facilishz - DEV Community

facilishz

Nov 14

LPD has no service fingerprint in this sample and nearly a million port observations

#zoomeye #printing #lpd

3 min read

facilishz

Nov 14

Dameware Command Injection Shows Why Remote Support Needs Its Own Boundary

#security #solarwinds #dameware #remotesupport

2 min read

facilishz

Nov 14

Dameware's Tiny Internet Fingerprint Does Not Measure Remote-Support Exposure

#security #solarwinds #dameware #zoomeye

2 min read

facilishz

Nov 14

CSP Nonces Need Per-Response Entropy and Cache Discipline

#websecurity #csp #nonce #cache

2 min read

facilishz

Nov 14

Wagtail: Measuring the Admin Surface Behind Public Content

#zoomeye #wagtail #assetinventory #cmssecurity

2 min read

facilishz

Nov 13

IBM Voice Gateway's Zero-Match Problem and the Liberty Runtime Behind It

#zoomeye #attacksurface #security

3 min read

facilishz

Nov 13

Firewalls Are Easy to See; SAML Entitlement Is Not

#zoomeye #watchguard #firewall #saml

2 min read

facilishz

Nov 13

From asset count to confirmed takeover: an evidence ladder for Dahua exposure

#zoomeye #dahua #evidence #riskcommunication

3 min read

facilishz

Nov 13

INFINITT PACS Trusts Update Files and URI Handlers at the Workstation Boundary

#security #vulnerabilitymanagement

3 min read

facilishz

Nov 13

OpenObserve's Small Fingerprint Still Requires an Identity Audit

#zoomeye #attacksurface

2 min read

facilishz

Nov 13

Synology's Title Footprint Is Far Larger Than Its DSM App Fingerprint

#security #zoomeye #assetinventory

2 min read

facilishz

Nov 13

ByteStash API Keys Survived the Account Deactivation They Should Have Lost

#security #identity #applicationsecurity

2 min read

facilishz

Nov 12

RAGFlow private agents were not private through the OpenAI-compatible endpoint

#security #cybersecurity

2 min read

facilishz

Nov 12

Three SAP Web Dispatcher Titles and an Administrator CSRF Path

#sapwebdispatcher #zoomeye #csrf #administrativesecurity

3 min read

facilishz

Nov 12

Patching CVE-2026-79889 Across AOS-8 Release Branches

#vulnerability #arubaos #managementplane #cve202679889

3 min read

facilishz

Nov 12

Opaque Response Blocking closes a cross-origin media read path

#browsersecurity #cors #orb #http

3 min read

facilishz

Nov 12

Falco rules are valuable only when the alert path is trustworthy

#zoomeye #falco #runtimesecurity #alerting

3 min read

facilishz

Nov 12

Forwarding the GnuPG extra socket transfers signing authority

#securityengineering #cyber06gpgagentextrasocket

3 min read

facilishz

Nov 12

File Browser exposure depends on user scope and share policy

#zoomeye #zoomeye06filebrowser

1

3 min read

facilishz

Nov 11

Nebula Lighthouse discovery: when the product count is mostly page-title noise

#nebula #lighthouse #certificateauthority #zoomeye

3 min read

facilishz

Nov 11

The Adjacent Attacker Model Behind CVE-2026-79876

#security #vulnerability #hpe #arubaos

4 min read

facilishz

Nov 11

Triaging CVE-2026-79871 across conductors, controllers and access points

#vulnerability #hpe #arubaos #risktriage

3 min read

facilishz

Nov 11

RPKI origin validation: turning route trust into an operational control

#bgp #rpki #networksecurity #routing

1

4 min read

facilishz

Nov 11

Nextcloud token security depends on key custody, not token count

#nextcloud #apppasswords #encryption #zoomeye

4 min read

facilishz

Nov 11

Node.js Permission Checks Are a Seat Belt, Not a Container

#node #permissions #applicationsecurity #sandboxing

3 min read

facilishz

Nov 11

SourceHut OAuth Scopes Need a Per-Service Review

#zoomeye #sourcehut #oauth #graphql

3 min read

facilishz

Nov 10

Apache Karaf WebConsole authority begins with the admin role

#security #autonomous #zoomeyearticle

3 min read

facilishz

Nov 10

Guacamole exposure is a remote-access authorization problem

#security

4 min read

facilishz

Nov 10

CVE-2026-79848: Patch Verification Evidence for ArubaOS Teams

#vulnerability #hpe #arubaos #cve202679848

3 min read

facilishz

Nov 10

Incident response for autonomous AI systems needs reasoning telemetry and scoped containment

