jeffrey - DEV Community

jeffrey

Oct 26

AFFiNE: 2,423 Pages Carry the Name, One Body Match, and Zero Hosts on the Port Its Self-Hosting Guide Uses

#zoomeye #collaboration #measurement

4 min read

jeffrey

Oct 26

The Patch Race: Watching CVE-2026-102764 Move From Targeted Exploit to Mass Scanning

#zoomeye #threatintelligence #beyondtrust #patching

1

3 min read

jeffrey

Oct 26

When the WAF Host Is Compromised: CVE-2026-106931 and Evidence You Still Own

#vulnerability #incidentresponse #forensics #webapplicationfirewall

1

3 min read

jeffrey

Oct 26

Before You Patch: Auditing Which Junos Devices Are Actually Exposed to the October 2026 Critical Flaws

#cybersecurity #infosec #networking #security

1

4 min read

jeffrey

Oct 26

cAdvisor: 134,520 pages name it, 13,948 answer on 8080, and no fingerprint exists to check against

#security #exposure

1

4 min read

jeffrey

Oct 26

A shared cache decides whether an authenticated page is private, and `Vary` is the header that says so

#websecurity #http #caching

4 min read

jeffrey

Oct 25

msiexec repair mode resolves a binary path from a directory an installer wrote to

#windows #installer #privilegeescalation #configuration

3 min read

jeffrey

Oct 25

Aria Operations answers 3,440 and vRealize Operations answers 5,492: a rename that splits your own inventory

#zoomeye #attacksurface #virtualization #measurement

3 min read

jeffrey

Oct 25

Detecting and responding to BlockStrap exploitation on a Magento store

#magento #adobecommerce #rce #cve2026103849

4 min read

jeffrey

Oct 25

1,587,145 vs 1,341,669: What Two F5 Fingerprints Reveal About Exposure Counting

#zoomeye #measurement #exposure #methodology

3 min read

jeffrey

Oct 25

Detecting exploitation of the Plex timeline SSRF in server and network telemetry

#cybersecurity #infosec #security

2 min read

jeffrey

Oct 25

Two Engines, Two Numbers: Why 2,991 and 260 Describe Different Internets

#security #zoomeye #measurement #danfoss

4 min read

jeffrey

Oct 25

Snort 3 restarts and the inspection gap: what 13 Cisco fixes leave you to decide

#cisco #snort3 #intrusionprevention #cve202620043

4 min read

jeffrey

Oct 24

Two npm Bugs, One Lesson: Upgrading the Runtime Is Not Upgrading the Dependencies

#npm #jwt #pathtraversal #dependencymanagement

1

4 min read

jeffrey

Oct 24

492,113 MinIO Titles: Object Storage Is Where the Backups Live

#zoomeye #minio #objectstorage #backups

3 min read

jeffrey

Oct 24

Two CVEs, One Intrusion: Sorting Priorities When Scores Mislead

#fortinet #cve202447575 #cve202561624 #patchprioritisation

3 min read

jeffrey

Oct 24

A virtual machine escape is a workstation problem until CI shares the hypervisor

#security #vulnerabilitymanagement

4 min read

jeffrey

Oct 24

A Model Registry With an Outbound Dial: What CVE-2026-64849 Hands an Unauthenticated Caller

#mlflow #ssrf #cve202664849 #modelregistry

4 min read

jeffrey

Oct 24

Grafana Alloy's bearerTokenFile Read Any Local File and Sent It as an Authorization Header

#grafanaalloy #cve202675889 #localfileread #observability

3 min read

jeffrey

Oct 24

MoviePilot let the model decide whether a command was dangerous

#promptinjection #agents #selfhosted #rce

4 min read

jeffrey

Oct 24

TDengine: 3,216 title matches, no application fingerprint, and an empty port check

#zoomeye #timeseries #measurement

4 min read

jeffrey

Oct 23

Account hygiene is the real control for CVE-2026-96655

#vulnerability #cve202696655 #plex #ssrf

3 min read

jeffrey

Oct 23

Oracle's October CPU: six 10.0s, and why T3 is still answering on your perimeter

#security #cybersecurityarticle

4 min read

jeffrey

Oct 23

Struts dynamic method invocation is off by default, and that is not the same as gone

#security

3 min read

jeffrey

Oct 23

Counting What Is Reachable: BeyondTrust Remote Support After the Armory Castle Intrusion

#zoomeye #exposure #beyondtrust #assetinventory

4 min read

jeffrey

Oct 23

Arista VeloCloud Orchestrator CVE-2026-114625: a SQL injection that crosses the privilege boundary

#vulnerability #sdwan #arista #velocloud

4 min read

jeffrey

Oct 23

Node.js October 2026: A Brotli Out-of-Bounds Write and Three Ways to Fool Hostname Checks

#node #tls #memorysafety #patching

3 min read

jeffrey

Oct 23

Detecting exploitation attempts against CVE-2026-109618 without a public exploit

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

jeffrey

Oct 23

Exchange Server on the internet: reading exposure when the banner names the protocol, not the build

