OnaEiuspkz - DEV Community

OnaEiuspkz

Oct 4

Apache ZooKeeper Authorization Bypass: How deleteContainer Skips Session and ACL Checks

#apachezookeeper #vulnerability #cve202659739 #distributedsystems

2 min read

OnaEiuspkz

Oct 4

Evidence for the Auditor: Proving Adobe Connect Reached 12.12

#audit #patchverification #adobeconnect #compliance

3 min read

OnaEiuspkz

Oct 4

1,531,046 Internet-Reachable iSCSI Endpoints and Only 521 Confirmed Fingerprints

#attacksurface #iscsi #storage #measurement

4 min read

OnaEiuspkz

Oct 3

AI Systems Became an Inventory Problem: What the NCSC 2027 Assessment Means for Exposure Discovery

#security #ai #exposure #zoomeye

3 min read

OnaEiuspkz

Oct 3

A self-hosted remote control relay is reachable by design, which is exactly why it needs a check

#zoomeye #exposure #rustdesk #remoteaccess

3 min read

OnaEiuspkz

Oct 3

CVE-2026-84411 in MikroTik RouterOS: why a pre-authentication integer underflow reaches root

#security #mikrotik #routeros #cve

2 min read

OnaEiuspkz

Oct 3

The FBI and EPA Warning on Water-Sector PLCs: What the MicroLogix Campaign Exposed

#ics #watersector #plc #criticalinfrastructure

4 min read

OnaEiuspkz

Oct 3

918,415 GitLab Assets on HTTP: Measuring the Source of Truth

#zoomeye #gitlab #sourcecontrol #exposuremeasurement

2 min read

OnaEiuspkz

Oct 3

Password Managers at Organisational Scale: The Recovery Problem Returns

#security #identity #credentials

2 min read

OnaEiuspkz

Oct 2

Visibility Before Detection: What the GeoServer Case Teaches About Out-of-Band Telemetry

#security #geoserver #cve202436401 #attacksurface

1

3 min read

OnaEiuspkz

Oct 2

Hardening a Self-Managed GitLab Instance After CVE-2026-85706

#gitlab #incidentresponse #hardening #cve202685706

2

2 min read

OnaEiuspkz

Oct 2

Why Patching CVE-2026-96369 Often Fails in Composer and Container Deployments

#security #vulnerability #drupal #cve202696369

2

3 min read

OnaEiuspkz

Oct 2

PaperCut CVE-2026-81578 and CVE-2026-82078: A Two-Flaw Chain That Ran at Agent Speed

#papercut #chainexploitation #unsafereflection #domaincredentials

3 min read

OnaEiuspkz

Oct 2

Patch Priorities for CVE-2026-78249: What MFP Owners Should Do First

#vulnerability #pathtraversal #mfp #printing

2 min read

OnaEiuspkz

Oct 1

CVE-2026-65660: a SharePoint flaw that never writes a file to disk

#cybersecurity #infosec #microsoft #security

3 min read

OnaEiuspkz

Oct 1

CVE-2026-60004: code injection through the Gitea diffpatch API, and why a forge holds everything

#gitea #supplychain #codeinjection

2 min read

OnaEiuspkz

Oct 1

SonicWall SMA1000 exposure: what a CVSS 10.0 edge-device chain means for attack surface inventory

#exposuremanagement #edgedevices #sonicwall #zoomeye

3 min read

OnaEiuspkz

Oct 1

Three Ways to Reach a Docker Daemon, and What Each One Looks Like Externally

#docker #remoteapi #tls #zoomeye

3 min read

OnaEiuspkz

Oct 1

Which Drupal Modules an Automated Scanner Hits First After WID-SEC-2026-3554

#security #drupal #exposure #cve202696359

1

3 min read

OnaEiuspkz

Oct 1

GitHub Actions Supply Chain Risk: Pinning, OIDC and Least-Privilege Tokens

#supplychain #cicd #githubactions

1

2 min read

OnaEiuspkz

Sep 30

5432 and 1433: two database ports, ten million answers, and the question of what answered

