DEV Community

kozhevniko profile picture

kozhevniko

Stay curious, keep researching.

Joined Joined on 
Small Numbers, Real Findings: AWX, NiFi, Pulsar and CockroachDB
kozhevniko profile

Small Numbers, Real Findings: AWX, NiFi, Pulsar and CockroachDB

#zoomeye #awx #apachenifi #cockroachdb
Comments
3 min read

Want to connect with kozhevniko?

Create an account to connect with kozhevniko. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Assessing CVE-2026-86510: Severity, Reachability and the Limits of the Public Record
kozhevniko profile

Assessing CVE-2026-86510: Severity, Reachability and the Limits of the Public Record

#security #vulnerability #router #dlink
Comments
2 min read
From p=none to Enforcement: A Working Sequence for DMARC Rollout
kozhevniko profile

From p=none to Enforcement: A Working Sequence for DMARC Rollout

#security #defensivepractice
Comments
3 min read
983,992 Indexed FortiGate Instances: Reading an Edge-Appliance Count Against CVE-2025-25249
kozhevniko profile

983,992 Indexed FortiGate Instances: Reading an Edge-Appliance Count Against CVE-2025-25249

#exposuremanagement #networksecurity
Comments
3 min read
Request smuggling in NetScaler: why the backend's parsing rules decide the impact
kozhevniko profile

Request smuggling in NetScaler: why the backend's parsing rules decide the impact

#vulnerability #citrix #netscaler #http
Comments
2 min read
Why moderately critical advisories like CVE-2026-96360 get postponed
kozhevniko profile

Why moderately critical advisories like CVE-2026-96360 get postponed

#drupal #webform #cve202696360 #xss
Comments
2 min read
Where the Panels Live: Network Footprint Patterns of Exposed AI Gateways After the CISA Advisory
kozhevniko profile

Where the Panels Live: Network Footprint Patterns of Exposed AI Gateways After the CISA Advisory

#security #zoomeye #ai #networkfootprint
1
Comments
1 min read
Why stored XSS in Drupal Webform (CVE-2026-96367) reaches other users
kozhevniko profile

Why stored XSS in Drupal Webform (CVE-2026-96367) reaches other users

#security #vulnerability #drupal #webform
Comments
2 min read
Authentication and Privilege Escalation Paths in the Drupal Extension Advisory WID-SEC-2026-3554
kozhevniko profile

Authentication and Privilege Escalation Paths in the Drupal Extension Advisory WID-SEC-2026-3554

#security #drupal #vulnerability
Comments 1
2 min read
Grafana Dashboards on the Internet: A Title Match Beats a Fingerprint Here
kozhevniko profile

Grafana Dashboards on the Internet: A Title Match Beats a Fingerprint Here

#grafana #exposure #monitoring
Comments
3 min read
Why CVE-2026-96364 cannot be mapped to a single Drupal module from public records
kozhevniko profile

Why CVE-2026-96364 cannot be mapped to a single Drupal module from public records

#security #drupal #cve202696364 #contributedmodules
Comments
3 min read
Assessing CVE-2026-67278 Risk: Why Trust Failures Outrank Their CVSS Label
kozhevniko profile

Assessing CVE-2026-67278 Risk: Why Trust Failures Outrank Their CVSS Label

#vulnerability #mikrotik #routeros #risk
Comments 1
2 min read
CVE-2026-96359 Explained for Defenders: What WID-SEC-2026-3554 Does and Does Not Tell You
kozhevniko profile

CVE-2026-96359 Explained for Defenders: What WID-SEC-2026-3554 Does and Does Not Tell You

#security #drupal #detection #cve202696359
Comments 1
3 min read
CVE-2026-48842: Pre-Auth SQL Injection in Roundcube's virtuser_query Plugin
kozhevniko profile

CVE-2026-48842: Pre-Auth SQL Injection in Roundcube's virtuser_query Plugin

#vulnerability #webmail #sqlinjection #zoomeye
Comments 1
4 min read
OpenCTI Readers Can Open Cases: Inside CVE-2026-76822's Missing Capability Check
kozhevniko profile

