OnaEiuspkz - DEV Community

OnaEiuspkz

Sep 30

Comment2Shell CVE-2026-93485: An Anonymous Comment That Reaches the Server

#wordpress #crosssitescripting #cms #patchmanagement

3 min read

OnaEiuspkz

Sep 30

GitLab Self-Managed Patch Guide: Moving to 19.4.1, 19.3.3, or 19.2.7

#vulnerability #gitlab #remotecodeexecution #cicd

2 min read

OnaEiuspkz

Sep 29

Inventory gaps that CVE-2026-88773 will expose in most NetScaler estates

#vulnerability #citrix #netscaler #requestsmuggling

2 min read

OnaEiuspkz

Sep 29

Graylog on the Internet: 14,061 Matches on a Platform That Centralises Every Log

#zoomeye #exposuremeasurement #logging #monitoring

1

3 min read

OnaEiuspkz

Sep 29

Reading the Three LXD Advisories Together: CVE-2026-87799 and Its btrfs Siblings

#security #vulnerability #lxd #cve202687799

1

3 min read

OnaEiuspkz

Sep 29

Runtime Detection with eBPF: What Kernel-Level Telemetry Adds to Container Security

#security #defensivepractice

1

3 min read

OnaEiuspkz

Sep 29

GlobalProtect: 1.24 million title matches against 611 application fingerprints

#vpn #globalprotect #fingerprintcoverage

2 min read

OnaEiuspkz

Sep 29

CVE-2026-96365 and the Contribution Model: Why Drupal Site Owners Carry the Patch Burden

#security #drupal #cve202696365 #supplychain

1

2 min read

OnaEiuspkz

Sep 28

Nearly 11 Million Submission Endpoints on Port 587: The Mail Path That Is Rarely Reviewed

#security #attacksurface #zoomeye

3 min read

OnaEiuspkz

Sep 28

Reconciling external attack surface findings with what you already own

#attacksurface #assetinventory #reconnaissance

1

2 min read

OnaEiuspkz

Sep 28

Remote Access Services at Internet Scale: RDP, VNC and Telnet Counts

#cybersecurity #infosec #networking #security

1

2 min read

OnaEiuspkz

Sep 28

2,404,811 answers on port 2181 and 1,381,208 on port 9092: the difference between a coordinator and a broker

#zookeeper #kafka #zoomeye

1

3 min read

OnaEiuspkz

Sep 28

Zimbra Behind a Reverse Proxy: Finding Mail Servers That Refuse to Identify Themselves

#zimbra #cve202566376 #exposuremanagement #zoomeye

3 min read

OnaEiuspkz

Sep 27

10,176 Siemens SIMATIC Matches and 41,591 Hosts on Port 502: Industrial Exposure in Two Views

#zoomeye #ics #modbus #exposure

3 min read

OnaEiuspkz

Sep 27

44,076 Indexed Moodle Instances: Learning Platforms Hold More Than Course Content

#exposuremanagement #educationsecurity

3 min read

OnaEiuspkz

Sep 27

Healthcare Messaging at Internet Scale: 1.28 Million Mirth Connect Fingerprints

#zoomeye #mirthconnect #healthcare #hl7

3 min read

OnaEiuspkz

Sep 27

Auditing OpenCTI Case Creation After CVE-2026-76822

#cybersecurity #graphql #infosec #security

2 min read

OnaEiuspkz

Sep 27

Hardening Against CVE-2026-32996: Veeam Agent Privilege Escalation in Focus

#security #vulnerability #veeam #privilegeescalation

1 min read

OnaEiuspkz

Sep 27

Watching for Exploitation of the Adobe Campaign Classic Flaws While the Patch Is Pending

#adobecampaignclassic #cve202675699 #detection #monitoring

1

2 min read

OnaEiuspkz

Sep 26

1,317,154 GitLab Fingerprints and Why Source Control Is a Supply Chain Target

#cybersecurity #git #security

2 min read

OnaEiuspkz

Sep 26

3,028 Hosts on Port 6443: What Public Kubernetes API Servers Reveal About Cluster Control

