yutianle - DEV Community

yutianle

Oct 27

Three Engineering Lessons Plex2Shell Hands to Every Product Team

#security #exposuremanagement #zoomeye

3 min read

yutianle

Oct 27

VMmanager panels outside Russia outnumber the ones inside

#security #zoomeye #vmmanager #hosting

3 min read

yutianle

Oct 27

CVE-2026-97629: How a Third Ticket-Key Slot Allowed a Forged TLS Session

#cybersecurity #infosec #security

4 min read

yutianle

Oct 27

CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex

#vulnerability #plex #rce #exposure

4 min read

yutianle

Oct 27

19 pages mention dnsdist: measuring a DNS load balancer that is deliberately invisible

#zoomeye #exposure #dns #measurement

4 min read

yutianle

Oct 27

What 507,974 internet-facing Plex servers do and do not tell you about CVE-2026-96654

#vulnerability #plexmediaserver #cve202696654 #remotecodeexecution

4 min read

yutianle

Oct 26

Same release, different risks: CVE-2026-111497 next to nine other Node.js fixes

#security #vulnerability #node #brotli

3 min read

yutianle

Oct 26

Grav shows 3,312 title matches, 22 of them served from behind a Grav-identified body, and zero application fingerprints

#zoomeye #grav #cms #exposure

3 min read

yutianle

Oct 26

Reading CERT-BUND and NVD together for Devolutions Server 2026.3.10

#cybersecurity #infosec #security

3 min read

yutianle

Oct 26

CVE-2026-102175: A Pre-Authentication Heap Overflow in Junos sdxd Puts Root Code Execution Behind a Service-Deployment Link

#cybersecurity #infosec #security

1

4 min read

yutianle

Oct 26

CloudPanel: 215,314 fingerprint matches, 106,200 exact titles, and 209,096 answers on one HTTPS port

#security #exposure

4 min read

yutianle

Oct 26

CVE-2026-106931 When Someone Else Runs Your SiteGuard

#vulnerability #thirdpartyrisk #webapplicationfirewall #contracts

3 min read

yutianle

Oct 26

Detection Priorities for a Remote-Support Appliance After CVE-2026-102764

#zoomeye #detection #beyondtrust #monitoring

3 min read

yutianle

Oct 26

A user namespace maps container root to something that is not root, and the default keeps changing under you

#linux #containersecurity #hardening

1

3 min read

yutianle

Oct 25

IPFire: one application fingerprint, 44 page titles, and 998,984 body matches for a firewall

#firewall #appliance #zoomeye

4 min read

yutianle

Oct 25

Parsing Is the Attack Surface: Lessons From NSD and CVE-2026-101339

#vulnerability #dns #nsd

3 min read

yutianle

Oct 25

Port 873 lists its modules before it asks who you are

#rsync #dataexposure #filetransfer #exposuremeasurement

3 min read

yutianle

Oct 25

BlockStrap triage: why a CVSS 10.0 Magento flaw got a priority 2 rating, and what to do about it

#magento #adobecommerce #rce #cve2026103849

3 min read

yutianle

Oct 25

Four Plex Media Server flaws and what their CVSS vectors say about patch order

#cybersecurity #infosec #security

3 min read

yutianle

Oct 25

PAN-OS CVE-2026-0321 attack chain: what an outsider gains and leaves behind

#panos #cve20260321 #attackchain #detection

3 min read

yutianle

Oct 25

A Hunting Sheet for Refrigeration Controllers After a Cold-Chain Attack

#security #zoomeye #hunting #ot

4 min read

yutianle

Oct 25

A dormant payload in a comment: the second-order flaw in Duplicator CVE-2026-82814

#wordpress #duplicator #cve202682814 #phpobjectinjection

4 min read

yutianle

Oct 24

Why manager:update_config should be treated as root, thanks to CVE-2026-74041

#vulnerability #wazuh #cve202674041 #securitymonitoring

3 min read

yutianle

Oct 24

A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111

#sap #oauth2 #ssrf #credentialleak

3 min read

yutianle

Oct 24

1,807 Gateways, 1,161 on 443, Zero CVE Matches: Scoping Cisco SEG Exposure

#zoomeye #cisco #emailgateway #methodology

3 min read

yutianle

Oct 24

Five ways a Groovy sandbox leaked, and what that says about sandbox design

#security #vulnerabilitymanagement

4 min read

yutianle

Oct 24

A Flink dashboard is a job-submission API with a web interface

#security #attacksurfacemanagement

4 min read

yutianle

Oct 24

draw.io: 18,375 Fingerprints Against 309 Titles, and Why Architecture Diagrams Leak Topology

#zoomeye #drawio #diagrams #topologydisclosure

3 min read

yutianle

Oct 24

Fuxa: 694 Fingerprints on a Browser-Based HMI, and 3,795 Titles That Overstate It

