Hook0 service tokens need attenuation before they leave the backend Post date November 11, 2026 Post author By kozhevniko Post categories In hook0, servicetokens, webhooks, zoomeye
Registry tokens make repository scope the real authorization boundary Post date November 10, 2026 Post author By kozhevniko Post categories In authorization, containers, registry
Registry tokens make repository scope the real authorization boundary Post date November 10, 2026 Post author By kozhevniko Post categories In authorization, containers, registry
Traefik Dashboard Exposure: Routing Visibility Can Become Control-Plane Visibility Post date November 8, 2026 Post author By kozhevniko Post categories In security, zoomeye
AWX OAuth Scopes and RBAC Both Decide What Automation Can Do Post date November 6, 2026 Post author By kozhevniko Post categories In awx, oauth, rbac
Dell OpenManage Enterprise CVE-2026-91909 makes argument parsing the control plane Post date November 5, 2026 Post author By kozhevniko Post categories In autonomous, cybersecurity, vulnerability, zoomeye
Zimbra Webmail Exposure: Separate Reachable Login Pages From Affected Servers Post date November 3, 2026 Post author By kozhevniko Post categories In assetinventory, security, zoomeye
DANE TLSA policy only works when the client enforces DNSSEC Post date November 1, 2026 Post author By kozhevniko Post categories In cybersecurity, securityengineering
Icinga Web Exposure: Monitoring Data and Command Authority Post date October 29, 2026 Post author By kozhevniko Post categories In icinga, monitoring, zoomeye
Icinga Web Exposure: Monitoring Data and Command Authority Post date October 29, 2026 Post author By kozhevniko Post categories In icinga, monitoring, zoomeye
Icinga Web Exposure: Monitoring Data and Command Authority Post date October 29, 2026 Post author By kozhevniko Post categories In icinga, monitoring, zoomeye
Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances Post date October 26, 2026 Post author By kozhevniko Post categories In attacksurface, beyondtrust, vulnerabilitymanagement, zoomeye
Argo CD: 62,236 fingerprints, but only 497 still answer on its documented port 8080 Post date October 25, 2026 Post author By kozhevniko Post categories In exposuremeasurement, gitops, kubernetes, zoomeye
Authelia returns 11,813 titles on a port that is not supposed to be public Post date October 23, 2026 Post author By kozhevniko Post categories In security
CVE-2026-70024 and the Economics of an Emergency Patch Post date October 20, 2026 Post author By kozhevniko Post categories In cybersecurity, infosec, security
CVE-2026-93616 and the Risk of Exposing Check Point Management Interfaces Post date October 15, 2026 Post author By kozhevniko Post categories In cybersecurity, infosec, security
Build Infrastructure Is a Trust Anchor: Threat Modelling Exposed CI/CD and Artifact Repositories Post date October 12, 2026 Post author By kozhevniko Post categories In artifactrepository, cicd, supplychain, threatmodelling
ServiceNow CVE-2026-18885, CVE-2026-18886 and CVE-2026-74820: a CVSS 10.0 platform flaw under active exploitation Post date October 11, 2026 Post author By kozhevniko Post categories In exploitedinthewild, itsm, security, vulnerability
Apache Zeppelin on the Internet: 25,617 Fingerprint Matches and a Notebook With Cluster Credentials Post date October 6, 2026 Post author By kozhevniko Post categories In exposuremanagement, security, zoomeye
Triage Order After a Credential-Exposure Advisory: What to Fix First on Fortinet Edge Devices Post date October 4, 2026 Post author By kozhevniko Post categories In credentialexposure, fortinet, security, zoomeye
MFP Web Management Interfaces and CVE-2026-78249: Why Reachability Decides the Risk Post date October 3, 2026 Post author By kozhevniko Post categories In mfp, pathtraversal, printing, vulnerability
CVE-2026-63292: A Configuration-Dependent Stack Overflow in Apache httpd 2.4 Post date October 2, 2026 Post author By kozhevniko Post categories In apache, httpd, modvhostalias, vulnerability
OpenCTI Readers Can Open Cases: Inside CVE-2026-76822’s Missing Capability Check Post date September 27, 2026 Post author By kozhevniko Post categories In cybersecurity, infosec, security
Measuring Internet-Exposed Email Security Gateways With ZoomEye Post date September 27, 2026 Post author By kozhevniko Post categories In emailsecurity, exposure, security, zoomeye
What the September 2026 IBM advisory means for teams running Langflow OSS in production Post date September 26, 2026 Post author By kozhevniko Post categories In ibm, langflow, remotecodeexecution, vulnerability
Apache Tomcat 11.0.26 Closes an HTTP/2 Header Mix-Up Regression: CVE-2026-86350 Post date September 26, 2026 Post author By kozhevniko Post categories In apachetomcat, cve202686350, security, vulnerability
Apache Tomcat 11.0.26 Closes an HTTP/2 Header Mix-Up Regression: CVE-2026-86350 Post date September 26, 2026 Post author By kozhevniko Post categories In apachetomcat, cve202686350, security, vulnerability
Home Assistant at Internet Scale: 2.7 Million Fingerprint Matches and the Automation Control Plane Post date September 25, 2026 Post author By kozhevniko Post categories In exposure, homeassistant, homeautomation, IoT
From Scanning to Self-Assessment: Using ZoomEye to Inventory Your Own Attack Surface Post date September 23, 2026 Post author By kozhevniko Post categories In attacksurface, exposuremanagement, zoomeye
314 IPP and 44897 Raw Print Results: The Office Device Layer on the Open Internet Post date September 22, 2026 Post author By kozhevniko Post categories In exposuremeasurement, IoT, printing, zoomeye
ZcopyReaper: A Local Privilege Escalation in the Linux Kernel RDS Path Post date September 20, 2026 Post author By kozhevniko Post categories In cybersecurity, linuxkernel, privilegeescalation
161,764 Assets on Port 102: Sizing the Industrial Control Surface That AA26-231A Described Post date September 17, 2026 Post author By kozhevniko Post categories In exposure, ics, security, zoomeye
Sciencx
Sciencx