#postgres #sqlserver #zoomeye

1

3 min read

OnaEiuspkz

Sep 30

3,199 Apache Druid instances: an analytics engine with an administrative side

#druid #analytics #exposure #ingestion

1

2 min read

OnaEiuspkz

Sep 30

CVE-2026-8452 in Citrix NetScaler: how a SAML parsing overflow became pre-auth code execution

#citrixnetscaler #saml #edgeappliance

1

2 min read

OnaEiuspkz

Sep 30

Messaging and Logging Layers: 143,047 ActiveMQ and 32,169 Graylog Matches

#security #exposuremanagement #zoomeye

2

2 min read

OnaEiuspkz

Sep 30

Comment2Shell CVE-2026-93485: An Anonymous Comment That Reaches the Server

#wordpress #crosssitescripting #cms #patchmanagement

1

3 min read

OnaEiuspkz

Sep 30

GitLab Self-Managed Patch Guide: Moving to 19.4.1, 19.3.3, or 19.2.7

#vulnerability #gitlab #remotecodeexecution #cicd

1

2 min read

OnaEiuspkz

Sep 29

Inventory gaps that CVE-2026-88773 will expose in most NetScaler estates

#vulnerability #citrix #netscaler #requestsmuggling

1

2 min read

OnaEiuspkz

Sep 29

Graylog on the Internet: 14,061 Matches on a Platform That Centralises Every Log

#zoomeye #exposuremeasurement #logging #monitoring

1

3 min read

OnaEiuspkz

Sep 29

Reading the Three LXD Advisories Together: CVE-2026-87799 and Its btrfs Siblings

#security #vulnerability #lxd #cve202687799

1

3 min read

OnaEiuspkz

Sep 29

Runtime Detection with eBPF: What Kernel-Level Telemetry Adds to Container Security

#security #defensivepractice

1

3 min read

OnaEiuspkz

Sep 29

GlobalProtect: 1.24 million title matches against 611 application fingerprints

#vpn #globalprotect #fingerprintcoverage

2 min read

OnaEiuspkz

Sep 29

CVE-2026-96365 and the Contribution Model: Why Drupal Site Owners Carry the Patch Burden

#security #drupal #cve202696365 #supplychain

1

2 min read

OnaEiuspkz

Sep 28

Nearly 11 Million Submission Endpoints on Port 587: The Mail Path That Is Rarely Reviewed

#security #attacksurface #zoomeye

3 min read

OnaEiuspkz

Sep 28

Reconciling external attack surface findings with what you already own

#attacksurface #assetinventory #reconnaissance

1

2 min read

OnaEiuspkz

Sep 28

Remote Access Services at Internet Scale: RDP, VNC and Telnet Counts

#cybersecurity #infosec #networking #security

1

2 min read

OnaEiuspkz

Sep 28

2,404,811 answers on port 2181 and 1,381,208 on port 9092: the difference between a coordinator and a broker

#zookeeper #kafka #zoomeye

1

3 min read

OnaEiuspkz

Sep 28

Zimbra Behind a Reverse Proxy: Finding Mail Servers That Refuse to Identify Themselves

#zimbra #cve202566376 #exposuremanagement #zoomeye

3 min read

OnaEiuspkz

Sep 27

10,176 Siemens SIMATIC Matches and 41,591 Hosts on Port 502: Industrial Exposure in Two Views

#zoomeye #ics #modbus #exposure

3 min read

OnaEiuspkz

Sep 27

44,076 Indexed Moodle Instances: Learning Platforms Hold More Than Course Content