#zoomeye #fuxa #scada #hmi

3 min read

yutianle

Oct 24

AIStore's legacy ETL API accepted Kubernetes security settings from the caller

#kubernetes #containerescape #aiinfrastructure

1

4 min read

yutianle

Oct 23

CVE-2026-96655: what the Plex Media Server SSRF actually exposes

#vulnerability #cve202696655 #plex #ssrf

3 min read

yutianle

Oct 23

NGINX's October fixes: five CVEs and the configuration questions that decide your exposure

#security #cybersecurityarticle

4 min read

yutianle

Oct 23

An authentication bypass on a remote-support appliance is a key to every site it manages

#security

3 min read

yutianle

Oct 23

Inside CVE-2026-109618: how PHP's out-of-memory path became a remote code execution bug

#php #remotecodeexecution #cve2026109618 #vulnerability

4 min read

yutianle

Oct 23

The Appliance Holds the Keys: Credential Blast Radius After a BeyondTrust Compromise

#zoomeye #credentials #beyondtrust #incidentresponse

4 min read

yutianle

Oct 23

CVSS 9.9 with a login: the upgrade path VeloCloud operators face for CVE-2026-114625

#vulnerability #sdwan #arista #velocloud

3 min read

yutianle

Oct 23

The .pth file that runs before your code: lessons from the LiteLLM 1.107.0 compromise

#supplychain #litellm #pypi #pthfile

5 min read

yutianle

Oct 23

Drone: 4,692 fingerprints against 26,577 titles, and a CI server that already holds your deploy keys

#security

3 min read

yutianle

Oct 23

Read-Only Was Never Harmless: Identity Lessons from CVE-2026-114625

#identity #leastprivilege #accesscontrol #arista

2 min read

yutianle

Oct 22

When the search returns nothing: reading zero and near-zero results for a niche security product

#security #zoomeyearticle

3 min read

yutianle

Oct 22

Nomad's default port answers on one host and its console appears on eleven thousand

#security #attacksurfacemanagement

4 min read

yutianle

Oct 22

GlobalProtect on macOS: How CVE-2026-0315 Turns a Local Account into Root

#macos #privilegeescalation #globalprotect #patching

4 min read

yutianle

Oct 22

What Grant Abuse Looks Like in MariaDB Logs: Detection Notes for the AL-2026-144 Flaws

3 min read

yutianle

Oct 22

Engineering Lessons from CVE-2026-0313: Safe Command Construction for Remote Query Features

#vulnerability #cortexxsoar #cve20260313

3 min read

yutianle

Oct 22

Zero Pulsar fingerprints, one 10.0 CVSS, and the management console that outlived its product

#zoomeye #apachepulsar #iotdb #cve2026105944

4 min read

yutianle

Oct 22

When a Query Returns 1,225,564 for an Appliance That Ships in Thousands: Reading Fuzzy Matching Honestly

#zoomeye #measurement #methodology #exposure

3 min read

yutianle

Oct 22

Exploited Within Two Hours: Designing Detection for the Post-Disclosure Window

#detection #strategy #incidentresponse

4 min read

yutianle

Oct 21

OpenVPN flaw FAQ: seven questions a change board will ask about 2.7.8

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

yutianle

Oct 21

Putting 271 Refrigeration Interfaces in Perspective

#ics #exposuremanagement

2 min read

yutianle

Oct 21

Patch Window Trade-Offs for CVE-2026-102037

#security #juniper #junos #srx

2 min read

yutianle

Oct 21

What a Pre-Auth RCE in srxpfe Means for SRX Segmentation Designs

#networkdesign #segmentation #juniper #cve202633792

3 min read

yutianle

Oct 21

541,960 Let's Encrypt Certificates in View: What a Certificate Field Can and Cannot Tell You

#zoomeye #tls #certificates

3 min read

yutianle

Oct 21

599 Million Apache and 313 Million nginx Matches: Where Counting Stops Being Useful

#zoomeye #measurement #riskcommunication

3 min read

yutianle

Oct 20

45 Million SMTP Services, 3,932 FortiMail Assets: Separating Protocol Exposure From Product Exposure

#zoomeye #emailsecurity #measurement

3 min read

yutianle

Oct 20

Where exposure measurement stops: reading ZoomEye counts next to CVE-2026-96951

#vulnerability #windows #cve202696951

3 min read

yutianle

Oct 20

Two Addresses and a Public Callback Service: Pivoting on the CVE-2026-110447 Indicators

#threatintelligence #indicators #nextcloud #cve2026110447

2 min read

yutianle

Oct 20

CVE-2026-70024 and the Patch Window That Cannot Slip

#cybersecurity #infosec #microsoft #security

3 min read

yutianle

Oct 20

Expired Domains, Live Brand: The Asset-Lifecycle Gap Behind Yam Store

4 min read

yutianle

Oct 19

Consul at 78,129 Matches: Service Discovery, Configuration and an Optional ACL System

#zoomeye #attacksurface #exposure

2 min read

yutianle

Oct 19

CVE-2026-89077 for platform teams: what to instrument before and after the upgrade

#infrastructure #monitoring #security #sre

3 min read

Writing Debut

Want to connect with yutianle?