OnaEiuspkz - DEV Community

OnaEiuspkz

Oct 23

FortiOS CVE-2025-61624 is scored 6.0. UNC5820 used it to root firewalls anyway

#security #cybersecurityarticle

4 min read

OnaEiuspkz

Oct 23

A JWT library that accepts an algorithm it was never configured for

#security

4 min read

OnaEiuspkz

Oct 23

Ranking the Estate: Where BeyondTrust Appliances Cluster and Why It Changes Triage

#zoomeye #geography #beyondtrust #triage

4 min read

OnaEiuspkz

Oct 23

What to fix first for CVE-2026-114625: a practical sequence for VeloCloud Orchestrator owners

#vulnerability #sdwan #arista #velocloud

3 min read

OnaEiuspkz

Oct 23

Two days between warning and patch: how the PHP project handled CVE-2026-109618

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

OnaEiuspkz

Oct 23

CVE-2026-114625: A Read-Only Login Is Enough to Own Arista VeloCloud Orchestrator

#vulnerability #sdwan #sqlinjection #arista

3 min read

OnaEiuspkz

Oct 22

WebLogic on the internet: the T3 problem that a port count will not solve

#security #zoomeyearticle

3 min read

OnaEiuspkz

Oct 22

Quivr: 274 Fingerprints, 266 Titles, and a Retrieval Layer That Holds Both Keys and Knowledge

#zoomeye #quivr #rag #vectorsearch

3 min read

OnaEiuspkz

Oct 22

5,197 Apache bRPC servers, and the clients a scan will never count

#zoomeye #apachebrpc #rpc #cve202648830

4 min read

OnaEiuspkz

Oct 22

CVE-2026-107821: A Malformed FRM File in the Data Directory Is Enough

3 min read

OnaEiuspkz

Oct 22

If CVE-2026-0313 Is Exploited: A Response Playbook for Cortex OS Query Command Injection

#vulnerability #cortexxsoar #cve20260313

3 min read

OnaEiuspkz

Oct 22

Detection Signals for CVE-2026-0315: What a Local Privilege Escalation Leaves Behind

#detection #macos #logging #privilegeescalation

3 min read

OnaEiuspkz

Oct 22

Running Plex at home: what CVE-2026-96652 changes about remote access and account hygiene

#cybersecurity #infosec #security

2 min read

OnaEiuspkz

Oct 22

1,868,360 Confluence Against 91,928 Jira: What a Measured Atlassian Estate Tells You About CVE-2026-21589

#zoomeye #exposure #atlassian

3 min read

OnaEiuspkz

Oct 21

Spotting the OpenVPN flaw patterns in your own code reviews

#openvpn #vpn #cve #vulnerabilitymanagement

1

2 min read

OnaEiuspkz

Oct 21

Recording Exposure Evidence Before a Claim Arrives

#ics #exposuremanagement

2 min read

OnaEiuspkz

Oct 21

GRE Without Authentication: The Protocol Decision Behind CVE-2026-33792 Exposure

#gre #protocoldesign #juniper #cve202633792

3 min read

OnaEiuspkz

Oct 21

The Design Debt Behind CVE-2026-102037

#security #juniper #junos #srx

2 min read

OnaEiuspkz

Oct 20

8.15 Million Windows Server Hosts and 163,497 SharePoint Assets: Counting Layers Instead of Products

#zoomeye #measurement #windows

3 min read

OnaEiuspkz

Oct 20

CVE-2026-70024: A Checklist for Security Leadership

#cybersecurity #leadership #microsoft #security

2 min read

OnaEiuspkz

Oct 20

If Customers Set TXT Records, the NSD Parser Bugs Are Your Problem

#vulnerability #dns #nsd

3 min read

OnaEiuspkz

Oct 20

Gotenberg converts documents to PDF, and the fingerprint count of 3,030 says little about who can reach it

#exposuremanagement #documentprocessing #assetdiscovery

3 min read

OnaEiuspkz

Oct 19

The time server answers control queries: locking down NTP mode 6

#ntp #network #hardening

4 min read

OnaEiuspkz

Oct 19

CVE-2026-76461: SQL Injection in an Email Gateway, Root on the Appliance

#cybersecurity #infosec #security #sql

3 min read

OnaEiuspkz

Oct 19

MFA Fatigue and Number Matching: Why the Prompt Is the Control

#identity #mfa #mitreattack

4 min read

OnaEiuspkz

Oct 18

Port 9200 and 5,079,738 Matches: The Search Cluster That Indexes Everything

#elasticsearch #9200 #searchcluster #logdata

2 min read

OnaEiuspkz

Oct 18

Drupal Extension Attack Surface: What 35 CVEs in One Advisory Tell You About Plugin Risk

#security #drupal #vulnerability

2 min read

OnaEiuspkz

Oct 18

From Internet-Reachable to Management VLAN: Closing a Cold-Chain Attack Surface

#security #ics #ot #retail

3 min read

OnaEiuspkz

Oct 18

Severity context: why CVE-2026-42528 sits below the 2.4.69 headline flaws

#security #apache #httpd #webdav

2 min read

OnaEiuspkz

Oct 18

A search daemon is a database server: 151 Manticore title matches

#security

2 min read

OnaEiuspkz

Oct 18

Atlassian CVE-2026-21589: one unauthenticated request reads the file that trusts everyone