#security #attacksurface #kubernetes #zoomeye

3 min read

OnaEiuspkz

Sep 26

CVE-2026-66066: an image upload path that reads /proc/self/environ

#cybersecurity #ruby #security

2 min read

OnaEiuspkz

Sep 26

One Key for Every PBX: The Issabel Framework Hardcoded JWT Flaw (CVE-2026-89026)

#pbx #hardcodedcredentials #cve202689026 #asterisk

2 min read

OnaEiuspkz

Sep 26

Juniper, Sophos, WatchGuard and Barracuda: reading four edge vendors together

#cybersecurity #infrastructure #networking #security

1

2 min read

OnaEiuspkz

Sep 26

CVE-2026-96358 and the Long Tail of Drupal Contributed Modules

#security #drupal #cve #vulnerability

2 min read

OnaEiuspkz

Sep 25

Reading the 9.8 Score for CVE-2026-96357 Correctly

#security #drupal #cve #vulnerability

2 min read

OnaEiuspkz

Sep 25

Measuring the GitLab Attack Surface: What 1.31 Million Indexed Instances Say About Patch Urgency

#security #exposuremanagement #gitlab #zoomeye

3 min read

OnaEiuspkz

Sep 25

When a Certificate Becomes a Clue: Infrastructure Linking in the Toll Fraud Investigation

#threatintelligence #tlscertificates #attribution #zoomeye

4 min read

OnaEiuspkz

Sep 25

Seven Days to Disconnect: What the Berlin Breach Says About Containment Speed

#ransomware #incidentresponse #networksegmentation #publicsector

4 min read

OnaEiuspkz

Sep 25

4,827 internet-reachable Zabbix deployments: when the monitoring system is the blind spot

#zoomeye #zabbix #monitoring #exposuremanagement

3 min read

OnaEiuspkz

Sep 25

Two Zero-Days on the VPN Gateway: SonicWall SMA1000 and the Cost of an Internet-Facing Management Interface

#security #networksecurity #vulnerabilitymanagement

3 min read

OnaEiuspkz

Sep 24

350,497 Elasticsearch Fingerprint Matches: Reading a Familiar Exposure Number Carefully

#zoomeye #elasticsearch #exposure

2 min read

OnaEiuspkz

Sep 24

Cloud Metadata Service Abuse: Turning SSRF Into Credentials in Modern Web Stacks

#cloud #ssrf #credentials

2 min read

OnaEiuspkz

Sep 24

AI Gateways Are Becoming Attack Surface: Measuring Exposed LiteLLM Deployments

#zoomeye #attacksurface #aiinfrastructure #exposuremanagement

3 min read

OnaEiuspkz

Sep 24

90,626 Jupyter Notebooks Are Publicly Indexed: The Difference Between Sharing and Exposing

#security #zoomeye #attacksurface

2 min read

OnaEiuspkz

Sep 24

A Defender's Checklist for CVE-2026-75650 in Adobe Commerce and Magento Open Source

#security #vulnerability #adobecommerce #magento

2 min read

OnaEiuspkz

Sep 24

Exchange Server Exposure: 8,471 Observed Instances and a Decade of Targeted Exploitation

#zoomeye #exchange #emailsecurity

2 min read

OnaEiuspkz

Sep 23

1,539 Jenkins Matches and 212 GitLab Matches: Measuring CI/CD Controllers as an Attack Surface

#zoomeye #jenkins #gitlab #cicd

3 min read

OnaEiuspkz

Sep 23

What Exposure Counts Do Not Prove: A Methodology Note on the Fortinet Credential Advisory

#security #fortinet #credentialexposure #zoomeye

5 min read

OnaEiuspkz

Sep 23

CVE-2026-76443 and the Injection Risk in Email Security Appliances

#security #vulnerability #cisco #cve202676443

2 min read

OnaEiuspkz

Sep 23

AI Gateways on the Public Internet: 35,130 Indexed LiteLLM Endpoints and the Credentials Behind Them

