StarkMan - DEV Community

StarkMan

Oct 27

Icecast: 224,316 fingerprints and 201,997 titles, and a listener endpoint that is public on purpose

#security #zoomeye #streaming

3 min read

StarkMan

Oct 27

Same query, different week: how much a ZoomEye total actually moves

#zoomeye #measurementmethodology #trendanalysis #exposuremeasurement

4 min read

StarkMan

Oct 27

CVE-2026-6653 and the long tail of entity-handling bugs in libxml2

#libxml2 #cve20266653 #vulnerability #zoomeye

2 min read

StarkMan

Oct 27

The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes

#vulnerability #plex #rce #exposure

4 min read

StarkMan

Oct 27

Finding Affected NGINX Hosts at Scale: What 313 Million Fingerprinted Assets Do and Do Not Tell You

#cybersecurity #infosec #infrastructure #security

3 min read

StarkMan

Oct 27

Turning a one-off VMmanager check into a monitoring routine

#security #zoomeye #vmmanager #hosting

3 min read

StarkMan

Oct 27

Plex Media Server: four flaws, one unauthenticated path to code execution

#vulnerability #plexmediaserver #cve202696654 #remotecodeexecution

4 min read

StarkMan

Oct 26

Exposed Node.js services and CVE-2026-111497: reading a five-million-asset signal carefully

#security #vulnerability #node #brotli

3 min read

StarkMan

Oct 26

Struts body strings appear 984,485 times while its page title appears 519

#zoomeye #exposuremeasurement #frameworkexposure

3 min read

StarkMan

Oct 26

Consented applications are the software supply chain nobody audits

#security #microsoft365 #identity

3 min read

StarkMan

Oct 26

Blast Radius of an Appliance Credential: What CVE-2026-102764 Put at Risk

#zoomeye #credentialtheft #beyondtrust #incidentresponse

3 min read

StarkMan

Oct 26

SiteGuard Patch Matrix for CVE-2026-106931: Four Platforms, Four Decisions

#vulnerability #patchmanagement #webapplicationfirewall #assetinventory

3 min read

StarkMan

Oct 26

Nine CVSS 9.8 Junos Flaws in One Bulletin: A Practical Patch-Ordering Decision for Network Teams

#cybersecurity #infosec #networking #security

4 min read

StarkMan

Oct 26

Hawtio: 1,958 loose titles, 1,386 exact titles, and 12 of them on the port that matters

#security #exposure

4 min read

StarkMan

Oct 26

Hubble answers 1,103 times by title, five times as an application, and 37,258 times in page bodies

#kubernetes #observability #zoomeye

4 min read

StarkMan

Oct 25

Managed DNS providers inherit a new supply-chain risk from the NSD stack overwrite flaws

#dns #nsd #vulnerability

3 min read

StarkMan

Oct 25

CVE-2026-70571: a stack overflow in Exchange Server, and the mail perimeter that keeps it reachable

#vulnerability #microsoft #exchange #emailsecurity

3 min read

StarkMan

Oct 25

Counting Magento exposure for BlockStrap without overstating it

#magento #adobecommerce #rce #cve2026103849

4 min read

StarkMan

Oct 25

CVE-2026-0322: Why a Firewall Management Interface Keeps Appearing in Exploitation Reports

#vulnerability #networksecurity #paloalto

3 min read

StarkMan

Oct 25

From preference string to executed library: the Plex TranscoderH264Options write

#cybersecurity #infosec #security

2 min read

StarkMan

Oct 25

What 260 Danfoss Headers Reveal About Refrigeration Exposure

#security #zoomeye #danfoss #exposure

4 min read

StarkMan

Oct 25

GitLab's seven-branch backport: what CVE-2026-110264 does to upgrade sequencing

#gitlab #cve2026110264 #patchmanagement #onigmo

4 min read

StarkMan

Oct 25

4,802 Firepower fingerprints, 985 IOS XE and zero Cyber Vision: reading three Snort 3 numbers together

#zoomeye #snort3 #cisco #exposuremeasurement

4 min read

StarkMan

Oct 24

Half-Initialized Workers: Verifying the PHP2Shell Fix When the Failure Path Is the Vulnerability

#php #memorycorruption #patchverification #rce

4 min read

StarkMan

Oct 24

76,015 Keycloak Titles and 40,080 Keycloak Fingerprints Describe Different Assets

#zoomeye #keycloak #identityprovider #methodology

3 min read

StarkMan

Oct 24

If You Manage Someone Else's Firewalls, You Manage Their Attack Surface Too

#fortinet #mssp #multitenant #zoomeye

3 min read

StarkMan

Oct 24

Four SQL injection bugs in the appliance that keeps your firewall logs

#security #vulnerabilitymanagement

4 min read

StarkMan

Oct 24

Hadoop's management planes outnumber its data nodes in public scan data

#security #attacksurfacemanagement

4 min read

StarkMan

Oct 24

A Notebook Server Is an Execution Service: What 15,000 Exposed Jupyter Instances Actually Offer

