StarkMan - DEV Community

StarkMan

Oct 26

SiteGuard Patch Matrix for CVE-2026-106931: Four Platforms, Four Decisions

#vulnerability #patchmanagement #webapplicationfirewall #assetinventory

3 min read

StarkMan

Oct 26

Nine CVSS 9.8 Junos Flaws in One Bulletin: A Practical Patch-Ordering Decision for Network Teams

#cybersecurity #infosec #networking #security

4 min read

StarkMan

Oct 26

Hawtio: 1,958 loose titles, 1,386 exact titles, and 12 of them on the port that matters

#security #exposure

4 min read

StarkMan

Oct 26

Hubble answers 1,103 times by title, five times as an application, and 37,258 times in page bodies

#kubernetes #observability #zoomeye

4 min read

StarkMan

Oct 25

Managed DNS providers inherit a new supply-chain risk from the NSD stack overwrite flaws

#dns #nsd #vulnerability

3 min read

StarkMan

Oct 25

CVE-2026-70571: a stack overflow in Exchange Server, and the mail perimeter that keeps it reachable

#vulnerability #microsoft #exchange #emailsecurity

3 min read

StarkMan

Oct 25

Counting Magento exposure for BlockStrap without overstating it

#magento #adobecommerce #rce #cve2026103849

4 min read

StarkMan

Oct 25

CVE-2026-0322: Why a Firewall Management Interface Keeps Appearing in Exploitation Reports

#vulnerability #networksecurity #paloalto

3 min read

StarkMan

Oct 25

From preference string to executed library: the Plex TranscoderH264Options write

#cybersecurity #infosec #security

2 min read

StarkMan

Oct 25

What 260 Danfoss Headers Reveal About Refrigeration Exposure

#security #zoomeye #danfoss #exposure

4 min read

StarkMan

Oct 25

GitLab's seven-branch backport: what CVE-2026-110264 does to upgrade sequencing

#gitlab #cve2026110264 #patchmanagement #onigmo

4 min read

StarkMan

Oct 25

4,802 Firepower fingerprints, 985 IOS XE and zero Cyber Vision: reading three Snort 3 numbers together

#zoomeye #snort3 #cisco #exposuremeasurement

4 min read

StarkMan

Oct 24

Half-Initialized Workers: Verifying the PHP2Shell Fix When the Failure Path Is the Vulnerability

#php #memorycorruption #patchverification #rce

4 min read

StarkMan

Oct 24

76,015 Keycloak Titles and 40,080 Keycloak Fingerprints Describe Different Assets

#zoomeye #keycloak #identityprovider #methodology

3 min read

StarkMan

Oct 24

If You Manage Someone Else's Firewalls, You Manage Their Attack Surface Too

#fortinet #mssp #multitenant #zoomeye

3 min read

StarkMan

Oct 24

Four SQL injection bugs in the appliance that keeps your firewall logs

#security #vulnerabilitymanagement

4 min read

StarkMan

Oct 24

Hadoop's management planes outnumber its data nodes in public scan data

#security #attacksurfacemanagement

4 min read

StarkMan

Oct 24

A Notebook Server Is an Execution Service: What 15,000 Exposed Jupyter Instances Actually Offer

#jupyter #notebooksecurity #cve202435178 #ntlm

3 min read

StarkMan

Oct 24

One TLS setting turned off Basic auth for every HAProxy Data Plane API listener

#authentication #loadbalancer #managementapi

4 min read

StarkMan

Oct 24

xxl-job: 3,350 application matches against 148 page titles

#zoomeye #scheduler #managementplane

4 min read

StarkMan

Oct 23

SSRF on a media server: the cloud instance case

#vulnerability #cve202696655 #plex #ssrf

3 min read

StarkMan

Oct 23

Ninety-four minutes: how a GitHub release page became a credential thief

#security #cybersecurityarticle

4 min read

StarkMan

Oct 23

Strapi's admin filter leaked password hashes, and the fix is a query discipline problem

#security

1

3 min read

StarkMan

Oct 23

Open WebUI: 92,252 fingerprints, 92,051 titles, and 7,087 hosts that kept the default port

#security

4 min read

StarkMan

Oct 23

From Edge Appliance to Downstream Sessions: Mapping BeyondTrust Jump Item Exposure

#zoomeye #lateralmovement #beyondtrust #attacksurface

3 min read

StarkMan

Oct 23

VeloCloud Orchestrator CVE-2026-114625: role design, host impact and the limits of the advisory

#vulnerability #sdwan #arista #velocloud

3 min read

StarkMan

Oct 23

Memory limits and attack windows: a defender's reading of CVE-2026-109618

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

StarkMan

Oct 23

Five NGINX CVEs are conditional. Measure the conditions, not just the version

#security #zoomeyearticle

4 min read

StarkMan

Oct 22

How Exposed Is VeloCloud Orchestrator? Reading ZoomEye Evidence Honestly

#zoomeye #exposureanalysis #attacksurface #velocloud

2 min read

StarkMan

Oct 22

Shopware: 2,667 title matches, 1,094 on 443 and 80 certificate hits

#zoomeye #ecommerce #administration

3 min read

StarkMan

Oct 22

408,609 Proxmox Fingerprints and 6 Hosts on 8006: When a Query Result Describes the Scanner