#security #aiinfrastructure #exposuremanagement #zoomeye

1

3 min read

OnaEiuspkz

Sep 23

Why Exposed Build Servers Remain the Quietest Way Into a Software Supply Chain

#cicd #supplychain #vulnerabilitymanagement

3 min read

OnaEiuspkz

Sep 22

Defending DIR-822A Deployments Against CVE-2026-86510 Without a Vendor Patch

#security #vulnerability #router #dlink

2 min read

OnaEiuspkz

Sep 22

When a CVE Query Returns Zero: Interpreting ZoomEye's vul.cve Field Correctly

#exposuremanagement #internetmeasurement #methodology #zoomeye

4 min read

OnaEiuspkz

Sep 22

Lessons From CVE-2026-93952: Securing SD-WAN Controllers Before the Next Zero-Day

#security #lessonslearned #sdwan #velocloud

3 min read

OnaEiuspkz

Sep 22

ISC BIND's September 2026 Patch Batch: 14 CVEs, One DNS Server, and a Wide Blast Radius

#dns #iscbind #vulnerability #denialofservice

5 min read

OnaEiuspkz

Sep 22

Building a Patch Prioritization Rule When a Single Vendor Ships 970 Fixes in a Month

#patchmanagement #vulnerabilityprioritization #kev #securityoperations

4 min read

OnaEiuspkz

Sep 22

Logging and Detection: Why Most Breaches Are Found by Someone Else

#detection #logging #incidentresponse

1

2

2 min read

OnaEiuspkz

Sep 21

Crypto Inventory Before Cryptography Change: A Practical Post-Quantum Migration Start

#postquantum #cryptography #assetinventory #migration

4 min read

OnaEiuspkz

Sep 21

Measuring leaked .env configuration files on the open web

#cybersecurity #infosec #security

5 min read

OnaEiuspkz

Sep 21

ConnectWise ScreenConnect CVE-2026-84869: Remote Support Software as an Attacker Delivery Channel

#rmmabuse #missingauthorization #remotesupport #endpointsecurity

3 min read

OnaEiuspkz

Sep 21

When the VPN Gateway Becomes the Foothold: Lessons from the SonicWall SMA1000 Zero-Day Chain

#vulnerabilitymanagement #edgesecurity #vpn #zeroday

4 min read

OnaEiuspkz

Sep 21

17,881 Artifactory Instances Are Observable Online: Turning the CVE-2026-82329 KEV Deadline into a Checkable Query

#security #supplychain #kev #artifactory

3 min read

OnaEiuspkz

Sep 21

Exposed Router Management: 8.09 Million RouterOS Assets and the 9,560 That Still Answer on SSH

#security #exposuremanagement #networksecurity #zoomeye

3 min read

OnaEiuspkz

Sep 20

GitLab CVE-2026-85706: Why the Patch Is Only Step One

#gitlab #cve202685706 #pathtraversal #supplychain

4 min read

OnaEiuspkz

Sep 20

From Unauthenticated RCE to Ransomware: The vCenter Syslog Flaw That Reached 47 Countries

#security #vulnerability #virtualization #ransomware

3 min read

OnaEiuspkz

Sep 20

The September 2026 KEV Wave: Reading Exposure Across Six Exploited Products

#zoomeye #exposuremanagement #cisakev #vulnerabilitymanagement

4 min read

OnaEiuspkz

Sep 20

9,941 Reachable N-central Interfaces: Sizing the RMM Surface Behind CVE-2026-86218

#zoomeye #exposure #rmm #internetmeasurement

4 min read

OnaEiuspkz

Sep 20

Securing Check Point Security Management and Log Servers Against CVE-2026-91843

#security #vulnerability #checkpoint #remotecodeexecution

1 min read

OnaEiuspkz

Sep 19

Measuring the MikroTik Attack Surface Behind the MikroTrick Campaign

#cybersecurity #attacksurface #zoomeye

3 min read

1 Week Community Wellness Streak

Want to connect with OnaEiuspkz?