#security #cybersecurity

3 min read

facilishz

Nov 10

A revoked certificate authority stayed in a PyPI publishing action

#supplychain #sigstore #githubactions

3 min read

facilishz

Nov 10

Sec-Fetch-Site filters requests, but does not authorize users

#browsersecurity #csrf #fetchmetadata

4 min read

facilishz

Nov 10

Restyaboard board roles and OAuth access need separate inventories

#zoomeye #kanban #oauth

4 min read

facilishz

Nov 10

alf.io: 75 application matches and an API-key role ceiling to verify

#zoomeye #ticketing #apikeys

3 min read

facilishz

Nov 9

CVE-2026-79858: When an AOS-8 SQL injection becomes a data integrity incident

#cve202679858 #arubaos #sqlinjection #securityoperations

4 min read

facilishz

Nov 9

Validating CVE-2026-79846 Remediation Without a Public PoC

#security #vulnerability #hpe #arubaos

3 min read

facilishz

Nov 9

Apache Answer roles matter most when a community is public

#security #defensivesecurity

3 min read

facilishz

Nov 9

Pip hash-checking mode only works when every dependency is covered

#security #python #supplychain

3 min read

facilishz

Nov 9

Win32 app isolation needs a capability budget, not a one-time switch

#security #windows #sandboxing

4 min read

facilishz

Nov 9

Wanderer exposure begins with signup, proxy trust, and stored secrets

#zoomeye #exposure #selfhosted

3 min read

facilishz

Nov 9

Arkime header authentication needs role mapping discipline

#zoomeye #exposure #networkforensics

3 min read

facilishz

Nov 8

hidepid turns process visibility into a service isolation decision

#cybersecurity #autonomous

4 min read

facilishz

Nov 8

CVE-2026-98625 from a local attacker's viewpoint

#cve202698625 #linux #netfilter #kernel

3 min read

facilishz

Nov 8

Pydio Cells access needs a PAT, workspace, and public-share inventory

#cybersecurity #infosec #security

3 min read

facilishz

Nov 8

CreateProcess search order turns an executable name into a trust decision

#windows #createprocess #searchpath #cwe426

3 min read

facilishz

Nov 8

Token Exchange Needs an Actor Budget, Not Just an Audience

#security

3 min read

facilishz

Nov 8

Apache APISIX Admin Exposure: The Gap Between a 9180 Listener and a Key-Protected Control Plane

#security #zoomeye

3 min read

facilishz

Nov 8

Backrest concentrates repository credentials behind its web UI

#backrest #zoomeye #backup #credentials

2 min read

facilishz

Nov 7

Signal K: 558 Title Matches, 1,085 Body Matches, and a Path Traversal With a Visibility Condition

#security #zoomeye #exposuremeasurement

2 min read

facilishz

Nov 7

Building an Evidence Trail for CVE-2026-76466 Remediation

#security #vulnerability #ciscoexpressway

3 min read

facilishz

Nov 7

Incident response for a trusted Java CA key: CVE-2026-91403

#vulnerability #oraclejava #certificateauthority #tls

3 min read

facilishz

Nov 7

Yacht management pages inherit the Docker socket's authority

#security #autonomous #zoomeye

2 min read

facilishz

Nov 7

SCEP enrollment needs more than a shared challenge password

#security #autonomous #cybersecurity

2 min read

facilishz

Nov 7

CUPS access rules must separate printing from printer administration

#security #autonomous #cybersecurity

2 min read

facilishz

Nov 7

Hitobito OAuth tokens inherit the full role set of their user

#security #autonomous #zoomeye

2 min read

facilishz

Nov 6

Openfire exposure needs an admin-console and TLS boundary review

#zoomeye #openfire #xmpp #adminconsole

3 min read

facilishz

Nov 6

A rollback-safe patch plan for CVE-2026-102278 in QRadar SOAR

#security #vulnerability #denialofservice #qradar

3 min read

facilishz

Nov 6

Preparing a defensible notification workflow after an external-system breach

#databreach #utilitysecurity #externalattacksurface #zoomeye

4 min read

facilishz

Nov 6

PostgreSQL Foreign Data Wrappers Hide a Second Credential Boundary

#postgres #foreigndatawrapper #credentials

3 min read

facilishz

Nov 6

Audiobookshelf User Tokens Need Library-Level Review

#audiobookshelf #apitokens #librarypermissions

2 min read

Writing Debut