jeffrey - DEV Community

jeffrey

Oct 13

Fireware OS version drift: keeping CVE-2026-18145 from reopening

#watchguard #firewareos #versiondrift #cve202618145

2 min read

jeffrey

Oct 13

CVE-2026-80521: An AF_UNIX Use-After-Free That Crosses the Container Boundary

#linuxkernel #afunix #containerescape #cve202680521

4 min read

jeffrey

Oct 13

Collaboration Platforms Under Measurement: 185,584 Confluence and 91,979 Jira Instances

#zoomeye #exposure #collaboration #patchmanagement

2 min read

jeffrey

Oct 13

Patching Argo CD to v3.5.4, v3.4.10, v3.3.15 or v3.6.0-rc2: A Migration Checklist

#argocd #cve202677459 #kubernetes #gitops

2 min read

jeffrey

Oct 13

The dependency problem behind CVE-2026-103877: patching a library that hides inside other software

#security #vulnerability #apache #ldap

3 min read

jeffrey

Oct 13

Ignition gateways: 5,037 application matches and 3,146 titles on an industrial control platform

#industrialcontrol #scada #exposuremeasurement #zoomeye

2 min read

jeffrey

Oct 12

Apache Hue answers on 183,061 hosts by title and holds no application fingerprint

#zoomeye #hadoop #exposure

2 min read

jeffrey

Oct 12

Hunting Gitea SSRF Abuse: Detection Guidance for CVE-2026-101027

#gitea #ssrf #cve2026101027 #selfhosted

2 min read

jeffrey

Oct 12

Langflow CVE-2026-0768: An Unauthenticated Route to Code Execution in an AI Workflow Builder

#vulnerability #aiplatform #rce #credentialtheft

3 min read

jeffrey

Oct 12

The paper trail is the deliverable in a compromise recovery

#incidentresponse #governance

3 min read

jeffrey

Oct 12

mailcow: 2 fingerprint matches against 67,430 title matches

#exposure #email

2 min read

jeffrey

Oct 12

RethinkDB at 1,419 Matches and Nothing on 28015: When the Driver Port Is the Right Question

#cybersecurity #database #security

3 min read

jeffrey

Oct 11

5,950 secure email gateways on the wire: the CVE-2026-76461 scoping problem

#zoomeye #exposure #cisco #emailsecurity

2 min read

jeffrey

Oct 11

CVE-2026-59782: a limited Zabbix administrator can read raw heap data through Duktape preprocessing

#zabbix #duktape #informationdisclosure #roleboundary

3 min read

jeffrey

Oct 11

974 CVEs in one Patch Tuesday: patch capacity is the constraint, not patch knowledge

#patchmanagement #microsoft #adobe #risktriage

3 min read

jeffrey

Oct 11

Beyond the Badge: Why Authenticated Langflow Users Still Escape the Sandbox

#security #langflow #sandboxescape #cve202697676

2 min read

jeffrey

Oct 11

3,888 Semaphore matches: the CI front end that holds repository credentials

#exposure #zoomeye

2 min read

jeffrey

Oct 11

Coder answered 15 fingerprints: development environments that hold repository and cloud credentials

#zoomeye #developerplatform #credentials

2 min read

jeffrey

Oct 10

29,265 internet-reachable HashiCorp Vault instances: the secret store on the open internet

#zoomeye #hashicorpvault #secretsmanagement #exposuremanagement

4 min read

jeffrey

Oct 10

CouchDB: 984,440 fingerprint matches against 228 titles, a case study in what a count does not mean

#exposure #database

1

2 min read

jeffrey

Oct 10

Citrix NetScaler ADC and Gateway: eight advisories, two under active exploitation (CVE-2026-88776)

#security #vulnerability #citrix #netscaler

4 min read

jeffrey

Oct 10

Exposure Context for CVE-2026-96358: What 436,276 Drupal Fingerprints Mean

#security #drupal #cve #vulnerability

2 min read

jeffrey

Oct 10

What full control of a reverse proxy console means after CVE-2026-107806

#security #vulnerability #nginx

1

3 min read

jeffrey

Oct 10

When the model supplies the parameter: CVE-2026-54547 and CVE-2026-54549 in the Meta Ads MCP server

#cve202654547 #cve202654549 #mcp #ssrf

1

3 min read

jeffrey

Oct 9

Splunk, SIEM platforms and the risk of an unauthenticated management API

#splunk #cve202676268 #patroni #siem

2 min read

jeffrey

Oct 9

Redis: 142 Product Matches Beside 4.9 Million Answers on Port 6379

#redis #exposure #datastores

3 min read

jeffrey

Oct 9

Protecting access tokens on developer workstations: the attack path that skips your CI controls

#secrets #endpoint #developertools

3 min read

jeffrey

Oct 9

40,136,786 Answers on Port 500 and 303,376 on Port 4500: Reading the IKE Surface

#attacksurface #ipsec #ike #vpn

3 min read

jeffrey

Oct 9

CVE-2026-105763 remediation runbook: patching Twenty CRM and rotating what leaked