OpenCTI Readers Can Open Cases: Inside CVE-2026-76822's Missing Capability Check

#cybersecurity #infosec #security
Comments 1
3 min read
Measuring Internet-Exposed Email Security Gateways With ZoomEye
kozhevniko profile

Measuring Internet-Exposed Email Security Gateways With ZoomEye

#security #zoomeye #exposure #emailsecurity
Comments
3 min read
174 Unauthenticated Docker Daemons and the Control-Plane Exposure Behind Them
kozhevniko profile

174 Unauthenticated Docker Daemons and the Control-Plane Exposure Behind Them

#zoomeye #containersecurity #exposuremeasurement #docker
Comments
3 min read
Nomad's API without an access control list
kozhevniko profile

Nomad's API without an access control list

#zoomeye #nomad #scheduler #exposure
Comments
2 min read
What the September 2026 IBM advisory means for teams running Langflow OSS in production
kozhevniko profile

What the September 2026 IBM advisory means for teams running Langflow OSS in production

#vulnerability #langflow #ibm #remotecodeexecution
Comments 1
2 min read
5,873,669 Hosts on Port 1433: The Database Port That Still Faces the Internet
kozhevniko profile

5,873,669 Hosts on Port 1433: The Database Port That Still Faces the Internet

#exposuremanagement #databasesecurity
Comments 1
3 min read
SAP's September 2026 patch day: a CVSS 10.0 in the passport layer
kozhevniko profile

SAP's September 2026 patch day: a CVSS 10.0 in the passport layer

#sap #patchmanagement #cve202644756 #erp
Comments
4 min read
152,655 Matches for ownCloud and the CVE That Matches It Exactly
kozhevniko profile

152,655 Matches for ownCloud and the CVE That Matches It Exactly

#security #attacksurface #zoomeye
1
Comments
3 min read
Sizing the Zimbra Perimeter That Email Attackers Actually Touch
kozhevniko profile

Sizing the Zimbra Perimeter That Email Attackers Actually Touch

#zimbra #cve202566376 #exposuremanagement #zoomeye
1
Comments
3 min read
Apache Tomcat 11.0.26 Closes an HTTP/2 Header Mix-Up Regression: CVE-2026-86350
kozhevniko profile

Apache Tomcat 11.0.26 Closes an HTTP/2 Header Mix-Up Regression: CVE-2026-86350

#security #vulnerability #apachetomcat #cve202686350
1
Comments
3 min read
Stored XSS as a Privilege Ladder: CVE-2026-75684, CVE-2026-75689 and CVE-2026-75697 in Adobe Connect
kozhevniko profile

Stored XSS as a Privilege Ladder: CVE-2026-75684, CVE-2026-75689 and CVE-2026-75697 in Adobe Connect

#adobeconnect #cve202675684 #storedxss #privilegeescalation
Comments
3 min read
5,497 Matches for SonicWall SMA1000: Remote Access Appliances That Administrators Already Trust
kozhevniko profile

5,497 Matches for SonicWall SMA1000: Remote Access Appliances That Administrators Already Trust

#security #attacksurface #zoomeye
Comments
2 min read
132,158 Observable Magento Stores: Sizing the Population Exposed in the StyleSmuggler Window
kozhevniko profile

132,158 Observable Magento Stores: Sizing the Population Exposed in the StyleSmuggler Window

#zoomeye #magento #exposuremeasurement #ecommerce
Comments
2 min read
Apache Tomcat: 5,853,642 Fingerprint Matches and 10,191 Manager Pages
kozhevniko profile

Apache Tomcat: 5,853,642 Fingerprint Matches and 10,191 Manager Pages

#tomcat #managerapplication #deployment #exposuremeasurement
Comments
2 min read
Home Assistant at Internet Scale: 2.7 Million Fingerprint Matches and the Automation Control Plane
kozhevniko profile

Home Assistant at Internet Scale: 2.7 Million Fingerprint Matches and the Automation Control Plane

#homeassistant #iot #homeautomation #exposure
Comments
4 min read
From Internet-Facing Firewall to Root Shell: Why CVE-2026-20324 Matters
kozhevniko profile

