StarkMan - DEV Community

StarkMan

Oct 4

SeaweedFS and the Object Store You Forgot You Deployed: 6,345 Matches

#zoomeye #exposuremeasurement #objectstorage #inventory

2 min read

StarkMan

Oct 4

Cisco FMC CVE-2026-20079: a CVSS 10.0 management-plane bypass and the clusters behind it

#cisco #firewall #managementplane #cve202620079

4 min read

StarkMan

Oct 4

AI Agents as Intruders: What the JadePuffer Azure Cases Change About Incident Response

#security #cloud #identity #aiagents

2 min read

StarkMan

Oct 4

Pgpool-II 3.5.x through 4.2.x: the branches that will not be patched

#security #postgres #pgpool #cve

3 min read

StarkMan

Oct 3

CVE-2026-63292 Timeline and Technical Anatomy: An Apache mod_vhost_alias Buffer Overflow

#apache #httpd #vulnerability #modvhostalias

1

2 min read

StarkMan

Oct 3

Telnet, SSH and Port 8080: Identifying the Device Layer Where Payloads Hide

#securityevent #crypter #malwareevasion #assetidentification

3 min read

StarkMan

Oct 3

Adobe Connect Android App 4.5: The Mobile Half of APSB26-150

#adobeconnect #android #mobilepatching #cve202675682

2 min read

StarkMan

Oct 3

Detecting Data Exfiltration Over DNS: Signals That Survive Encrypted Transport

#security #defensivepractice

3 min read

StarkMan

Oct 3

Choosing Between rsync and btrfs receive in LXD: Exposure Differences Under CVE-2026-87799

#security #vulnerability #lxd #cve202687799

3 min read

StarkMan

Oct 3

Field-level encryption: choosing the layer that has to hold

#encryption #dataprotection #keymanagement

2 min read

StarkMan

Oct 2

Why CISA gave agencies three days to patch CVE-2026-7273 in Zyxel GS1900 switches

#cybersecurity #infosec #networking #security

4 min read

StarkMan

Oct 2

55,812 SonicWall SSL-VPN Assets on HTTP and the Management Plane Problem

#zoomeye #sonicwall #sma1000 #sslvpn

2 min read

StarkMan

Oct 2

Edge Appliances Keep Being Targeted: Where CVE-2026-88774 Fits

#security #citrix #netscaler #cve202688774

3 min read

StarkMan

Oct 2

Reading CVE-2026-96364 in the September 2026 Drupal contributed-module batch

#security #drupal #cve202696364 #contributedmodules

1

4 min read

StarkMan

Oct 2

Measuring NetScaler exposure: what a 239,277-asset count does and does not tell you about CVE-2026-88771

#zoomeye #exposure #citrix #netscaler

1

2 min read

StarkMan

Oct 2

CVE-2026-96355: Six Impact Classes, Only One of Which Is a Defacement Problem

#security #vulnerability #drupal #cms

5 min read

StarkMan

Oct 1

What Discloses From GitLab EE CVE-2026-87719: Advanced Search Configuration and Credentials

#security #vulnerability #gitlab #cve202687719

1

2 min read

StarkMan

Oct 1

Detecting Trouble from CVE-2026-88775 When No Trigger Is Public

#security #vulnerability #citrix #netscaler

3 min read

StarkMan

Oct 1

Why "Zimbra Web Client" Appears Half a Million Times and Almost None of It Is a Mail Server

#zimbra #cve202566376 #exposuremanagement #zoomeye

3 min read

StarkMan

Oct 1

Why CVE-2026-77762 Shows a Vendor Low Rating and a Third-Party 8.1 Score

#apachetomcat #cve202677762 #cvss #riskscoring

2 min read

StarkMan

Oct 1

Default Credentials on Exposed VPN and SSH Gateways: The Gunra Path With the Faintest Audit Trail

#cybersecurity #infosec #security

3 min read

StarkMan

Oct 1

CVE-2026-96362 and the Limits of Version-Based Drupal Scanning

#security #drupal #vulnerability #cve202696362

3 min read

StarkMan

Sep 30

When the Artifact Repository Is the Target: JFrog Artifactory and the Software Supply Chain Chokepoint

#security #supplychain #vulnerabilitymanagement

3 min read

StarkMan

Sep 30

Drupal's September 2026 Contrib Batch: Where CVE-2026-96366 Sits in a 36-CVE Advisory

#security #drupal #webform #accessbypass

1

2 min read

StarkMan

Sep 30

Apache Cassandra on the internet: where the exposed port is not the service

#zoomeye #cassandra #database #exposure

2 min read

StarkMan

Sep 30

Wazuh: 17,587 Fingerprint Matches on the Security Platform Watching Everything

#wazuh #siem #securitymonitoring #dashboard

3 min read

StarkMan

Sep 30

D-Link DIR-822A: no patch, a public exploit, and a router nobody owns

#vulnerability #iot #endoflife

2 min read

StarkMan

Sep 30

11,011 Hosts on Port 3389: Reading an RDP Exposure Number Without Overreading It

#zoomeye #rdp #attacksurface #exposuremeasurement

3 min read

StarkMan

Sep 29

Inventory Work for CVE-2026-96357: Finding Affected Drupal Modules First

#security #drupal #cve #vulnerability

2 min read

StarkMan

Sep 29

Module inventory hygiene in the light of CVE-2026-96360

#drupal #webform #cve202696360 #xss

2 min read

StarkMan

Sep 29

Java Application Servers Are Still the Internet's Largest Exposed Estate

#zoomeye #jboss #weblogic #attacksurface

3 min read

StarkMan

Sep 29

917,169 Matches on Port 623 and 109,327 on app="IPMI": Two Views of the Out-of-Band Layer