#security #zoomeyearticle

3 min read

jeffrey

Oct 22

Why an SD-WAN Orchestrator Is a Crown-Jewel Target: Lessons from CVE-2026-114625

#threatmodel #sdwan #networksecurity #arista

2 min read

jeffrey

Oct 22

Apache StreamPark: 167 Fingerprints, 170 Titles, and a Control Plane for Streaming Jobs

#zoomeye #streampark #flink #streaming

3 min read

jeffrey

Oct 22

CVE-2026-74041: where Wazuh Manager configuration becomes code

#vulnerability #wazuh #cve202674041 #securitymonitoring

2 min read

jeffrey

Oct 22

CVE-2026-107823: How a Crafted Username Becomes MariaDB Security Metadata

#cybersecurity #database #infosec #security

3 min read

jeffrey

Oct 22

Anatomy of CVE-2026-0313: How an OS Query Becomes a Remote Shell

#vulnerability #cortexxsoar #cve20260313

3 min read

jeffrey

Oct 22

Platform Boundaries in CVE-2026-0315: Why the Windows, Linux and Mobile Clients Stay Out of Scope

#scopemanagement #macos #globalprotect #changemanagement

4 min read

jeffrey

Oct 22

Detecting PAN-OS CVE-2026-0321 with the telemetry you already collect

#panos #cve20260321 #detectionengineering #monitoring

3 min read

jeffrey

Oct 22

CVE-2026-89111: SSRF in a Multi-Tenant SDK and the OAuth Credentials Behind It

#vulnerability #cloud #supplychain

3 min read

jeffrey

Oct 21

Two fixes, two audiences: explaining the OpenVPN advisories to management and to engineers

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

jeffrey

Oct 21

When the Product Name Is Not the Fingerprint

#ics #exposuremanagement

2 min read

jeffrey

Oct 21

Zone Design as a Mitigation for CVE-2026-102037

#security #juniper #junos #srx

2 min read

jeffrey

Oct 21

If GRE Must Stay: Compensating Architectures for CVE-2026-33792

#networkdesign #gre #juniper #cve202633792

3 min read

jeffrey

Oct 21

Nine CVEs, Nine Zeros: What Empty vul.cve Results Actually Mean

#zoomeye #measurement #vulnerabilityintelligence

3 min read

jeffrey

Oct 21

8.16 Million WordPress Sites and 5.16 Million in the US: Reading a CMS Baseline

#zoomeye #websecurity #cms

1

3 min read

jeffrey

Oct 21

38,988 FortiGate and 22,586 Palo Alto Assets: Using Perimeter Counts to Challenge Firewall Inventory

#zoomeye #networksecurity #inventory

3 min read

jeffrey

Oct 20

1.2 Million Ivanti Assets and 3 Under the Old Brand: Naming Drift in Exposure Queries

#zoomeye #measurement #vendortracking

3 min read

jeffrey

Oct 20

CVE-2026-70024 in Review: What Would Change the Assessment

#cybersecurity #infosec #microsoft #security

3 min read

jeffrey

Oct 20

The 24.3.1 line: upgrade debt behind CVE-2026-102764

#vulnerability #beyondtrust #cve2026102764 #remotesupport

3 min read

jeffrey

Oct 20

SBOM Minimum Elements in Practice: What Breaks After the First Release

#sbom #supplychain #softwarecompositionanalysis

1

3 min read

jeffrey

Oct 19

Why CWE-294 Replay Flaws Keep Appearing in Enterprise Messaging

#microsoftexchange #vulnerability #cve202662911 #security

3 min read

jeffrey

Oct 19

Pgpool-II client certificate validation bypass: what CVE-2026-92868 changes

#security #postgres #pgpool #cve

4 min read

jeffrey

Oct 18

3.9 million PostgreSQL services and the pg_hba line that decides everything

#exposure #postgres #authentication

3 min read

jeffrey

Oct 18

CVE-2026-96357 and the Audit Trail: Documenting a Shared-Impact Advisory

#security #drupal #cve #vulnerability

2 min read

jeffrey

Oct 18

From Service Account to Root: What CVE-2026-102490 Actually Buys an Attacker

#vulnerability #zammad #cve2026102490 #helpdesk

2 min read

jeffrey

Oct 17

code-server at 26,014 Fingerprints and 2,495 Web Titles: Measuring a Browser That Runs Your Shell

#zoomeye #exposure #developmentenvironments

4 min read

jeffrey

Oct 17

Reading the CVE-2026-76267 advisory as a version matrix

#splunk #cve202676267 #loginjection #cwe117

3 min read

jeffrey

Oct 17

CVE-2026-89068: a missing authentication step in the MOVEit Transfer LDAP module

#security #vulnerability #moveit #filetransfer

3 min read

jeffrey

Oct 17

Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability

#cybersecurity #infosec #security

2 min read

jeffrey

Oct 17

A Passed options Dict: How PyJWT's decode() Silently Rewrote a Caller's Configuration

#bug #python #security

3 min read

jeffrey

Oct 16

CVE-2026-87902 Under Active Exploitation: 64 Honeypot Attempts and a GitHub-Hosted Webshell

#security #wordpress #vulnerability #rce

3 min read

jeffrey

Oct 16

Prioritizing the six DolphinScheduler CVEs: severity, exposure and patch order

#apachedolphinscheduler #authorizationbypass #kubernetes #cve202671895

2 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with jeffrey?