OnaEiuspkz - DEV Community

OnaEiuspkz

Oct 27

mDNS: 4,669,414 answers on port 5353, and a broadcast that names every device

#security #zoomeye #network

4 min read

OnaEiuspkz

Oct 27

The Mail and Collaboration Edge Still Answers on Its Own Ports

#zoomeye #measurement #mail #collaboration

3 min read

OnaEiuspkz

Oct 27

VMmanager control planes share port 443 with the sites they manage

#security #zoomeye #vmmanager #hosting

3 min read

OnaEiuspkz

Oct 27

CVE-2026-15176: The alias Rewrite Overflow That Survived Since 2005

#cybersecurity #infosec #security

3 min read

OnaEiuspkz

Oct 27

Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

#vulnerability #plex #rce #exposure

4 min read

OnaEiuspkz

Oct 27

1,537 titles and 14 fingerprints: UVDesk exposure, and the 9.3 behind it

#zoomeye #exposure #helpdesk #measurement

4 min read

OnaEiuspkz

Oct 27

CVE-2026-111497: how a Brotli block-switch error became a Node.js memory write

#security #vulnerability #node #brotli

4 min read

OnaEiuspkz

Oct 26

The Codecs directory: why CVE-2026-96656 turns a transcoder preference into code execution

#vulnerability #plexmediaserver #cve202696654 #remotecodeexecution

4 min read

OnaEiuspkz

Oct 26

Wavlink returns 3,502 fingerprint matches, 73 title matches, and zero hosts that carry both

#zoomeye #wavlink #iot #routers

4 min read

OnaEiuspkz

Oct 26

Four ways to overflow NSD: anatomy of the CVE-2026-101338 batch

#dns #nsd #vulnerability #cve2026101338

4 min read

OnaEiuspkz

Oct 26

Who Owns the Appliance Nobody Inventoried: Governance Gaps Behind CVE-2026-102764

#zoomeye #assetmanagement #beyondtrust #governance

3 min read

OnaEiuspkz

Oct 26

Local Attack Vector, Real Risk: Threat Modelling CVE-2026-106931

#vulnerability #threatmodeling #privilegeescalation #webapplicationfirewall

3 min read

OnaEiuspkz

Oct 26

Why the Junos October 2026 Flaws Matter Even Without a CISA KEV Entry

#cybersecurity #infosec #security

4 min read

OnaEiuspkz

Oct 26

Synapse: 33,077 title matches, 14,449 fingerprint matches, and 14,111 answers on the listener its reverse-proxy guide assumes

#security #exposure

4 min read

OnaEiuspkz

Oct 26

JasperReports: 664 page titles against 27,652 body matches, and the reports behind both numbers

#reporting #dataaccess #zoomeye

3 min read

OnaEiuspkz

Oct 25

journald keeps its logs in a directory with a size cap, and Storage=auto decides whether they survive a reboot

#logging #systemd #journald #incidentresponse

3 min read

OnaEiuspkz

Oct 25

XenServer answers 31,843 and Citrix Hypervisor answers zero: one product, two names, one broken query

#zoomeye #attacksurface #virtualization #measurement

4 min read

OnaEiuspkz

Oct 25

For Magento 2.4.4 to 2.4.6 stores, BlockStrap leaves a hard upgrade decision

#magento #adobecommerce #rce #cve2026103849

3 min read

OnaEiuspkz

Oct 25

PAN-OS CVE-2026-0321: what an unauthenticated dataplane DoS actually breaks

#panos #cve20260321 #denialofservice #firewall

3 min read

OnaEiuspkz

Oct 25

The Port Split Is the Refrigeration Inventory You Can Act On

#security #zoomeye #ot #exposure

4 min read

OnaEiuspkz

Oct 25

Four BIND 9 flaws, no workarounds: planning for a resolver that cannot fail over

#bind9 #dns #cve202694300 #cve202697313

1

4 min read

OnaEiuspkz

Oct 25

CVE-2026-74041 shows why two parsers on one config file is a security problem

#vulnerability #wazuh #cve202674041 #securitymonitoring

3 min read

OnaEiuspkz

Oct 24

When the Server Is the Attacker: curl CVE-2026-92392 and the Embedded libcurl You Forgot About

#curl #http2 #useafterfree #supplychain

4 min read

OnaEiuspkz

Oct 24

117,206 Metabase Fingerprints: The Dashboard That Can Query the Warehouse

#zoomeye #metabase #businessintelligence #dataaccess

3 min read

OnaEiuspkz

Oct 24

The First Sign Was Silence: Detecting Edge Devices That Stop Talking

#fortinet #detectionengineering #logging #zoomeye

3 min read

OnaEiuspkz

Oct 24

Session invalidation is a route problem, not a flag problem

#security #vulnerabilitymanagement

5 min read

OnaEiuspkz

Oct 24

Apache Superset's Default Session Key: Forging an Admin Cookie on 101,819 Reachable Deployments