#zoomeye #proxmox #hypervisor #methodology

3 min read

StarkMan

Oct 22

MariaDB's FILE Privilege Is a Filesystem Primitive: CVE-2026-107814 and CVE-2026-107818

#cybersecurity #database #infosec #security

3 min read

StarkMan

Oct 22

CVE-2026-0313 and the Blast Radius of a Content Pack: Rethinking XSOAR Trust Boundaries

#vulnerability #cortexxsoar #cve20260313

3 min read

StarkMan

Oct 22

Reading the Record: What CERTFR-2026-AVI-1326 Says About CVE-2026-0315 and What It Leaves Out

#advisoryanalysis #riskcommunication #cve20260315 #certfr

3 min read

StarkMan

Oct 22

PAN-OS CVE-2026-0321 and the cost of a mitigation that needs decryption

#panos #cve20260321 #ssldecryption #riskmanagement

3 min read

StarkMan

Oct 22

CVE-2026-110447: Why Disabling the Nextcloud Collabora App Is Not a Fix

#vulnerability #collaboration #nextcloud

3 min read

StarkMan

Oct 21

31.3 Million SSH Services and 16.5 Million RDP Endpoints: Building a Remote-Access Inventory That Survives an Incident

#zoomeye #remoteaccess #inventory

3 min read

StarkMan

Oct 21

3.2 Million Redis and 1.9 Million MongoDB Services: The Steady Background of Exposed Data Stores

#exposure #datasecurity #configuration

3 min read

StarkMan

Oct 21

OpenVPN 2.7.8 release notes for defenders: what changed and what to re-test

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

StarkMan

Oct 21

No Workaround Published: Planning Around CVE-2026-33792 When You Cannot Patch This Week

#patchmanagement #juniper #srx #cve202633792

3 min read

StarkMan

Oct 21

What Network Monitoring Can and Cannot Show About CVE-2026-102037

#security #juniper #junos #srx

2 min read

StarkMan

Oct 21

How an Attack Reaches a Fridge Without Touching the Internet

#ics #exposuremanagement

2 min read

StarkMan

Oct 21

Jenkins at 3 and Kubernetes at 1: When a Small Count Means a Missing Signature

#zoomeye #measurement #devsecops

3 min read

StarkMan

Oct 20

Hardening baselines that reduce CVE-2026-96951 exposure without waiting for the patch

#vulnerability #windows #cve202696951

3 min read

StarkMan

Oct 20

CVE-2026-70024 for the Defender: Detection, Triage and Response on IIS

#cybersecurity #infosec #microsoft #security

3 min read

StarkMan

Oct 20

Apache Solr exposure: 810,266 fingerprint matches against 73,029 title matches

#search #solr #exposuremanagement

2 min read

StarkMan

Oct 20

Building a Repeatable Public-Sector Exposure Baseline

#security #zoomeye #exposuremanagement #ddos

3 min read

StarkMan

Oct 19

Local Administrator Password Management: Why LAPS Alone Is Not Tier Separation

#activedirectory #privilegedaccess #laps

3 min read

StarkMan

Oct 19

Hunting in the mail path: five hypotheses for CVE-2026-76519 exposure

#cisco #vulnerability #emailsecurity #cve202676519

3 min read

StarkMan

Oct 19

Crypto Agility Starts With an Inventory, Not a Library

#postquantum #cryptography #inventory

1

2 min read

StarkMan

Oct 19

Preparing the evidence trail for a Fireware OS CVE-2026-18145 incident

#watchguard #logging #cve202618145 #incidentresponse

2 min read

StarkMan

Oct 18

OpenCart Storefronts: 19,439 Application Matches Against 2,911 Titles

#zoomeye #exposure

2 min read

StarkMan

Oct 18

Four Critical NX-OS CVEs at Once: How to Order the Work

#cisco #nxos #cisconexus #networksecurity

2 min read

StarkMan

Oct 18

Two Command Execution Paths, Two Different Problems: Comparing CVE-2026-102369 and CVE-2026-102294

#tplink #vulnerability #securityadvisory

3 min read

StarkMan

Oct 18

DPoP makes a token sender-constrained, which changes what a stolen token is worth

#oauth #tokensecurity #dpop #identity

3 min read

StarkMan

Oct 18

Golden ticket detection: the forged TGT that never touches the krbtgt password

#authentication #cybersecurity #infosec #security

3 min read

StarkMan

Oct 18

Assessing Business Risk from CVE-2026-89071 in Regulated File Transfers

#cve202689071 #moveittransfer #ldapinjection #vulnerabilitymanagement

2 min read

StarkMan

Oct 17

From Query Access to Root of the Database: Inside the MarkLogic Privilege Escalation Chain

#security #vulnerability #marklogic #cve202685947

2 min read

StarkMan

Oct 17

CVE-2026-81963: A Link Following Flaw in the Windows Update Stack Reaches SYSTEM

#security #vulnerability #exploitedinthewild

3 min read

StarkMan

Oct 17

CVE-2026-10520: Command Injection in Ivanti Sentry and the Edge Appliance Pattern

#edgesecurity #commandinjection #ivanti #patchmanagement

3 min read

One Year Club

1 Week Community Wellness Streak

Writing Debut

Want to connect with StarkMan?