DEV Community

yutianle profile picture

yutianle

404 bio not found

Joined Joined on 
Brevo: A Cloudflare Worker That Rewrote a Marketing Platform in Flight
bianliang profile

Brevo: A Cloudflare Worker That Rewrote a Marketing Platform in Flight

#supplychain #cdn #wordpress #clickfix
Comments
2 min read

Want to connect with yutianle?

Create an account to connect with yutianle. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Twenty Wormable Bugs in One Patch Tuesday: What the September 2026 Microsoft Release Tells Us
bianliang profile

Twenty Wormable Bugs in One Patch Tuesday: What the September 2026 Microsoft Release Tells Us

#cybersecurity #patchmanagement #microsoft
Comments 1
3 min read
Drupal Contributed Modules Under WID-SEC-2026-3554: A Patching Plan for CVE-2026-96359 and the Wider Batch
bianliang profile

Drupal Contributed Modules Under WID-SEC-2026-3554: A Patching Plan for CVE-2026-96359 and the Wider Batch

#security #drupal #patchmanagement #cve202696359
1
Comments
3 min read
Network segmentation decides whether CVE-2026-7273 in Zyxel GS1900 switches is reachable
bianliang profile

Network segmentation decides whether CVE-2026-7273 in Zyxel GS1900 switches is reachable

#cybersecurity #infosec #networking #security
Comments
4 min read
Cisco FMC CVE-2026-20079: When the Management Plane Is the Attack Plane
bianliang profile

Cisco FMC CVE-2026-20079: When the Management Plane Is the Attack Plane

#cisco #fmc #cve202620079 #managementplane
Comments
4 min read
Clock synchronisation as a forensic prerequisite
bianliang profile

Clock synchronisation as a forensic prerequisite

#forensics #timesync #logging
Comments
2 min read
Gerrit Code Review on the Open Internet: 2,508 Title Matches and the Credential Store Behind Them
bianliang profile

Gerrit Code Review on the Open Internet: 2,508 Title Matches and the Credential Store Behind Them

#security #exposuremanagement #zoomeye
Comments
2 min read
Detecting unexpected custom attributes after CVE-2026-96367
bianliang profile

Detecting unexpected custom attributes after CVE-2026-96367

#security #vulnerability #drupal #webform
1
Comments
2 min read
CVE-2026-96364 in the patch pipeline: dependency order for 16 Drupal projects
bianliang profile

CVE-2026-96364 in the patch pipeline: dependency order for 16 Drupal projects

#security #drupal #cve202696364 #contributedmodules
Comments
3 min read
981,494 FortiGate Fingerprints and 16.4 Million RDP Services: Measuring the Gunra Initial-Access Surface
bianliang profile

981,494 FortiGate Fingerprints and 16.4 Million RDP Services: Measuring the Gunra Initial-Access Surface

#zoomeye #ransomware #fortigate #rdp
Comments
3 min read
CVE-2026-26084: the sandbox appliance that answers questions it should refuse
bianliang profile

CVE-2026-26084: the sandbox appliance that answers questions it should refuse

#cybersecurity #infosec #security
Comments 1
3 min read
What port 2375 says about Docker exposure that a product fingerprint does not
bianliang profile

What port 2375 says about Docker exposure that a product fingerprint does not

#docker #zoomeye #exposuremeasurement
Comments 1
3 min read
Why CVE-2026-96363 Is the Submodule Problem, Not a Drupal Core Problem
bianliang profile

Why CVE-2026-96363 Is the Submodule Problem, Not a Drupal Core Problem

#security #drupal #webform #crosssitescripting
Comments 1
3 min read
From Patch Tuesday to KEV in Three Weeks: The CVE-2026-19490 NetScaler Timeline
bianliang profile

From Patch Tuesday to KEV in Three Weeks: The CVE-2026-19490 NetScaler Timeline

#security #vulnerability #citrix #netscaler
Comments
3 min read
RouterOS at the Network Edge: Operational Risk From CVE-2026-67279 and CVE-2026-86060
bianliang profile

RouterOS at the Network Edge: Operational Risk From CVE-2026-67279 and CVE-2026-86060