#superset #cve202327524 #sessionforgery #secretkey

3 min read

OnaEiuspkz

Oct 24

Apache Tika's PDF Parser Followed an XFA Reference Out of the Document

#apachetika #cve202566516 #xxe #pdfxfa

3 min read

OnaEiuspkz

Oct 24

IntentKit validated tool calls against the wrong list

#agents #authorization #toolcalling

4 min read

OnaEiuspkz

Oct 24

Opencast: 870 application matches and 458 of them on 443

#zoomeye #education #mediaplatform

4 min read

OnaEiuspkz

Oct 23

CVE-2026-96655 on a small business network

#vulnerability #cve202696655 #plex #ssrf

3 min read

OnaEiuspkz

Oct 23

FortiOS CVE-2025-61624 is scored 6.0. UNC5820 used it to root firewalls anyway

#security #cybersecurityarticle

4 min read

OnaEiuspkz

Oct 23

A JWT library that accepts an algorithm it was never configured for

#security

4 min read

OnaEiuspkz

Oct 23

Ranking the Estate: Where BeyondTrust Appliances Cluster and Why It Changes Triage

#zoomeye #geography #beyondtrust #triage

4 min read

OnaEiuspkz

Oct 23

What to fix first for CVE-2026-114625: a practical sequence for VeloCloud Orchestrator owners

#vulnerability #sdwan #arista #velocloud

3 min read

OnaEiuspkz

Oct 23

Two days between warning and patch: how the PHP project handled CVE-2026-109618

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

OnaEiuspkz

Oct 23

CVE-2026-114625: A Read-Only Login Is Enough to Own Arista VeloCloud Orchestrator

#vulnerability #sdwan #sqlinjection #arista

3 min read

OnaEiuspkz

Oct 22

WebLogic on the internet: the T3 problem that a port count will not solve

#security #zoomeyearticle

3 min read

OnaEiuspkz

Oct 22

Quivr: 274 Fingerprints, 266 Titles, and a Retrieval Layer That Holds Both Keys and Knowledge

#zoomeye #quivr #rag #vectorsearch

3 min read

OnaEiuspkz

Oct 22

5,197 Apache bRPC servers, and the clients a scan will never count

#zoomeye #apachebrpc #rpc #cve202648830

4 min read

OnaEiuspkz

Oct 22

CVE-2026-107821: A Malformed FRM File in the Data Directory Is Enough

3 min read

OnaEiuspkz

Oct 22

If CVE-2026-0313 Is Exploited: A Response Playbook for Cortex OS Query Command Injection

#vulnerability #cortexxsoar #cve20260313

3 min read

OnaEiuspkz

Oct 22

Detection Signals for CVE-2026-0315: What a Local Privilege Escalation Leaves Behind

#detection #macos #logging #privilegeescalation

3 min read

OnaEiuspkz

Oct 22

Running Plex at home: what CVE-2026-96652 changes about remote access and account hygiene

#cybersecurity #infosec #security

2 min read

OnaEiuspkz

Oct 22

1,868,360 Confluence Against 91,928 Jira: What a Measured Atlassian Estate Tells You About CVE-2026-21589

#zoomeye #exposure #atlassian

3 min read

OnaEiuspkz

Oct 21

Spotting the OpenVPN flaw patterns in your own code reviews

#openvpn #vpn #cve #vulnerabilitymanagement

1

2 min read

OnaEiuspkz

Oct 21

Recording Exposure Evidence Before a Claim Arrives

#ics #exposuremanagement

2 min read

OnaEiuspkz

Oct 21

GRE Without Authentication: The Protocol Decision Behind CVE-2026-33792 Exposure

#gre #protocoldesign #juniper #cve202633792

3 min read

OnaEiuspkz

Oct 21

The Design Debt Behind CVE-2026-102037

#security #juniper #junos #srx

2 min read

OnaEiuspkz

Oct 20

8.15 Million Windows Server Hosts and 163,497 SharePoint Assets: Counting Layers Instead of Products

#zoomeye #measurement #windows

3 min read

OnaEiuspkz

Oct 20

CVE-2026-70024: A Checklist for Security Leadership

#cybersecurity #leadership #microsoft #security

2 min read

OnaEiuspkz

Oct 20

If Customers Set TXT Records, the NSD Parser Bugs Are Your Problem

#vulnerability #dns #nsd

3 min read

OnaEiuspkz

Oct 20

Gotenberg converts documents to PDF, and the fingerprint count of 3,030 says little about who can reach it

#exposuremanagement #documentprocessing #assetdiscovery

3 min read

OnaEiuspkz

Oct 19

The time server answers control queries: locking down NTP mode 6

#ntp #network #hardening

4 min read

OnaEiuspkz

Oct 19

CVE-2026-76461: SQL Injection in an Email Gateway, Root on the Appliance

#cybersecurity #infosec #security #sql

3 min read

OnaEiuspkz

Oct 19

MFA Fatigue and Number Matching: Why the Prompt Is the Control

#identity #mfa #mitreattack

4 min read

OnaEiuspkz

Oct 18

Port 9200 and 5,079,738 Matches: The Search Cluster That Indexes Everything

#elasticsearch #9200 #searchcluster #logdata

2 min read

OnaEiuspkz

Oct 18

Drupal Extension Attack Surface: What 35 CVEs in One Advisory Tell You About Plugin Risk

#security #drupal #vulnerability

2 min read

OnaEiuspkz

Oct 18

From Internet-Reachable to Management VLAN: Closing a Cold-Chain Attack Surface

#security #ics #ot #retail

3 min read

OnaEiuspkz

Oct 18

Severity context: why CVE-2026-42528 sits below the 2.4.69 headline flaws

#security #apache #httpd #webdav

2 min read

1 Week Community Wellness Streak

Want to connect with OnaEiuspkz?