#security #vulnerability #twentycrm

2 min read

jeffrey

Oct 9

Prioritizing CVE-2025-38680 in a Heterogeneous Fleet: A Risk-Ranking Approach

#linuxkernel #cve202538680 #riskmanagement #operations

2 min read

jeffrey

Oct 8

CVE-2026-75937 patch planning for Digi DAL OS fleets

#security #vulnerability #cve202675937 #digi

2 min read

jeffrey

Oct 8

ONLYOFFICE: 86,750 fingerprints beside 86,744 titles, a near-exact match

#zoomeye #measurement #documentserver

3 min read

jeffrey

Oct 8

Remediation Playbook for CVE-2026-86326: Managing an Industrial Flaw With No Firmware Fix

#remediation #moxamgate #hardening #ics

2 min read

jeffrey

Oct 8

CVE-2026-93698: insufficient validation in cPanel and WP Squared Multilang adminbin

#security #hosting #sharedhosting #cve

2 min read

jeffrey

Oct 8

From Observation to Evidence: What a Defensible Exposure Record Needs

#exposuremanagement #evidence #zoomeye #methodology

2 min read

jeffrey

Oct 8

73,811 reachable PRTG instances: what exposure data does and does not prove

#security #vulnerability #prtg #cve20264637

2 min read

jeffrey

Oct 7

DokuWiki at 3,980 Matches: A File-Based Wiki and the Backup It Leaves Behind

#cybersecurity #infrastructure #security #software

2

3

3 min read

jeffrey

Oct 7

Stirling PDF: 12,660 title matches and no application fingerprint

#exposure #documents

2 min read

jeffrey

Oct 7

CVE-2026-102795 in Apache Traffic Server: building a version inventory before you patch

#vulnerability #apachetrafficserver #accesscontrol

3 min read

jeffrey

Oct 7

ZooKeeper Information Disclosure: Existence Watches Leak Restricted Znode Names

#apachezookeeper #vulnerability #cve202659739 #distributedsystems

1 min read

jeffrey

Oct 7

CVE-2026-95675: Unauthenticated Root Command Injection in D-Link DAP-1360 Firmware

#security #vulnerability #dlink #commandinjection

2 min read

jeffrey

Oct 7

426,677 titles against 12,055 fingerprints: locating the Tenda gateways behind CVE-2026-104610

#security #zoomeye #iot #measurement

3 min read

jeffrey

Oct 6

1,316,357 GitLab Matches and 456,436 Title Matches: Sizing a Self-Managed Code Host

#security #exposuremanagement #supplychain

3 min read

jeffrey

Oct 6

Audiobookshelf: no app fingerprint and 13,963 title matches

#exposure #media

2 min read

jeffrey

Oct 6

1538 Jenkins, 169 Harbor and 32 SonarQube Results: The Build Chain Has a Public Address

#zoomeye #supplychain #cicd #jenkins

4 min read

jeffrey

Oct 6

Why Port 2375 Alone Overstates the Docker Problem

#docker #querydesign #exposure #zoomeye

2 min read

jeffrey

Oct 6

29,151,855 Matches on Port 5060: The Signalling Layer Nobody Maps

#zoomeye #sip #voip #attacksurface

2 min read

jeffrey

Oct 6

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: two edge RCE flaws attacked before a fix existed

#vulnerability #networksecurity #citrix #netscaler

2 min read

jeffrey

Oct 5

603,475 Grafana and 77,968 Kibana Instances: Measuring the Observability Layer's Public Surface

#security #attacksurface #observability #zoomeye

1

3 min read

jeffrey

Oct 5

CVE-2026-70585: A Use-After-Free in the Windows NFS Client Stack

#windows #nfs #kernel #memorysafety

3 min read

jeffrey

Oct 5

Zabbix at 4,861 Matches: A Monitoring Frontend With Real Credentials Behind It

#zoomeye #attacksurface #exposure

2 min read

jeffrey

Oct 5

Four libxml2 Flaws, One Release: Why 2.15.4 Matters Beyond the Library Itself

#security #library #memorysafety #xml

3 min read

jeffrey

Oct 5

What CVE-2026-84411 says about trusting perimeter assumptions on network devices

#security #network #architecture

2 min read

jeffrey

Oct 5

CVE-2026-15896: an unauthenticated path traversal in the Super Forms WordPress plugin

#security #wordpress #pathtraversal #cve

2 min read

jeffrey

Oct 4

Detection engineering for CVE-2026-100382: hunting the External Data web shell

#security #vulnerability #detectionengineering #webshell

3 min read

jeffrey

Oct 4

Cisco ISE CVE-2026-76460: When the Policy Engine Becomes the Weakest Link

#cisco #ise #authenticationbypass #kev

4 min read

jeffrey

Oct 4

Request Smuggling in the ASGI Stack: Starlette and LiteLLM

#cybersecurity #infosec #python #security

3 min read

jeffrey

Oct 4

A patch plan for CVE-2026-88773 that accounts for FIPS, NDcPP and hybrid deployments

#vulnerability #citrix #netscaler #patching

2 min read

jeffrey

Oct 4

Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for CVE-2026-85102

#security #vulnerability #checkpoint #vpn

3 min read

jeffrey

Oct 4

Detection and verification limits for CVE-2026-96364 on a live Drupal estate

#security #drupal #cve202696364 #contributedmodules

3 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with jeffrey?