yutianle - DEV Community

yutianle

Oct 4

Lateral Movement Across Zimbra Clusters via CVE-2026-73570

#security #vulnerability #zimbra #cve202673570

2 min read

yutianle

Oct 4

When an Agent Reaches Root: The Zammad Attack and Machine-Speed Intrusion

#vulnerability #zammad #cve2026102490 #helpdesk

2 min read

yutianle

Oct 4

Confluence exposure: 1.8 million fingerprint matches depend on which fingerprint you use

#confluence #fingerprintcoverage #exposuremanagement

2 min read

yutianle

Oct 4

Zipkin at 40 Titles and 562 Fingerprints: When the Signature Finds More Than the Name

#zoomeye #exposure #observability #measurementmethod

4 min read

yutianle

Oct 4

6,918 Paperless matches: a document archive that was meant to replace the filing cabinet

#exposure #zoomeye

2 min read

yutianle

Oct 4

ShieldCrash: A Second Path Around the Microsoft Defender ShieldBreak Fix

#vulnerability #windows #defender #privilegeescalation

3 min read

yutianle

Oct 3

GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain

#pathtraversal #devsecops #credentialexposure #vulnerabilitymanagement

4 min read

yutianle

Oct 3

Measuring Edge Gateway Exposure: Why the Right ZoomEye Query Matters More Than the Number

#exposuremanagement #internetmeasurement #edgesecurity #zoomeye

4 min read

yutianle

Oct 3

Internet-Exposed RDP Is Still the Ransomware On-Ramp the Gunra Advisory Warns About

#cybersecurity #infosec #security #vulnerabilities

3 min read

yutianle

Oct 3

Microsoft SharePoint exposure: 163,266 matching assets and a code injection flaw that needs only a user account

#zoomeye #sharepoint #exposuremanagement #codeinjection

3 min read

yutianle

Oct 3

Prioritizing a 974-CVE Patch Tuesday Without Freezing Your Deployment Pipeline

#security #patchmanagement

3 min read

yutianle

Oct 2

HAProxy: 49,691 Fingerprint Matches at the Front Door

#haproxy #loadbalancer #tlstermination #statisticsinterface

3 min read

yutianle

Oct 2

Path filters that do not filter: CVE-2026-57441 and CVE-2026-57442 in MCPVault

#cve202657441 #cve202657442 #mcp #pathtraversal

3 min read

yutianle

Oct 2

CVE-2026-89775: Reading Host Memory From an ARM64 KVM Guest

#kvm #arm64 #vmescape #cve202689775

4 min read

yutianle

Oct 2

Gitea: 116,010 fingerprints against 120,024 titles, and the self-hosted forge as an identity boundary

#exposure #sourcecontrol

3 min read

yutianle

Oct 2

12,488,458 answers on port 9080 beside 77,076 WebSphere matches: reading a Java middleware estate

#backend #infrastructure #java #software

3 min read

yutianle

Oct 2

GitLab CVE-2026-85706: Why an Arbitrary File Read on a DevSecOps Platform Is a Credential Incident

#gitlab #pathtraversal #credentialrotation #kev

3 min read

yutianle

Oct 1

Prioritising CVE-2026-85706 Work: What a Read on a GitLab Host Is Worth

#gitlab #riskprioritisation #secretsmanagement #cve202685706

3 min read

yutianle

Oct 1

Distributing the Risk: What Global Docker Exposure Numbers Do and Do Not Show

#docker #measurement #risk #zoomeye

1

3 min read

yutianle

Oct 1

Key rotation as a scheduled operation

#keymanagement #cryptography #operations

2 min read

yutianle

Oct 1

Concourse: 3,767 title matches on the pipeline system that executes your build code

#zoomeye #concourse #cicd #buildsystem

2 min read

yutianle

Oct 1

Availability risk on the VPN concentrator: the denial-of-service side of CVE-2026-88772

#security #vulnerability #citrix #netscaler

3 min read

yutianle

Oct 1

A first-day response plan for CVE-2026-84411 in MikroTik RouterOS

#security #response #routeros

2 min read

yutianle

Sep 30

CVE-2026-96355: How to Inventory Drupal Extensions Before You Patch

#security #vulnerability #drupal #cms

4 min read

yutianle

Sep 30

Detection and logging priorities for the exploited NetScaler flaw CVE-2026-88771

#security #vulnerability #citrix #netscaler

3 min read

yutianle

Sep 30

CVE-2026-91843: Unauthenticated Stack Overflow in Check Point Security Management Servers

#security #vulnerability #checkpoint #remotecodeexecution

2 min read

yutianle

Sep 30

Detection signals for PRTG abuse: what to look for after CVE-2026-4637 and CVE-2026-4638

#security #vulnerability #prtg #cve20264637

2 min read

yutianle

Sep 30

What Drupal Builders Should Log After CVE-2026-96366: Detection Ideas for an Access Bypass

#security #drupal #webform #accessbypass

2 min read

yutianle

Sep 30

Brevo: A Cloudflare Worker That Rewrote a Marketing Platform in Flight

#supplychain #cdn #wordpress #clickfix

2 min read

yutianle

Sep 29

Twenty Wormable Bugs in One Patch Tuesday: What the September 2026 Microsoft Release Tells Us