#zoomeye #bmc #ipmi #outofband

3 min read

StarkMan

Sep 29

Windows Event Logging You Will Actually Use in an Investigation

#windows #logging #detection

3 min read

StarkMan

Sep 29

132,792 Matches for Magento and 10.0 CVSS: Sizing the Commerce Surface Behind CVE-2026-75650

#security #attacksurface #zoomeye

2 min read

StarkMan

Sep 28

48,183 and 42,025: Building and Industrial Protocols on the Public Internet

#cybersecurity #iot #networking

2 min read

StarkMan

Sep 28

MikroTrick and the SSH key check that forgot the exponent

#vulnerability #networking #cryptography

3 min read

StarkMan

Sep 28

4,526,693 Answers on Port 20000: DNP3 and the Confidence Problem in Grid Telemetry

#ics #dnp3 #energy #attacksurface

3 min read

StarkMan

Sep 28

Object Storage Access Reviews: Turning a Bucket List into Evidence

#cloudsecurity #objectstorage #accessreview

1

3 min read

StarkMan

Sep 28

D-Link DIR-822A Routers Expose Critical DHCP and L2TP Flaws With Public PoC

#vulnerability #dlink #router #cve202686296

1

2 min read

StarkMan

Sep 28

Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out

#security #zoomeye #exposure #supplychain

1

3 min read

StarkMan

Sep 27

Agency Patch Workflows for CVE-2026-96365: Coordinating 16 Module Updates Across Client Sites

#security #drupal #cve202696365 #operations

2 min read

StarkMan

Sep 27

Two PRTG Bugs, One Release: The 26.2.120.1449 Fix for CVE-2026-4637 and CVE-2026-4638

#vulnerability #prtg #cve20264638

3 min read

StarkMan

Sep 27

16,456,122 RDP Matches and 9,173,905 VNC Matches: The Remote Access Baseline

#zoomeye #ransomware #remoteaccess #exposure

2 min read

StarkMan

Sep 27

Click2Shell Exposure: What 7.9 Million WordPress Assets Do and Do Not Tell You

#wordpress #click2shell #zoomeye #rce

1

2 min read

StarkMan

Sep 27

Mattermost: 736,893 Fingerprint Matches on Self-Hosted Collaboration

#mattermost #collaboration #selfhosted #exposure

3 min read

StarkMan

Sep 27

CVE-2026-86510: An Out-of-Bounds Write in the D-Link DIR-822A L2TP Daemon

#security #vulnerability #router #dlink

3 min read

StarkMan

Sep 26

CVE-2026-66302: External Path Control in Skype for Business Server

#windows #unifiedcommunications #pathtraversal #rce

2 min read

StarkMan

Sep 26

Analyzing the Impact of Heartbleed on Legacy Infrastructure

#openssl #memorycorruption #legacysystems #embedded

6 min read

StarkMan

Sep 26

Artifact repositories as attack surface: 17,883 JFrog Artifactory assets and the supply chain behind them

#supplychain #exposuremanagement #jfrogartifactory #zoomeye

1

3 min read

StarkMan

Sep 26

TLS Certificates as Corroborating Evidence on Internet-Facing FortiGate Gateways

#security #fortinet #credentialexposure #zoomeye

1

5 min read

StarkMan

Sep 26

The Operational Risk of a Pre-Auth Mail Flaw: CVE-2026-48842 in Context

#vulnerability #webmail #sqlinjection #zoomeye

1

3 min read

StarkMan

Sep 26

Two Resolvers, Two Advisories: The Unbound DNSKEY Overflow (CVE-2026-81642) and the BIND SIG(0) Crash

#dns #unbound #bind #cve202681642

1

2 min read

StarkMan

Sep 25

The Exploited Zero-Day Had No CVSS Score: Reading the September 2026 Patch Tuesday by Exploitation, Not Severity

#security #patchmanagement #microsoft #exploitedinthewild

3 min read

StarkMan

Sep 25

Metabase CVE-2026-72898: an unauthenticated SQL injection that hands over the data warehouse

#metabase #sqlinjection #cve202672898 #kev

4 min read

StarkMan

Sep 25

Incident Readiness for CVE-2026-93952: A Tabletop Scenario for SD-WAN Teams

#security #incidentresponse #tabletop #velocloud

3 min read

StarkMan

Sep 25

Check Point CVE-2026-85102 and CVE-2026-93616: Two Flaws, One Gateway, One Deadline

#checkpoint #certificatevalidation #pathtraversal #securitygateway

3 min read

StarkMan

Sep 25

9,112 Indexed Kafka Endpoints Against 1,377,501 Services on Port 9092

#exposuremanagement #datainfrastructuresecurity

3 min read

StarkMan

Sep 24

1,770 Matches for Cisco Secure Email Gateway: The Mail Filter That Parses What Attacks It

#security #attacksurface #zoomeye

2 min read

StarkMan

Sep 24

4,076 Cisco ISE Fingerprint Matches: The Management Plane on the Internet

#zoomeye #cisco #ise #managementplane

3 min read

StarkMan

Sep 24

The JFrog Artifactory authentication bypass: when an empty signing key becomes an admin token

#supplychain #artifactrepository #authenticationbypass #jfrog

3 min read

One Year Club

1 Week Community Wellness Streak

Writing Debut

Want to connect with StarkMan?