DEV Community

#exposure

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
After Plex2Shell: A Detection and Recovery Checklist for Media Servers You Cannot Rebuild Blindly

After Plex2Shell: A Detection and Recovery Checklist for Media Servers You Cannot Rebuild Blindly

Comments
4 min read
The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes

The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes

Comments
4 min read
Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

Comments
4 min read
Why Internet-Facing Media Servers Stay Vulnerable: Plex Exposure in Numbers and Practice

Why Internet-Facing Media Servers Stay Vulnerable: Plex Exposure in Numbers and Practice

Comments
4 min read
CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex

CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex

Comments
4 min read
Four Moderate Flaws, One Critical Chain: What the Plex2Shell Disclosure Teaches Vulnerability Research

Four Moderate Flaws, One Critical Chain: What the Plex2Shell Disclosure Teaches Vulnerability Research

Comments
4 min read
Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident

Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident

Comments
4 min read
Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

Comments
4 min read
3,394 titles for a CRM that has no fingerprint: counting erxes, and the 9.8 that outlived its patch

3,394 titles for a CRM that has no fingerprint: counting erxes, and the 9.8 that outlived its patch

Comments
4 min read
19 pages mention dnsdist: measuring a DNS load balancer that is deliberately invisible

19 pages mention dnsdist: measuring a DNS load balancer that is deliberately invisible

Comments
4 min read
5,375 titles, 5 fingerprints: Planka, and what a board full of project data looks like from outside

5,375 titles, 5 fingerprints: Planka, and what a board full of project data looks like from outside

Comments
3 min read
1,537 titles and 14 fingerprints: UVDesk exposure, and the 9.3 behind it

1,537 titles and 14 fingerprints: UVDesk exposure, and the 9.3 behind it

Comments
4 min read
H3C matches 888,990 times as a vendor and 13,297 times as its Magic line, and the affected NX15 is inside neither number

H3C matches 888,990 times as a vendor and 13,297 times as its Magic line, and the affected NX15 is inside neither number

Comments
4 min read
2.5 million SonicWall matches and zero for SMA1000: why a vendor name is not a product inventory

2.5 million SonicWall matches and zero for SMA1000: why a vendor name is not a product inventory

Comments
4 min read
10,146 Cockpit title matches and 6,767 fingerprints: why the console with a 9.8 injection flaw looks smaller than it is

10,146 Cockpit title matches and 6,767 fingerprints: why the console with a 9.8 injection flaw looks smaller than it is

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.