#cybersecurity #patchmanagement #microsoft

1

3 min read

yutianle

Sep 29

Drupal Contributed Modules Under WID-SEC-2026-3554: A Patching Plan for CVE-2026-96359 and the Wider Batch

#security #drupal #patchmanagement #cve202696359

1

3 min read

yutianle

Sep 29

Network segmentation decides whether CVE-2026-7273 in Zyxel GS1900 switches is reachable

#cybersecurity #infosec #networking #security

4 min read

yutianle

Sep 29

Cisco FMC CVE-2026-20079: When the Management Plane Is the Attack Plane

#cisco #fmc #cve202620079 #managementplane

4 min read

yutianle

Sep 29

Clock synchronisation as a forensic prerequisite

#forensics #timesync #logging

2 min read

yutianle

Sep 28

Gerrit Code Review on the Open Internet: 2,508 Title Matches and the Credential Store Behind Them

#security #exposuremanagement #zoomeye

2 min read

yutianle

Sep 28

Detecting unexpected custom attributes after CVE-2026-96367

#security #vulnerability #drupal #webform

1

2 min read

yutianle

Sep 28

CVE-2026-96364 in the patch pipeline: dependency order for 16 Drupal projects

#security #drupal #cve202696364 #contributedmodules

3 min read

yutianle

Sep 28

981,494 FortiGate Fingerprints and 16.4 Million RDP Services: Measuring the Gunra Initial-Access Surface

#zoomeye #ransomware #fortigate #rdp

3 min read

yutianle

Sep 28

CVE-2026-26084: the sandbox appliance that answers questions it should refuse

#cybersecurity #infosec #security

1

3 min read

yutianle

Sep 28

What port 2375 says about Docker exposure that a product fingerprint does not

#docker #zoomeye #exposuremeasurement

1

3 min read

yutianle

Sep 27

Why CVE-2026-96363 Is the Submodule Problem, Not a Drupal Core Problem

#security #drupal #webform #crosssitescripting

1

3 min read

yutianle

Sep 27

From Patch Tuesday to KEV in Three Weeks: The CVE-2026-19490 NetScaler Timeline

#security #vulnerability #citrix #netscaler

3 min read

yutianle

Sep 27

RouterOS at the Network Edge: Operational Risk From CVE-2026-67279 and CVE-2026-86060

#vulnerability #routeros #mikrotik #ssh

2 min read

yutianle

Sep 27

Mapping VeloCloud Orchestrator Exposure: What ZoomEye Data Says About CVE-2026-93952

#security #zoomeye #exposure #velocloud

2 min read

yutianle

Sep 27

What CERT-BUND Published About CVE-2026-96361 and What the Record Leaves Open

#security #drupal #cve202696361 #advisoryanalysis

2 min read

yutianle

Sep 27

414,009 ESXi hosts and 1,495,455 answers on port 902: sizing a hypervisor estate from outside

#vmwareesxi #zoomeye #hypervisor

1

3 min read

yutianle

Sep 26

Adobe Connect 12.12: Why a 9.9 SQL Injection Deserves Its Own Patch Window

#adobe #adobeconnect #cve202675682 #sqlinjection

1

4 min read

yutianle

Sep 26

Shared Hosting and CVE-2026-48842: When One Mail Server Holds Every Tenant

#vulnerability #webmail #sqlinjection #zoomeye

1

3 min read

yutianle

Sep 26

MISP Feed Redirects Before 2.5.45: When an Outbound Request Carries Credentials to Another Host

#security #ssrf #threatintelligence #egress

1

3 min read

yutianle

Sep 26

132,707 Magento Matches and 5,314 Title Matches: Measuring a Commerce Platform Under Active Exploitation

#security #exposuremanagement #ecommerce

1

3 min read

yutianle

Sep 26

CVE-2026-76461: SQL injection in an email gateway reaches root on the appliance

#cisco #emailsecurity #sqlinjection

1

2 min read

yutianle

Sep 26

73,105 Airflow instances, 11,673 SonarQube and 33,837 Nexus: fingerprinting the build and quality toolchain

#airflow #sonarqube #nexus #zoomeye

3 min read

yutianle

Sep 25

From Java Byte Stream to Root: Cisco ISE Remote Code Execution Flaws

#cybersecurity #infosec #java #security

2 min read

yutianle

Sep 25

CVE-2026-69676: Kerberos Authentication Bypass by Capture-Replay

#identity #kerberos #activedirectory #replay

2 min read

yutianle

Sep 25

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

#apisecurity #authorization #bola #owasp

4 min read

yutianle

Sep 25

From OAuth Profile to Root: Tracing the CVE-2026-94127 Attack Path in F5 BIG-IP APM

#cve202694127 #f5 #bigip #apm

3 min read

yutianle

Sep 25

A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways

#security #aisecurity #vulnerabilitymanagement

4 min read

yutianle

Sep 25

Credentials in the Agent's Reach: The Codex Memory-Sharing Issue

#authentication #cybersecurity #node #security

1

3 min read

yutianle

Sep 24

Cisco Secure Email Gateway Injection Bug CVE-2026-76443: What Administrators Should Do First

#security #vulnerability #cisco #cve202676443

2 min read

yutianle

Sep 24

The Virtualization Control Plane Is on the Internet: 414,092 ESXi and 140,746 Proxmox VE Fingerprints

#zoomeye #virtualization #hypervisor #managementplane

4 min read

Writing Debut

Want to connect with yutianle?