jeffrey - DEV Community

jeffrey

Oct 6

1,316,357 GitLab Matches and 456,436 Title Matches: Sizing a Self-Managed Code Host

#security #exposuremanagement #supplychain

3 min read

jeffrey

Oct 6

Audiobookshelf: no app fingerprint and 13,963 title matches

#exposure #media

2 min read

jeffrey

Oct 6

1538 Jenkins, 169 Harbor and 32 SonarQube Results: The Build Chain Has a Public Address

#zoomeye #supplychain #cicd #jenkins

4 min read

jeffrey

Oct 6

Why Port 2375 Alone Overstates the Docker Problem

#docker #querydesign #exposure #zoomeye

2 min read

jeffrey

Oct 6

29,151,855 Matches on Port 5060: The Signalling Layer Nobody Maps

#zoomeye #sip #voip #attacksurface

2 min read

jeffrey

Oct 6

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: two edge RCE flaws attacked before a fix existed

#vulnerability #networksecurity #citrix #netscaler

2 min read

jeffrey

Oct 5

603,475 Grafana and 77,968 Kibana Instances: Measuring the Observability Layer's Public Surface

#security #attacksurface #observability #zoomeye

1

3 min read

jeffrey

Oct 5

CVE-2026-70585: A Use-After-Free in the Windows NFS Client Stack

#windows #nfs #kernel #memorysafety

3 min read

jeffrey

Oct 5

Zabbix at 4,861 Matches: A Monitoring Frontend With Real Credentials Behind It

#zoomeye #attacksurface #exposure

2 min read

jeffrey

Oct 5

Four libxml2 Flaws, One Release: Why 2.15.4 Matters Beyond the Library Itself

#security #library #memorysafety #xml

3 min read

jeffrey

Oct 5

What CVE-2026-84411 says about trusting perimeter assumptions on network devices

#security #network #architecture

2 min read

jeffrey

Oct 5

CVE-2026-15896: an unauthenticated path traversal in the Super Forms WordPress plugin

#security #wordpress #pathtraversal #cve

2 min read

jeffrey

Oct 4

Detection engineering for CVE-2026-100382: hunting the External Data web shell

#security #vulnerability #detectionengineering #webshell

3 min read

jeffrey

Oct 4

Cisco ISE CVE-2026-76460: When the Policy Engine Becomes the Weakest Link

#cisco #ise #authenticationbypass #kev

4 min read

jeffrey

Oct 4

Request Smuggling in the ASGI Stack: Starlette and LiteLLM

#cybersecurity #infosec #python #security

3 min read

jeffrey

Oct 4

A patch plan for CVE-2026-88773 that accounts for FIPS, NDcPP and hybrid deployments

#vulnerability #citrix #netscaler #patching

2 min read

jeffrey

Oct 4

Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for CVE-2026-85102

#security #vulnerability #checkpoint #vpn

3 min read

jeffrey

Oct 4

Detection and verification limits for CVE-2026-96364 on a live Drupal estate

#security #drupal #cve202696364 #contributedmodules

3 min read

jeffrey

Oct 3

Redis RCE identifiers in August 2026: a use-after-free and a fix that left work behind

#cybersecurity #database #infosec #security

3 min read

jeffrey

Oct 3

WordPress CVE-2026-87902: an Unauthenticated Path Traversal That Escalates into Remote Code Execution

#vulnerability #wordpress #pathtraversal #rce

3 min read

jeffrey

Oct 3

Patch Matrix for CVE-2026-86350: Which Apache Tomcat Builds Need 11.0.26, 10.1.60 or 9.0.122

#security #vulnerability #apachetomcat #cve202686350

2 min read

jeffrey

Oct 3

What the WordPress 4.7.0 to 7.1.1 file inclusion bug teaches about patch windows

#wordpress #patchmanagement #cve202687902 #websecurity

3 min read

jeffrey

Oct 3

The Five-Month Gap: Zimbra Exposure Between Zero-Day Exploitation and Public Disclosure

#zimbra #cve202566376 #exposuremanagement #zoomeye

3 min read

jeffrey

Oct 3

OpenMediaVault: 123,886 title matches beside four fingerprints

#zoomeye #storage #internetmeasurement #exposure

3 min read

jeffrey

Oct 2

Rundeck on 4,729 hosts: a job scheduler that holds the credentials to run them

#security #zoomeye #exposure #automation

3 min read

jeffrey

Oct 2

Why 14 BIND CVEs Landed at Once: Reading the September 2026 DNS Advisory

#dns #iscbind #vulnerability

3 min read

jeffrey

Oct 2

What Click2Shell Teaches About Reporting a Parser Discrepancy

#wordpress #click2shell #zoomeye #rce

2 min read

jeffrey

Oct 2

Shared and Managed Fortinet Estates: Whose Gateway Is It When Credentials Leak?

