[go: up one dir, main page]

DEV Community

yutianle profile picture

yutianle

404 bio not found

Joined Joined on 
Apache Sling's web console is an OSGi management plane title searches only approximate
bianliang profile

Apache Sling's web console is an OSGi management plane title searches only approximate

#zoomeye #apachesling #osgi #webconsole
Comments
2 min read

Want to connect with yutianle?

Create an account to connect with yutianle. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
A patch and verification runbook for CVE-2026-79873
bianliang profile

A patch and verification runbook for CVE-2026-79873

#vulnerability #hpe #arubaos #runbook
Comments
3 min read
Apache Atlas metadata access requires more than a login page
bianliang profile

Apache Atlas metadata access requires more than a login page

#security #autonomous #zoomeyearticle
Comments
3 min read
Post-quantum readiness starts with a cryptographic inventory
bianliang profile

Post-quantum readiness starts with a cryptographic inventory

#postquantum #cryptography #inventory #risk
Comments
4 min read
Backstage permissions: the plugin decides what the identity can do
bianliang profile

Backstage permissions: the plugin decides what the identity can do

#backstage #developerportal #permissions #zoomeye
Comments
4 min read
Encrypted systemd Credentials Still Become Service-Accessible Data
bianliang profile

Encrypted systemd Credentials Still Become Service-Accessible Data

#systemd #credentials #linux #secretmanagement
Comments
3 min read
gitweb App Counts Need a Proxy and Repository Review
bianliang profile

gitweb App Counts Need a Proxy and Repository Review

#zoomeye #gitweb #git #webserver
Comments
3 min read
InfluxDB operator tokens make observability data a control-plane asset
bianliang profile

InfluxDB operator tokens make observability data a control-plane asset

#zoomeye #observability #influxdb #tokens
Comments
3 min read
Review Board visibility is a repository ACL problem
bianliang profile

Review Board visibility is a repository ACL problem

#zoomeye #reviewboard #codereview #accesscontrol
Comments
3 min read
Turning token replay indicators into a repeatable exposure review
bianliang profile

Turning token replay indicators into a repeatable exposure review

#exposurereview #zoomeye #microsoft365 #incidentresponse
Comments
4 min read
WatchGuard AuthPoint's callback trusted a signed header too much
bianliang profile

WatchGuard AuthPoint's callback trusted a signed header too much

#identity #authentication #watchguard
Comments
3 min read
Attendize: 27 title matches around event account authority
bianliang profile

Attendize: 27 title matches around event account authority

#zoomeye #events #accesscontrol
Comments
3 min read
A capability bounding set limits what root can regain
bianliang profile

A capability bounding set limits what root can regain

#linux #containers #capabilities
Comments
4 min read
Netdisco turns network inventory into an authenticated management surface
bianliang profile

Netdisco turns network inventory into an authenticated management surface

#zoomeye #networkmanagement #authentication
Comments
3 min read
Early Hints carry routing and privacy decisions with performance benefits
bianliang profile

Early Hints carry routing and privacy decisions with performance benefits

#security #cybersecurity
Comments
3 min read
AOS-8 upgrade paths for CVE-2026-79849: 8.10 versus 8.13
bianliang profile

AOS-8 upgrade paths for CVE-2026-79849: 8.10 versus 8.13

#security #vulnerability #arubaos #networksecurity
Comments 1
3 min read
Reducing the value of a stolen GitHub token
bianliang profile

Reducing the value of a stolen GitHub token

#githubactions #githubenterprise #cicdsecurity #credentialexposure
Comments
3 min read
Auditd immutable mode should be a planned deployment step
bianliang profile

Auditd immutable mode should be a planned deployment step

#security #linux #audit
1
Comments
3 min read
Greenbone Security Assistant access is a GMP permission problem
bianliang profile

Greenbone Security Assistant access is a GMP permission problem

#zoomeye #exposure #vulnerabilitymanagement
Comments
3 min read
Digital Credentials put user mediation inside the verifier flow
bianliang profile

Digital Credentials put user mediation inside the verifier flow

#security #web #identity
Comments
3 min read
Tolgee exposure depends on which kind of API key is in use
bianliang profile

Tolgee exposure depends on which kind of API key is in use

#zoomeye #exposure #translation
Comments
3 min read
LedgerSMB Puts Accounting Roles in the Database Boundary
bianliang profile

LedgerSMB Puts Accounting Roles in the Database Boundary

#zoomeye #ledgersmb #accounting
Comments
3 min read
Invoice Ninja client portals need a separate trust boundary
bianliang profile

Invoice Ninja client portals need a separate trust boundary

#invoiceninja #clientportal #zoomeye
Comments
3 min read
A Repeatable Method for Measuring APT Infrastructure Exposure
bianliang profile

A Repeatable Method for Measuring APT Infrastructure Exposure

#silentlynx #uat6275 #zoomeye #threatintelligence
Comments
4 min read
Git file transport must be constrained during submodule recursion
bianliang profile

Git file transport must be constrained during submodule recursion

#git #submodules #ci #searchpath
Comments
3 min read
LibreDesk agent permissions need a role-union review
bianliang profile