#exposuremanagement #educationsecurity

3 min read

OnaEiuspkz

Sep 27

Healthcare Messaging at Internet Scale: 1.28 Million Mirth Connect Fingerprints

#zoomeye #mirthconnect #healthcare #hl7

3 min read

OnaEiuspkz

Sep 27

Auditing OpenCTI Case Creation After CVE-2026-76822

#cybersecurity #graphql #infosec #security

2 min read

OnaEiuspkz

Sep 27

Hardening Against CVE-2026-32996: Veeam Agent Privilege Escalation in Focus

#security #vulnerability #veeam #privilegeescalation

1 min read

OnaEiuspkz

Sep 27

Watching for Exploitation of the Adobe Campaign Classic Flaws While the Patch Is Pending

#adobecampaignclassic #cve202675699 #detection #monitoring

1

2 min read

OnaEiuspkz

Sep 26

1,317,154 GitLab Fingerprints and Why Source Control Is a Supply Chain Target

#cybersecurity #git #security

2 min read

OnaEiuspkz

Sep 26

3,028 Hosts on Port 6443: What Public Kubernetes API Servers Reveal About Cluster Control

#security #attacksurface #kubernetes #zoomeye

3 min read

OnaEiuspkz

Sep 26

CVE-2026-66066: an image upload path that reads /proc/self/environ

#cybersecurity #ruby #security

2 min read

OnaEiuspkz

Sep 26

One Key for Every PBX: The Issabel Framework Hardcoded JWT Flaw (CVE-2026-89026)

#pbx #hardcodedcredentials #cve202689026 #asterisk

2 min read

OnaEiuspkz

Sep 26

Juniper, Sophos, WatchGuard and Barracuda: reading four edge vendors together

#cybersecurity #infrastructure #networking #security

1

2 min read

OnaEiuspkz

Sep 26

CVE-2026-96358 and the Long Tail of Drupal Contributed Modules

#security #drupal #cve #vulnerability

2 min read

OnaEiuspkz

Sep 25

Reading the 9.8 Score for CVE-2026-96357 Correctly

#security #drupal #cve #vulnerability

2 min read

OnaEiuspkz

Sep 25

Measuring the GitLab Attack Surface: What 1.31 Million Indexed Instances Say About Patch Urgency

#security #exposuremanagement #gitlab #zoomeye

3 min read

OnaEiuspkz

Sep 25

When a Certificate Becomes a Clue: Infrastructure Linking in the Toll Fraud Investigation

#threatintelligence #tlscertificates #attribution #zoomeye

1

4 min read

OnaEiuspkz

Sep 25

Seven Days to Disconnect: What the Berlin Breach Says About Containment Speed

#ransomware #incidentresponse #networksegmentation #publicsector

4 min read

OnaEiuspkz

Sep 25

4,827 internet-reachable Zabbix deployments: when the monitoring system is the blind spot

#zoomeye #zabbix #monitoring #exposuremanagement

3 min read

OnaEiuspkz

Sep 25

Two Zero-Days on the VPN Gateway: SonicWall SMA1000 and the Cost of an Internet-Facing Management Interface

#security #networksecurity #vulnerabilitymanagement

3 min read

OnaEiuspkz

Sep 24

350,497 Elasticsearch Fingerprint Matches: Reading a Familiar Exposure Number Carefully

#zoomeye #elasticsearch #exposure

2 min read

OnaEiuspkz

Sep 24

Cloud Metadata Service Abuse: Turning SSRF Into Credentials in Modern Web Stacks

#cloud #ssrf #credentials

2 min read

OnaEiuspkz

Sep 24

AI Gateways Are Becoming Attack Surface: Measuring Exposed LiteLLM Deployments

#zoomeye #attacksurface #aiinfrastructure #exposuremanagement

3 min read

OnaEiuspkz

Sep 24

90,626 Jupyter Notebooks Are Publicly Indexed: The Difference Between Sharing and Exposing

#security #zoomeye #attacksurface

2 min read

OnaEiuspkz

Sep 24

A Defender's Checklist for CVE-2026-75650 in Adobe Commerce and Magento Open Source

#security #vulnerability #adobecommerce #magento

2 min read

1 Week Community Wellness Streak

Want to connect with OnaEiuspkz?