#security #fortinet #credentialexposure #zoomeye

6 min read

jeffrey

Oct 2

CVE-2026-96362: What the September 2026 Drupal Contributed Module Batch Means for Site Operators

#security #drupal #vulnerability #cve202696362

1

3 min read

jeffrey

Oct 2

1,160,264 Mosquitto fingerprints: the MQTT broker that ends up on the public internet

#mqtt #mosquitto #iot #exposure

2 min read

jeffrey

Oct 1

F5 BIG-IP management interfaces: 1.58 million fingerprint matches and 55,390 on 443

#loadbalancer #f5 #managementplane

1

2 min read

jeffrey

Oct 1

LXD Backup Import as an Attack Surface: CVE-2026-87799 and the btrfs Restore Path

#security #vulnerability #lxd #cve202687799

1

2 min read

jeffrey

Oct 1

Internet-Exposed Drupal Sites and the September 2026 Extension Advisory

#security #drupal #vulnerability

3 min read

jeffrey

Oct 1

Policy Drift on Application Delivery Controllers: The Setting Behind CVE-2026-88774

#security #citrix #netscaler #cve202688774

3 min read

jeffrey

Oct 1

1,890,595 MongoDB Service Matches: The Default-Configuration Problem at Internet Scale

#zoomeye #mongodb #exposure

1

2 min read

jeffrey

Oct 1

Browser extensions are an enterprise control problem, not a user hygiene problem

#browsersecurity #extensionmanagement #enterprisepolicy #supplychain

1

4 min read

jeffrey

Sep 30

DMARC aggregate reports as infrastructure change detection

#emailsecurity #dmarc #operations

1

2 min read

jeffrey

Sep 30

Joomla CVE-2026-48907 and CVE-2026-48908: Unauthenticated Upload in Two Extensions

#joomla #remotecodeexecution #cms #webshell

2 min read

jeffrey

Sep 30

Mapping CVE-2026-96361 to the Drupal Projects You Actually Run

#security #drupal #cve202696361 #inventory

1

2 min read

jeffrey

Sep 30

From Facebook Ad to Phone Bill: How the Android Toll Fraud Campaign Reached Victims

#android #tollfraud #malvertising #zoomeye

6 min read

jeffrey

Sep 30

CVE-2026-9586: One XML Field in Sangoma Switchvox Reaches the PostgreSQL Backend

#security #vulnerability #exploitedinthewild

3 min read

jeffrey

Sep 30

Windows Update Stack and ALPC: Two Exploited Local Privilege Escalation Flaws in the September 2026 Patch Tuesday

#patchmanagement #privilegeescalation #windows #exploitedinthewild

4 min read

jeffrey

Sep 29

15,307,587 on Port 5985 and 1,019,437 on Port 5986: Two Windows Remote Management Faces

#zoomeye #windows #winrm #remotemanagement

2 min read

jeffrey

Sep 29

Dagster: 1,712 Title Matches and a Zero Fingerprint

#zoomeye #dagster #dataorchestration #exposure

3 min read

jeffrey

Sep 29

OpenCTI Case Queue Integrity: Reading CVE-2026-76822 as a Data Provenance Problem

#cybersecurity #graphql #infosec #security

2 min read

jeffrey

Sep 29

Temporal at 1,992 Title Matches and 200 Application Fingerprints

#zoomeye #temporal #workfloworchestration #exposure

1

3 min read

jeffrey

Sep 29

2590 MongoDB, 1469 Memcached and 387 CouchDB Results: Three Data Stores With Three Default Postures

#zoomeye #datastores #mongodb #memcached

1

4 min read

jeffrey

Sep 29

Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route

#vulnerabilitymanagement #kestra #commandinjection #cve202649869

1

4 min read

jeffrey

Sep 28

HDFS Web Interfaces: 24,511 Fingerprint Matches and 1,602,200 Answers on Port 9870

#zoomeye #exposuremeasurement #hadoop #dataplatforms

1

3 min read

jeffrey

Sep 28

CVE-2026-89078: What the Advisory Says and What It Does Not

#vulnerability #gitlab #remotecodeexecution #cicd

2 min read

jeffrey

Sep 28

2,857,655 RouterOS Matches and 830,366 With SSH: Turning an Edge Device Baseline Into a Decision

#security #exposuremanagement #networksecurity

2

3 min read

jeffrey

Sep 28

CVE-2026-76442 and the Cost of an Unbounded Number in Cisco Secure Email Gateway

#security #vulnerability #cisco #cve202676442

1

3 min read

jeffrey

Sep 28

Public Exploit Code and No Patch: The D-Link DIR-822A L2TP Flaw in Context

#security #vulnerability #router #dlink

1

2 min read

jeffrey

Sep 28

Detecting and monitoring around CVE-2026-96360

#drupal #webform #cve202696360 #xss

1

2 min read

jeffrey

Sep 27

Replacing standing administrative access with brokered sessions

#privilegedaccess #zerotrust #administration

2 min read

jeffrey

Sep 27

Database Backups Are an Identity Problem Before They Are a Storage Problem

#backup #ransomware #identity

4 min read

jeffrey

Sep 27

Chosen Brick and HEAVYGRAM: Iranian Spyware That Reports Through Telegram

#iran #spyware #windows #threatintelligence

2 min read

jeffrey

Sep 27

CVE-2026-76441: Improper Access Control in Cisco Secure Email Gateway Exposes Restricted Functions

#security #vulnerability #cisco #accesscontrol

1

4 min read

jeffrey

Sep 27

Exploitation Conditions in CVE-2026-75682: What a Low-Privileged Account Buys an Attacker

#adobeconnect #cve202675682 #sqlinjection #detectionengineering

1

3 min read

jeffrey

Sep 26

CVE-2026-53266 Triage Guide: What the CISA KEV Listing Changes for Linux Kernel Patching

#security #linux #kernel #cve202653266

1

3 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with jeffrey?