#vulnerability #routeros #mikrotik #ssh
Comments
2 min read
Mapping VeloCloud Orchestrator Exposure: What ZoomEye Data Says About CVE-2026-93952
bianliang profile

Mapping VeloCloud Orchestrator Exposure: What ZoomEye Data Says About CVE-2026-93952

#security #zoomeye #exposure #velocloud
Comments
2 min read
What CERT-BUND Published About CVE-2026-96361 and What the Record Leaves Open
bianliang profile

What CERT-BUND Published About CVE-2026-96361 and What the Record Leaves Open

#security #drupal #cve202696361 #advisoryanalysis
Comments
2 min read
414,009 ESXi hosts and 1,495,455 answers on port 902: sizing a hypervisor estate from outside
bianliang profile

414,009 ESXi hosts and 1,495,455 answers on port 902: sizing a hypervisor estate from outside

#vmwareesxi #zoomeye #hypervisor
Comments 1
3 min read
Adobe Connect 12.12: Why a 9.9 SQL Injection Deserves Its Own Patch Window
bianliang profile

Adobe Connect 12.12: Why a 9.9 SQL Injection Deserves Its Own Patch Window

#adobe #adobeconnect #cve202675682 #sqlinjection
Comments 1
4 min read
Shared Hosting and CVE-2026-48842: When One Mail Server Holds Every Tenant
bianliang profile

Shared Hosting and CVE-2026-48842: When One Mail Server Holds Every Tenant

#vulnerability #webmail #sqlinjection #zoomeye
Comments 1
3 min read
MISP Feed Redirects Before 2.5.45: When an Outbound Request Carries Credentials to Another Host
bianliang profile

MISP Feed Redirects Before 2.5.45: When an Outbound Request Carries Credentials to Another Host

#security #ssrf #threatintelligence #egress
1
Comments
3 min read
132,707 Magento Matches and 5,314 Title Matches: Measuring a Commerce Platform Under Active Exploitation
bianliang profile

132,707 Magento Matches and 5,314 Title Matches: Measuring a Commerce Platform Under Active Exploitation

#security #exposuremanagement #ecommerce
1
Comments
3 min read
CVE-2026-76461: SQL injection in an email gateway reaches root on the appliance
bianliang profile

CVE-2026-76461: SQL injection in an email gateway reaches root on the appliance

#cisco #emailsecurity #sqlinjection
1
Comments
2 min read
73,105 Airflow instances, 11,673 SonarQube and 33,837 Nexus: fingerprinting the build and quality toolchain
bianliang profile

73,105 Airflow instances, 11,673 SonarQube and 33,837 Nexus: fingerprinting the build and quality toolchain

#airflow #sonarqube #nexus #zoomeye
Comments
3 min read
From Java Byte Stream to Root: Cisco ISE Remote Code Execution Flaws
bianliang profile

From Java Byte Stream to Root: Cisco ISE Remote Code Execution Flaws

#cybersecurity #infosec #java #security
Comments
2 min read
CVE-2026-69676: Kerberos Authentication Bypass by Capture-Replay
bianliang profile

CVE-2026-69676: Kerberos Authentication Bypass by Capture-Replay

#identity #kerberos #activedirectory #replay
Comments
2 min read
Authorization at the Object Level: Testing for BOLA Before Someone Else Does
bianliang profile

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

#apisecurity #authorization #bola #owasp
Comments
4 min read
From OAuth Profile to Root: Tracing the CVE-2026-94127 Attack Path in F5 BIG-IP APM
bianliang profile

From OAuth Profile to Root: Tracing the CVE-2026-94127 Attack Path in F5 BIG-IP APM

#cve202694127 #f5 #bigip #apm
Comments
3 min read
A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways
bianliang profile

A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways

#security #aisecurity #vulnerabilitymanagement
Comments
4 min read
Credentials in the Agent's Reach: The Codex Memory-Sharing Issue
bianliang profile

Credentials in the Agent's Reach: The Codex Memory-Sharing Issue

#authentication #cybersecurity #node #security
1
Comments 1
3 min read
Cisco Secure Email Gateway Injection Bug CVE-2026-76443: What Administrators Should Do First
bianliang profile

