SorrelThorncroft - DEV Community

SorrelThorncroft

Oct 27

408,924 Proxmox Fingerprints and 957,581 Portainer Titles Describe Two Kinds of Management Exposure

#proxmox #portainer #virtualization #attacksurface

1

4 min read

SorrelThorncroft

Oct 27

CVE-2026-6653 reaches further than the libxml2 package name

#libxml2 #cve20266653 #vulnerability #zoomeye

2 min read

SorrelThorncroft

Oct 27

Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

#vulnerability #plex #rce #exposure

4 min read

SorrelThorncroft

Oct 27

CVE-2026-97205: An 8-Bit Counter and 256 Pending AIO Operations

#cybersecurity #infosec #security

3 min read

SorrelThorncroft

Oct 27

Rotating every password after a hypervisor panel breach

#security #zoomeye #vmmanager #hosting

3 min read

SorrelThorncroft

Oct 27

Three authorisation holes in one helpdesk stack: what CVE-2026-111937, CVE-2026-111938 and CVE-2026-111939 have in common

#security #authorization #helpdesk #crm

6 min read

SorrelThorncroft

Oct 27

The Node.js CVE nobody owns: CVE-2026-111497 and the vendored Brotli problem

#security #vulnerability #node #brotli

3 min read

SorrelThorncroft

Oct 26

Why an SSRF that accepts any X-Plex-Token matters more than its 4.3 score

#vulnerability #plexmediaserver #cve202696654 #remotecodeexecution

4 min read

SorrelThorncroft

Oct 26

2.5 million SonicWall matches and zero for SMA1000: why a vendor name is not a product inventory

#zoomeye #exposure #sonicwall #measurement

4 min read

SorrelThorncroft

Oct 26

Four overflow bugs, one coding lesson: what NSD 4.15.3 says about parser hardening

#dns #nsd #vulnerability #cve2026101338

4 min read

SorrelThorncroft

Oct 26

How CVE-2026-106931 Turns SiteGuard Server Edition Statistics into Root

#vulnerability #webapplicationfirewall #commandinjection #privilegeescalation

4 min read

SorrelThorncroft

Oct 26

CVE-2026-101982 and CVE-2026-101990: Two Route-Advertisement Bugs That End in Root on Junos

#cybersecurity #infosec #networking #security

4 min read

SorrelThorncroft

Oct 26

Thirty Days From Exposure Census to Verified Remediation: A CVE-2026-102764 Plan

#zoomeye #remediation #beyondtrust #operations

3 min read

SorrelThorncroft

Oct 26

Linkerd: 306 page titles against 27,259 body matches, and a zero on the admin port that is the reassuring part

#servicemesh #exposure #zoomeye

3 min read

SorrelThorncroft

Oct 25

`Content-Disposition` decides a filename, and the filename is where a download becomes a write

#websecurity #fileupload #http

4 min read

SorrelThorncroft

Oct 25

Should You Worry About CVE-2026-101339? A Decision Guide for NSD Operators

#vulnerability #dns #nsd

3 min read

SorrelThorncroft

Oct 25

BACnet on UDP 47808 is a building protocol that answers a broadcast

#bacnet #otsecurity #buildingautomation #networksegmentation

3 min read

SorrelThorncroft

Oct 25

Two Drupal RCEs, One Patch Window: Building the Change Plan

#drupal #remotecodeexecution #securityadvisory #vulnerability

3 min read

SorrelThorncroft

Oct 25

Why any X-Plex-Token value matters in the Plex timeline SSRF

#cybersecurity #infosec #security

3 min read

SorrelThorncroft

Oct 25

Recovering a PAN-OS firewall from CVE-2026-0321 maintenance mode

#panos #cve20260321 #incidentresponse #highavailability

3 min read

SorrelThorncroft

Oct 25

Your Refrigeration Panels Came Back: Monitoring Exposure Drift After an Incident

#security #zoomeye #monitoring #ot

4 min read

SorrelThorncroft

Oct 25

39,534 Cisco Expressway fingerprints and the clustering precondition behind CVE-2026-76466

#zoomeye #ciscoexpressway #cve202676466 #mra

4 min read

SorrelThorncroft

Oct 24

CVE-2026-74041 and the integrity of your security telemetry

#vulnerability #wazuh #cve202674041 #securitymonitoring

3 min read

SorrelThorncroft

Oct 24

Two Accepts and One Reject: How Bricksforge CVE-2026-85097 Turned a Form Upload into a Webshell

#wordpress #fileupload #rce #webshell

3 min read

SorrelThorncroft

Oct 24

FortiManager Is the Quietest Door in Your Fortinet Estate

#fortinet #fortimanager #attacksurface #zoomeye

3 min read

SorrelThorncroft

Oct 24

Zimbra's sharing features are an unauthenticated injection surface

#security #vulnerabilitymanagement

4 min read

SorrelThorncroft

Oct 24

Spark's master UI and the applications it can restart

#security #attacksurfacemanagement

4 min read

SorrelThorncroft

Oct 24

Chevereto: 8,818 Fingerprint Matches on an Image Host, and 4,412 Titles That Agree With It

#zoomeye #chevereto #imagehosting #exposuremeasurement

3 min read

SorrelThorncroft

Oct 24

DataEase: 9,832 Fingerprints Against 1,246 Titles, and the JDBC Credential in the Datasource Form