#security

3 min read

OnaEiuspkz

Oct 18

Dependency Confusion in the Langflow Batch: When the Supply Chain Is the Bug

#security #langflow #dependencyconfusion #supplychain

2 min read

OnaEiuspkz

Oct 17

A mail forwarding rule is persistence that survives a password reset

#security #email #persistence

1

3 min read

OnaEiuspkz

Oct 17

CVE-2026-89069: cross-site scripting in the MOVEit Transfer Ad Hoc module

#security #vulnerability #moveit #filetransfer

3 min read

OnaEiuspkz

Oct 17

The SANS 2026 hunting survey: cloud logs and identity telemetry are where detection quietly fails

#threathunting #sans #telemetry #cloudsecurity

2 min read

OnaEiuspkz

Oct 17

CVE-2026-90970 by the Numbers: A 9.9 Score, Three Fixed Releases and 1,338,769 Indexed GitLab Assets

#security #vulnerability #gitlab #aigateway

2 min read

OnaEiuspkz

Oct 17

DefectDojo: 1,006 title matches on the vulnerability management platform that holds your findings

#zoomeye #defectdojo #vulnerabilitymanagement #exposure

2 min read

OnaEiuspkz

Oct 17

Building an exposure register from measurement data

#security #zoomeye #routeros #exposure

2 min read

OnaEiuspkz

Oct 16

Exposed Hypervisors and Sandbox Evasion: What Crypter Anti-Analysis Means for Inventory

#securityevent #crypter #malwareevasion #continuousmonitoring

1

2 min read

OnaEiuspkz

Oct 16

When the Router Answers to a Stranger: MikroTik RouterOS and the MikroTrick SSH Chain

#security #networksecurity #edgedevices

3 min read

OnaEiuspkz

Oct 16

CVE-2026-19572: a hardcoded bypass in the console that hands out software licences

#licensing #authentication #embeddedsoftware #vulnerability

4 min read

OnaEiuspkz

Oct 16

CVE-2026-76269: Improper Access Control in Splunk Enterprise REST Search Job Retrieval

#splunk #accesscontrol #restapi #securegateway

2 min read

OnaEiuspkz

Oct 16

Kibana: 161,729 fingerprints against 56,921 title matches

#zoomeye #kibana #measurement #dashboard

2 min read

OnaEiuspkz

Oct 16

CLOSEDQUORUM: Malware That Asks Four Models Which Move to Make Next

#malware #aiagents #detection #credentialtheft

2 min read

OnaEiuspkz

Oct 15

NodeBB Deployments in ZoomEye Results: Fingerprint Noise and Real Exposure

#zoomeye #attacksurface #nodebb #exposuremanagement

2 min read

OnaEiuspkz

Oct 15

VEX statements: cutting false positives without hiding real risk

#supplychain #vulnerabilitymanagement #vex

1

2 min read

OnaEiuspkz

Oct 15

The Ransom Note Without the Ransomware: Exfiltration-First Extortion in Healthcare

#extortion #databreach #healthcare #identity

4 min read

OnaEiuspkz

Oct 15

Ephemeral credentials for databases: moving past the shared application account

#identity #database #zerotrust

2 min read

OnaEiuspkz

Oct 15

SonicWall SMA1000: Chaining CVE-2026-83548 and CVE-2026-83549

#cybersecurity #infosec #security

2 min read

OnaEiuspkz

Oct 14

Eighteen Million Fingerprint Matches: Reading the Huawei Surface Behind the NCSC Sanction Review

#otsecurity #5g #exposuremanagement #zoomeye

2 min read

OnaEiuspkz

Oct 14

Jackrabbit WebDAV Surfaces: 2,254 Body Matches Against 237 Titles

#zoomeye #exposure

2 min read

OnaEiuspkz

Oct 14

CVE-2026-104480: Discord's libdave accepts an MLS Welcome it should refuse

#security #e2ee #messaging #cve

3 min read

OnaEiuspkz

Oct 14

Upgrading Pgpool-II for the September 2026 CVEs: a practical order of work

#security #postgres #pgpool #cve

1

3 min read

OnaEiuspkz

Oct 13

HTTP request smuggling on NetScaler ADC and Gateway (CVE-2026-88773)

#security #vulnerability #citrix #netscaler

1

3 min read

OnaEiuspkz

Oct 13

Sandbox Escapes in vm2 3.11.7: Six Boundary Failures in One Patch

#javascript #node #security #vulnerabilities

5 min read

OnaEiuspkz

Oct 13

Reading the Drupal sa-contrib-2026-154 to 191 Cluster: What CVE-2026-96361's Advisory Batch Discloses

#security #drupal #cve202696361 #advisoryanalysis

2 min read

OnaEiuspkz

Oct 13

ASUSTOR NAS Interfaces: 548 Title Matches Against 13 Application Matches

#zoomeye #exposure

2 min read

OnaEiuspkz

Oct 13

Detecting and Hunting CVE-2026-106218 Exploitation in TeamCity Environments

#cybersecurity #infosec #security

2 min read

OnaEiuspkz

Oct 12

CVE-2026-82329 and the Special Problem of Artifact Repositories

#jfrog #artifactory #authenticationbypass #supplychain

2 min read

OnaEiuspkz

Oct 12

When Rule Downloads Lose Hostname Verification: CVE-2026-61812 in ModSecurity

#security #modsecurity #waf #vulnerability

3 min read

1 Week Community Wellness Streak

Want to connect with OnaEiuspkz?