Cisco Secure Email Gateway Injection Bug CVE-2026-76443: What Administrators Should Do First

#security #vulnerability #cisco #cve202676443
Comments
2 min read
The Virtualization Control Plane Is on the Internet: 414,092 ESXi and 140,746 Proxmox VE Fingerprints
bianliang profile

The Virtualization Control Plane Is on the Internet: 414,092 ESXi and 140,746 Proxmox VE Fingerprints

#zoomeye #virtualization #hypervisor #managementplane
Comments
4 min read
Ports and Services: Why FortiGate Exposure Numbers Depend on the Question You Ask
bianliang profile

Ports and Services: Why FortiGate Exposure Numbers Depend on the Question You Ask

#security #fortinet #credentialexposure #zoomeye
Comments
5 min read
Sizing Linux Kernel Exposure for CVE-2026-53266: Why Asset Inventory Beats a CVE Search
bianliang profile

Sizing Linux Kernel Exposure for CVE-2026-53266: Why Asset Inventory Beats a CVE Search

#security #linux #kernel #cve202653266
1
Comments 1
3 min read
Arista VeloCloud Orchestrator CVE-2026-93952: Why the SD-WAN Control Plane Is a High-Value Target
bianliang profile

Arista VeloCloud Orchestrator CVE-2026-93952: Why the SD-WAN Control Plane Is a High-Value Target

#sdwan #kev #controlplane #arista
Comments
3 min read
161,907 Hosts on Port 102 and 173 Siemens S7 Fingerprints: Reading Two Numbers From the Same Internet
bianliang profile

161,907 Hosts on Port 102 and 173 Siemens S7 Fingerprints: Reading Two Numbers From the Same Internet

#zoomeye #ics #exposuremeasurement #s7
Comments
4 min read
336 N-able Matches, 93,431 ScreenConnect Matches and 183 Conductor Matches: Measuring the Managed Services Layer
bianliang profile

336 N-able Matches, 93,431 ScreenConnect Matches and 183 Conductor Matches: Measuring the Managed Services Layer

#security #exposuremanagement #managedservices
Comments
3 min read
Cisco Identity Services Engine CVE-2026-76460: When the Policy Engine Uses Privileged APIs Incorrectly
bianliang profile

Cisco Identity Services Engine CVE-2026-76460: When the Policy Engine Uses Privileged APIs Incorrectly

#networkaccesscontrol #kev #cisco #identity
Comments
3 min read
Patching BIND Without an Outage: A Practical Plan for CIVN-2026-0467
bianliang profile

Patching BIND Without an Outage: A Practical Plan for CIVN-2026-0467

#dns #iscbind #vulnerability
Comments
3 min read
Sanitization Leaves Traces: What Exposed AI Gateway Panels Reveal About Their Operators After AA26-251A
bianliang profile

Sanitization Leaves Traces: What Exposed AI Gateway Panels Reveal About Their Operators After AA26-251A

#security #zoomeye #ai #threatintelligence
Comments
1 min read
14,913 Kubernetes Dashboard Matches: Why the Management UI Is the Wrong Thing to Expose
bianliang profile

14,913 Kubernetes Dashboard Matches: Why the Management UI Is the Wrong Thing to Expose

#zoomeye #kubernetes #exposure
Comments
2 min read
Two Bugs and an Exposed SSH Port: The MikroTik RouterOS MikroTrick Chain
bianliang profile

Two Bugs and an Exposed SSH Port: The MikroTik RouterOS MikroTrick Chain

#security #mikrotik #routeros #edgedevices
Comments
3 min read
D-Link DIR-822A Routers Expose Critical DHCP and L2TP Flaws With Public PoC
bianliang profile

D-Link DIR-822A Routers Expose Critical DHCP and L2TP Flaws With Public PoC

#vulnerability #dlink #router #cve202686296
Comments
2 min read
When the Access Controller Is the Target: Reading Cisco ISE CVE-2026-76460
bianliang profile