From Internet-Facing Firewall to Root Shell: Why CVE-2026-20324 Matters

#cisco #firewall #cve202620324 #rootrce
Comments
2 min read
Citrix NetScaler CVE-2026-19490: Fifteen Days From Patch to Exploitation
kozhevniko profile

Citrix NetScaler CVE-2026-19490: Fifteen Days From Patch to Exploitation

#cybersecurity #authenticationbypass #edgedevices
Comments
3 min read
CVE-2026-87886: Insecure File Permissions in the Acronis Backup Plugin on Shared Hosting
kozhevniko profile

CVE-2026-87886: Insecure File Permissions in the Acronis Backup Plugin on Shared Hosting

#security #vulnerability #exploitedinthewild
Comments
3 min read
CVE-2026-77762 and the HTTP/2 Request-Mixup Family in Apache Tomcat
kozhevniko profile

CVE-2026-77762 and the HTTP/2 Request-Mixup Family in Apache Tomcat

#apachetomcat #cve202677762 #requestmixup #cve202686350
Comments
2 min read
Inside the MikroTik September 2026 Release: Three RouterOS Flaws, One Patch Cycle
kozhevniko profile

Inside the MikroTik September 2026 Release: Three RouterOS Flaws, One Patch Cycle

#security #mikrotik #routeros #ssh
Comments
2 min read
From Scanning to Self-Assessment: Using ZoomEye to Inventory Your Own Attack Surface
kozhevniko profile

From Scanning to Self-Assessment: Using ZoomEye to Inventory Your Own Attack Surface

#zoomeye #attacksurface #exposuremanagement
Comments
3 min read
Why CVE-2026-75650 Matters More Than Its CVE Number Suggests
kozhevniko profile

Why CVE-2026-75650 Matters More Than Its CVE Number Suggests

#security #vulnerability #adobe #magento
Comments
3 min read
Redis on the Open Internet: What 3.1 Million Exposed Service Banners Reveal
kozhevniko profile

Redis on the Open Internet: What 3.1 Million Exposed Service Banners Reveal

#redis #iot #database #misconfiguration
Comments
7 min read
Hunting MikroTrick: Log Indicators and Forensic Checks for the RouterOS Chain
kozhevniko profile

Hunting MikroTrick: Log Indicators and Forensic Checks for the RouterOS Chain

#vulnerability #routeros #mikrotik #ssh
Comments
3 min read
SharePoint CVE-2026-56164: Why a 7.8 Elevation of Privilege Reached KEV
kozhevniko profile

SharePoint CVE-2026-56164: Why a 7.8 Elevation of Privilege Reached KEV

#sharepoint #cve202656164 #kev #elevationofprivilege
Comments
3 min read
Reading Your Own Kubernetes RBAC: A Least-Privilege Audit That Finds Real Grants
kozhevniko profile

Reading Your Own Kubernetes RBAC: A Least-Privilege Audit That Finds Real Grants

#kubernetes #rbac #leastprivilege #cloudsecurity
Comments
4 min read
314 IPP and 44897 Raw Print Results: The Office Device Layer on the Open Internet
kozhevniko profile

314 IPP and 44897 Raw Print Results: The Office Device Layer on the Open Internet

#zoomeye #printing #iot #exposuremeasurement
Comments
4 min read
1,436,696 Hosts on Port 2375: The Unauthenticated Docker API as a Persistent Surface
kozhevniko profile

1,436,696 Hosts on Port 2375: The Unauthenticated Docker API as a Persistent Surface

#zoomeye #docker #exposure
Comments
2 min read
What an attacker gains from CVE-2026-7273 on a Zyxel GS1900 switch
kozhevniko profile

What an attacker gains from CVE-2026-7273 on a Zyxel GS1900 switch

#cybersecurity #infosec #networking #security
Comments
4 min read
Hardening Beyond 7.1.1: Reducing the Surfaces Click2Shell Relies On
kozhevniko profile

Hardening Beyond 7.1.1: Reducing the Surfaces Click2Shell Relies On

#wordpress #click2shell #zoomeye #rce
Comments 1
2 min read
Cache Poisoning and Zone Injection: The Integrity Risks in the September 2026 BIND Advisory
kozhevniko profile