#zoomeye #dataease #businessintelligence #datasourcecredentials

3 min read

SorrelThorncroft

Oct 24

Four attributes left out of PraisonAI's subprocess blocklist

#sandboxescape #python #agents

1

4 min read

SorrelThorncroft

Oct 23

Designing a reverse proxy that survives a Plex SSRF

#vulnerability #cve202696655 #plex #ssrf

3 min read

SorrelThorncroft

Oct 23

GitLab's second perfect score in nine days: why anyone who patched on 12 October is still exposed

#security #cybersecurityarticle

4 min read

SorrelThorncroft

Oct 23

ProFTPD mod_copy is eleven years old and back on the exploited list

#security

3 min read

SorrelThorncroft

Oct 23

authentik: 10,425 titles, 16 fingerprints, and an identity provider that hides behind its own login page

#security

4 min read

SorrelThorncroft

Oct 23

Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

SorrelThorncroft

Oct 23

Hunting VeloCloud Orchestrator exploitation: what CVE-2026-114625 leaves in the logs

#vulnerability #sdwan #arista #velocloud

3 min read

SorrelThorncroft

Oct 23

Past Precedent: Why BeyondTrust Edge Appliances Keep Returning to the Exploited List

#zoomeye #threatintelligence #beyondtrust #edgedevices

4 min read

SorrelThorncroft

Oct 23

Appwrite: 5,102 titles, 4,094 fingerprints, and 531 hosts on the default web port

#security

3 min read

SorrelThorncroft

Oct 23

Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not

#cvss #riskscoring #vulnerabilitymanagement #arista

2 min read

SorrelThorncroft

Oct 22

You can measure a cipher suite. You cannot measure a crypto library build

#security #zoomeyearticle

3 min read

SorrelThorncroft

Oct 22

FortiAnalyzer's collection port is the internet's most crowded number

#security #attacksurfacemanagement

4 min read

SorrelThorncroft

Oct 22

Patch Operations for CVE-2026-0315: Map GlobalProtect Builds Before You Upgrade

#patchmanagement #macos #globalprotect #cve20260315

4 min read

SorrelThorncroft

Oct 22

secure-file-priv Is Not a Patch: Hardening MariaDB File Writes After CVE-2026-107818

3 min read

SorrelThorncroft

Oct 22

Threat Modelling the Insider Path in CVE-2026-0313

#vulnerability #cortexxsoar #cve20260313

3 min read

SorrelThorncroft

Oct 22

56 million PHP and 5.5 million Node.js fingerprints: why a huge base cannot tell you who is exploitable

#zoomeye #php #node #php2shell

4 min read

SorrelThorncroft

Oct 22

CVE-2026-104286: What FortiMail Adds to the Mail Gateway Exploitation Trend

#vulnerability #emailsecurity #fortinet

3 min read

SorrelThorncroft

Oct 22

Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

SorrelThorncroft

Oct 21

A First-Hour Playbook for a Refrigeration Controller Alert

#ics #exposuremanagement

2 min read

SorrelThorncroft

Oct 21

Management Plane Exposure and CVE-2026-102037

#security #juniper #junos #srx

2 min read

SorrelThorncroft

Oct 21

Nine Junos Builds, One Flaw: Mapping CVE-2026-33792 to Your Fleet

#assetinventory #juniper #junos #cve202633792

3 min read

SorrelThorncroft

Oct 21

27,288 vCenter and 413,891 ESXi Assets: A Virtualization Management Baseline

#zoomeye #virtualization #exposure

3 min read

SorrelThorncroft

Oct 21

61,676 Bug Bounty Assets and 54 New Assets: Reading Coverage Flags Instead of Inventories

#zoomeye #measurement #governance

3 min read

SorrelThorncroft

Oct 21

284 Million Server Headers Against 313 Million Fingerprints: Two Ways to Count the Same Web Server

#zoomeye #measurement #webinfrastructure

1

3 min read

SorrelThorncroft

Oct 20

An External Verification Checklist for App-Layer RCE in a File-Sync Stack

#checklist #zoomeye #incidentresponse #cve2026110447

3 min read

SorrelThorncroft

Oct 20

Proving You Patched: Evidence and Audit Trail for CVE-2026-39919

#vulnerability #ghostscript #memorysafety

4 min read

SorrelThorncroft

Oct 20

What an IIS Compromise Would Look Like After CVE-2026-70024

#cybersecurity #infosec #microsoft #security

3 min read

SorrelThorncroft

Oct 20

CVE-2026-104286: FortiMail Path Traversal Under Active Exploitation

#vulnerability #fortinet #fortimail #cve2026104286

4 min read

SorrelThorncroft

Oct 20

Apache mod_vhost_alias Overflow CVE-2026-63292: Exposure, Exploit Conditions and Patching Priorities

#apache #httpd #vulnerability #modvhostalias

2 min read

SorrelThorncroft

Oct 19

N-able N-central CVE-2026-86218: A Pre-Authentication RCE in the Console Managed Service Providers Live In

#nable #ncentral #rmm #preauthrce

3 min read

SorrelThorncroft

Oct 19

Hunting for SQL Injection Abuse in MOVEit Transfer Before the Patch Lands

#vulnerability #moveittransfer #cve202689076

2 min read

Writing Debut

Want to connect with SorrelThorncroft?