When the Access Controller Is the Target: Reading Cisco ISE CVE-2026-76460

#security #cisco #identity #authenticationbypass
Comments
3 min read
1659 MQTT, 2503 InfluxDB and 45150 ClickHouse Results: The Data Pipeline Layer
bianliang profile

1659 MQTT, 2503 InfluxDB and 45150 ClickHouse Results: The Data Pipeline Layer

#zoomeye #datapipeline #mqtt #influxdb
Comments
4 min read
Rolling out phishing-resistant multi-factor authentication
bianliang profile

Rolling out phishing-resistant multi-factor authentication

#authentication #cybersecurity #infosec #security
Comments
5 min read
Prioritizing zero-day patching when you cannot patch everything
bianliang profile

Prioritizing zero-day patching when you cannot patch everything

#cybersecurity #infosec #security
Comments
5 min read
CVE-2026-81657: Assessing Risk in IBM Guardium Data Protection Deployments
bianliang profile

CVE-2026-81657: Assessing Risk in IBM Guardium Data Protection Deployments

#vulnerability #ibmguardium #cve202681657 #security
Comments
2 min read
NetScaler and the SAML Bypass: Measuring Gateway Exposure with ZoomEye
bianliang profile

NetScaler and the SAML Bypass: Measuring Gateway Exposure with ZoomEye

#authenticationbypass #exposuremanagement #remoteaccess #zoomeye
Comments
4 min read
Ransomware Incident-Response Hardening: A Practical Playbook for Defenders
bianliang profile

Ransomware Incident-Response Hardening: A Practical Playbook for Defenders

#cybersecurity #security
Comments
4 min read
Industrial Protocols on the Open Internet: A ZoomEye Measurement of Modbus and EtherNet/IP
bianliang profile

Industrial Protocols on the Open Internet: A ZoomEye Measurement of Modbus and EtherNet/IP

#ics #otsecurity #attacksurface #zoomeye
Comments
3 min read
What 1,817 Exposed TeamCity Servers Say About CI/CD as an Attack Target
bianliang profile

What 1,817 Exposed TeamCity Servers Say About CI/CD as an Attack Target

#cybersecurity #attacksurface #zoomeye
Comments
3 min read
Why the Cisco FMC Attack Surface Is Hard to See From Outside
bianliang profile

Why the Cisco FMC Attack Surface Is Hard to See From Outside

#cybersecurity #attacksurface #zoomeye
Comments
4 min read
Cisco Secure Firewall Management Center sftunnel Flaw (CVE-2026-20324) Explained
bianliang profile

Cisco Secure Firewall Management Center sftunnel Flaw (CVE-2026-20324) Explained

#cisco #securefirewall #cve202620324 #sftunnel
Comments
2 min read
The Shai-Hulud npm worm showed that opening a folder is enough to run code
bianliang profile

The Shai-Hulud npm worm showed that opening a folder is enough to run code

#supplychain #npm #developertooling #credentialtheft
Comments
3 min read
PivotC2 on 178 FortiGate Devices: Why Edge Appliances Are the Quietest Place to Hide
bianliang profile

PivotC2 on 178 FortiGate Devices: Why Edge Appliances Are the Quietest Place to Hide

#security #networksecurity #malware #edgedevices
Comments
3 min read
The Default Join Key That Let Attackers Mint Admin Tokens on JFrog Artifactory
bianliang profile

The Default Join Key That Let Attackers Mint Admin Tokens on JFrog Artifactory

#supplychain #authenticationbypass #artifactory #cve202682329
Comments
4 min read
The Wider Adobe Patch Wave Behind CVE-2026-75650
bianliang profile

The Wider Adobe Patch Wave Behind CVE-2026-75650

#security #vulnerability #adobe #magento
Comments
3 min read
How Many MikroTik Devices Are Actually Reachable From the Internet?
bianliang profile

How Many MikroTik Devices Are Actually Reachable From the Internet?

#security #zoomeye #exposure #router
Comments
3 min read
Reading a 1.2 Million PaperCut Fingerprint Count Correctly
bianliang profile

Reading a 1.2 Million PaperCut Fingerprint Count Correctly

#cybersecurity #attacksurface #zoomeye
Comments
3 min read
loading...