
2 min read
Mixpost Workspaces Hold Social Authority; Inventory the Roles and Tokens

Mixpost Workspaces Hold Social Authority; Inventory the Roles and Tokens

Comments
2 min read
Karakeep Crawlers Extend an SSRF Boundary Into the Internal Network

Karakeep Crawlers Extend an SSRF Boundary Into the Internal Network

Comments
2 min read
Pixelfed: 727 title matches and an OAuth surface that can be switched off

Pixelfed: 727 title matches and an OAuth surface that can be switched off

Comments
2 min read
GoToSocial: 132 application matches with scoped API authority

GoToSocial: 132 application matches with scoped API authority

Comments
2 min read
Misskey: 3,380 application matches and a token scope decision

Misskey: 3,380 application matches and a token scope decision

Comments
2 min read
WriteFreely: 49 title matches and an administrator who may be the first user

WriteFreely: 49 title matches and an administrator who may be the first user

Comments
2 min read
Pleroma: 578 title matches and the risk of a static admin token

Pleroma: 578 title matches and the risk of a static admin token

Comments 1
2 min read
Owncast: 3,117 title matches separate the stream key from the admin password

Owncast: 3,117 title matches separate the stream key from the admin password

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.