#jupyter #notebooksecurity #cve202435178 #ntlm

3 min read

StarkMan

Oct 24

One TLS setting turned off Basic auth for every HAProxy Data Plane API listener

#authentication #loadbalancer #managementapi

4 min read

StarkMan

Oct 24

xxl-job: 3,350 application matches against 148 page titles

#zoomeye #scheduler #managementplane

4 min read

StarkMan

Oct 23

SSRF on a media server: the cloud instance case

#vulnerability #cve202696655 #plex #ssrf

3 min read

StarkMan

Oct 23

Ninety-four minutes: how a GitHub release page became a credential thief

#security #cybersecurityarticle

4 min read

StarkMan

Oct 23

Strapi's admin filter leaked password hashes, and the fix is a query discipline problem

#security

1

3 min read

StarkMan

Oct 23

Open WebUI: 92,252 fingerprints, 92,051 titles, and 7,087 hosts that kept the default port

#security

4 min read

StarkMan

Oct 23

From Edge Appliance to Downstream Sessions: Mapping BeyondTrust Jump Item Exposure

#zoomeye #lateralmovement #beyondtrust #attacksurface

3 min read

StarkMan

Oct 23

VeloCloud Orchestrator CVE-2026-114625: role design, host impact and the limits of the advisory

#vulnerability #sdwan #arista #velocloud

3 min read

StarkMan

Oct 23

Memory limits and attack windows: a defender's reading of CVE-2026-109618

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

StarkMan

Oct 23

Five NGINX CVEs are conditional. Measure the conditions, not just the version

#security #zoomeyearticle

4 min read

StarkMan

Oct 22

How Exposed Is VeloCloud Orchestrator? Reading ZoomEye Evidence Honestly

#zoomeye #exposureanalysis #attacksurface #velocloud

2 min read

StarkMan

Oct 22

Shopware: 2,667 title matches, 1,094 on 443 and 80 certificate hits

#zoomeye #ecommerce #administration

3 min read

StarkMan

Oct 22

408,609 Proxmox Fingerprints and 6 Hosts on 8006: When a Query Result Describes the Scanner

#zoomeye #proxmox #hypervisor #methodology

3 min read

StarkMan

Oct 22

MariaDB's FILE Privilege Is a Filesystem Primitive: CVE-2026-107814 and CVE-2026-107818

#cybersecurity #database #infosec #security

3 min read

StarkMan

Oct 22

CVE-2026-0313 and the Blast Radius of a Content Pack: Rethinking XSOAR Trust Boundaries

#vulnerability #cortexxsoar #cve20260313

3 min read

StarkMan

Oct 22

Reading the Record: What CERTFR-2026-AVI-1326 Says About CVE-2026-0315 and What It Leaves Out

#advisoryanalysis #riskcommunication #cve20260315 #certfr

3 min read

StarkMan

Oct 22

PAN-OS CVE-2026-0321 and the cost of a mitigation that needs decryption

#panos #cve20260321 #ssldecryption #riskmanagement

3 min read

StarkMan

Oct 22

CVE-2026-110447: Why Disabling the Nextcloud Collabora App Is Not a Fix

#vulnerability #collaboration #nextcloud

3 min read

StarkMan

Oct 21

31.3 Million SSH Services and 16.5 Million RDP Endpoints: Building a Remote-Access Inventory That Survives an Incident

#zoomeye #remoteaccess #inventory

3 min read

StarkMan

Oct 21

3.2 Million Redis and 1.9 Million MongoDB Services: The Steady Background of Exposed Data Stores

#exposure #datasecurity #configuration

3 min read

StarkMan

Oct 21

OpenVPN 2.7.8 release notes for defenders: what changed and what to re-test

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

StarkMan

Oct 21

No Workaround Published: Planning Around CVE-2026-33792 When You Cannot Patch This Week

#patchmanagement #juniper #srx #cve202633792

3 min read

StarkMan

Oct 21

What Network Monitoring Can and Cannot Show About CVE-2026-102037

#security #juniper #junos #srx

2 min read

StarkMan

Oct 21

How an Attack Reaches a Fridge Without Touching the Internet

#ics #exposuremanagement

2 min read

StarkMan

Oct 21

Jenkins at 3 and Kubernetes at 1: When a Small Count Means a Missing Signature

#zoomeye #measurement #devsecops

3 min read

StarkMan

Oct 20

Hardening baselines that reduce CVE-2026-96951 exposure without waiting for the patch

#vulnerability #windows #cve202696951

3 min read

StarkMan

Oct 20

CVE-2026-70024 for the Defender: Detection, Triage and Response on IIS

#cybersecurity #infosec #microsoft #security

3 min read

StarkMan

Oct 20

Apache Solr exposure: 810,266 fingerprint matches against 73,029 title matches

#search #solr #exposuremanagement

2 min read

StarkMan

Oct 20

Building a Repeatable Public-Sector Exposure Baseline

#security #zoomeye #exposuremanagement #ddos

3 min read

StarkMan

Oct 19

Local Administrator Password Management: Why LAPS Alone Is Not Tier Separation

#activedirectory #privilegedaccess #laps

3 min read

StarkMan

Oct 19

Hunting in the mail path: five hypotheses for CVE-2026-76519 exposure

#cisco #vulnerability #emailsecurity #cve202676519

3 min read

One Year Club

1 Week Community Wellness Streak

Writing Debut

Want to connect with StarkMan?