Cache Poisoning and Zone Injection: The Integrity Risks in the September 2026 BIND Advisory

#dns #iscbind #vulnerability
Comments
3 min read
Triaging Codex Exposure: What a Count of 164 Does and Does Not Tell You
kozhevniko profile

Triaging Codex Exposure: What a Count of 164 Does and Does Not Tell You

#cli #infosec #openai #security
Comments
3 min read
The Artifactory Token Chain: Why Build Repositories Are a Credential Store
kozhevniko profile

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

#supplychain #artifactrepository #authenticationbypass #devsecops
Comments
4 min read
API Security: The Attack Surface That Grows Without a Firewall
kozhevniko profile

API Security: The Attack Surface That Grows Without a Firewall

#apisecurity #owasp #authorization
Comments
2 min read
A Defender's Checklist for CVE-2026-81657 in IBM Guardium Data Protection
kozhevniko profile

A Defender's Checklist for CVE-2026-81657 in IBM Guardium Data Protection

#vulnerability #ibmguardium #cve202681657 #security
Comments
2 min read
Measuring exposed industrial control panels on the public internet
kozhevniko profile

Measuring exposed industrial control panels on the public internet

#cybersecurity #infosec #network #security
Comments
5 min read
When an AI Gateway Becomes the Credential Store: Securing MCP Endpoints After CVE-2026-59822
kozhevniko profile

When an AI Gateway Becomes the Credential Store: Securing MCP Endpoints After CVE-2026-59822

#security #aiinfrastructure #mcp #authentication
2
Comments 2
3 min read
The Management Plane Is the Attack Plane: What Three Clusters on One Cisco FMC Tell Defenders
kozhevniko profile

The Management Plane Is the Attack Plane: What Three Clusters on One Cisco FMC Tell Defenders

#security #vulnerabilitymanagement #networksecurity #exploitedinthewild
Comments
4 min read
Water utility PLC attacks: the control layer that was never designed to authenticate
kozhevniko profile

Water utility PLC attacks: the control layer that was never designed to authenticate

#otsecurity #industrialcontrolsystems #waterutilities #exposuremanagement
Comments
3 min read
How a Pre-Authentication Stack Overflow in Check Point Log Servers Leads to Root Code Execution
kozhevniko profile

How a Pre-Authentication Stack Overflow in Check Point Log Servers Leads to Root Code Execution

#security #vulnerability #checkpoint #remotecodeexecution
Comments
2 min read
Gunra Ransomware: What the Joint Advisory Says About Edge Devices, MFA Bypass and Recovery
kozhevniko profile

Gunra Ransomware: What the Joint Advisory Says About Edge Devices, MFA Bypass and Recovery

#ransomware #gunra #cisaadvisory #mfa
Comments
4 min read
Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces
kozhevniko profile

Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces

#security #zoomeye #exposure #supplychain
Comments
3 min read
ZcopyReaper: A Local Privilege Escalation in the Linux Kernel RDS Path
kozhevniko profile

ZcopyReaper: A Local Privilege Escalation in the Linux Kernel RDS Path

#cybersecurity #linuxkernel #privilegeescalation
Comments
3 min read
From KEV to Exposure: Mapping the September 2026 Batch to Measurable Services
kozhevniko profile

From KEV to Exposure: Mapping the September 2026 Batch to Measurable Services

#kev #attacksurface #zoomeye #exposuremeasurement
Comments
4 min read
CVE-2026-76443: Injection Flaws in Cisco Secure Email Gateway Management Interfaces
kozhevniko profile

CVE-2026-76443: Injection Flaws in Cisco Secure Email Gateway Management Interfaces

#security #vulnerability #cisco #cve202676443
Comments
2 min read
Why a Single Email Is Enough to Root a Cisco Secure Email Gateway
kozhevniko profile

Why a Single Email Is Enough to Root a Cisco Secure Email Gateway

#security #vulnerability #emailsecurity #edgedevice
Comments
4 min read
loading...