DEV Community

#zoomeyearticle

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Budibase exposure review: internal apps need an explicit identity boundary

Budibase exposure review: internal apps need an explicit identity boundary

Comments 1
2 min read
Frigate exposure review: separate the camera UI from the unauthenticated API

Frigate exposure review: separate the camera UI from the unauthenticated API

Comments
2 min read
AFFiNE's admin boundary matters more than a zero app fingerprint

AFFiNE's admin boundary matters more than a zero app fingerprint

Comments
3 min read
Meilisearch app fingerprints still need key-scope checks

Meilisearch app fingerprints still need key-scope checks

Comments
2 min read
HedgeDoc exposure needs a note-sharing boundary review

HedgeDoc exposure needs a note-sharing boundary review

Comments
2 min read
NetBox inventories expose network context beyond login pages

NetBox inventories expose network context beyond login pages

Comments
2 min read
Backstage catalogs expose organizational structure when identity is optional

Backstage catalogs expose organizational structure when identity is optional

Comments
2 min read
Proxmox VE management exposure needs realm and token review

Proxmox VE management exposure needs realm and token review

Comments
3 min read
Garage fingerprinting needs to separate S3 from its admin API

Garage fingerprinting needs to separate S3 from its admin API

Comments 1
2 min read
FortiSIEM and port 27918: what an open port does and does not tell you

FortiSIEM and port 27918: what an open port does and does not tell you

Comments
3 min read
Apache httpd's October fixes and the mod_vhost_alias precondition nobody checks

Apache httpd's October fixes and the mod_vhost_alias precondition nobody checks

1
Comments 1
3 min read
Measuring self-managed GitLab exposure without counting the wrong thing

Measuring self-managed GitLab exposure without counting the wrong thing

Comments 1
3 min read
Exchange Server on the internet: reading exposure when the banner names the protocol, not the build

Exchange Server on the internet: reading exposure when the banner names the protocol, not the build

Comments
3 min read
Five NGINX CVEs are conditional. Measure the conditions, not just the version

Five NGINX CVEs are conditional. Measure the conditions, not just the version

Comments
4 min read
Remote support appliances: the exposure you can see is the login page, not the patch level

Remote support appliances: the exposure you can see is the login page, not the patch level

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.