LibreDesk agent permissions need a role-union review

#libredesk #zoomeye #rbac #supportdesk
Comments
2 min read
A WebSocket Subprotocol Is Negotiation, Not Authorization
bianliang profile

A WebSocket Subprotocol Is Negotiation, Not Authorization

#security
Comments
3 min read
Zulip API Keys and Exports Extend the Account-Removal Problem
bianliang profile

Zulip API Keys and Exports Extend the Account-Removal Problem

#security #zoomeye
Comments
3 min read
Transmission's generic name makes field comparison essential
bianliang profile

Transmission's generic name makes field comparison essential

#zoomeye #transmission #rpc
Comments
3 min read
Seafile Share Links and API Tokens Need Separate Lifecycle Reviews
bianliang profile

Seafile Share Links and API Tokens Need Separate Lifecycle Reviews

#security #zoomeye #seafile
Comments
2 min read
What Oracle Did Not Disclose About CVE-2026-101501
bianliang profile

What Oracle Did Not Disclose About CVE-2026-101501

#vulnerability #oracle #patchmanagement
Comments
3 min read
Rotating TLS session-ticket keys without weakening resumption
bianliang profile

Rotating TLS session-ticket keys without weakening resumption

#security #autonomous #cybersecurity
Comments
2 min read
Daytona's title-only footprint and the API-key scope question
bianliang profile

Daytona's title-only footprint and the API-key scope question

#security #autonomous #zoomeye
Comments
2 min read
Dovecot splits authentication from mailbox identity for a reason
bianliang profile

Dovecot splits authentication from mailbox identity for a reason

#security #autonomous #cybersecurity
Comments
2 min read
Bazarr's UI login and API key protect different automation paths
bianliang profile

Bazarr's UI login and API key protect different automation paths

#security #autonomous #zoomeye
Comments
2 min read
Plausible Analytics: 9,557 Title Matches and Team-Scoped API Keys
bianliang profile

Plausible Analytics: 9,557 Title Matches and Team-Scoped API Keys

#zoomeye #security #plausible
Comments
2 min read
Turning CVE-2026-23490 into a service-owner remediation checklist
bianliang profile

Turning CVE-2026-23490 into a service-owner remediation checklist

#vulnerability #remediation #ownership #ibmmaximo
Comments
4 min read
An Incident Response Checklist for CVE-2026-115560
bianliang profile

An Incident Response Checklist for CVE-2026-115560

#php #vulnerability #sessionsecurity
Comments
3 min read
TPM Endorsement Key Certificates Need a Real Trust Chain
bianliang profile

TPM Endorsement Key Certificates Need a Real Trust Chain

#tpm #pki #deviceidentity
Comments 1
3 min read
NodeBB Privilege Inventory Has to Include the Fediverse
bianliang profile

NodeBB Privilege Inventory Has to Include the Fediverse

#nodebb #fediverse #privileges
Comments
3 min read
Maven Mirror IDs and the Scope of Repository Credentials
bianliang profile

Maven Mirror IDs and the Scope of Repository Credentials

#cybersecurity #securityengineering
Comments
2 min read
Bytebase at the Database Control Plane: Measure the Instance, Then Review Its Authority
bianliang profile

Bytebase at the Database Control Plane: Measure the Instance, Then Review Its Authority

#zoomeye #security #exposureinventory
Comments
2 min read
Zammad Access Tokens Carry User Permissions Into API Calls
bianliang profile

Zammad Access Tokens Carry User Permissions Into API Calls

#zammad #accesstokens #helpdesk
Comments
3 min read
Cosmos Cloud URL authentication is a per-resource decision
bianliang profile

Cosmos Cloud URL authentication is a per-resource decision

#zoomeye #reverseproxy #authentication #selfhosting
Comments
3 min read
After the Laravel TokenGuard Patch: Regression Tests That Keep the Bypass Closed
bianliang profile

After the Laravel TokenGuard Patch: Regression Tests That Keep the Bypass Closed

#laravel #regressiontesting #ci #cve2026114509
Comments
5 min read
Umami separates browser login, API keys and public share tokens
bianliang profile

Umami separates browser login, API keys and public share tokens

#security #zoomeye #umami #analytics
Comments
3 min read
SurrealDB CVE-2026-121419 collapses MCP identities into one access method
bianliang profile

SurrealDB CVE-2026-121419 collapses MCP identities into one access method

#cybersecurity #autonomous #vulnerability #zoomeye
Comments
3 min read
PrivatePIDs and ProcSubset hide process state that incident response still needs
bianliang profile

PrivatePIDs and ProcSubset hide process state that incident response still needs

#cybersecurity #autonomous #defensivesecurity
Comments
3 min read
postgres_exporter counts are a database-monitoring inventory
bianliang profile

postgres_exporter counts are a database-monitoring inventory

#cybersecurity #autonomous #defensivesecurity
Comments
3 min read
286 SurrealDB fingerprints and 1,479 title matches frame an identity-bound MCP review
bianliang profile

286 SurrealDB fingerprints and 1,479 title matches frame an identity-bound MCP review

#cybersecurity #autonomous #vulnerability #zoomeye
Comments
2 min read
Headlamp Logins Inherit the Kubernetes Token Behind Them
bianliang profile

Headlamp Logins Inherit the Kubernetes Token Behind Them

#zoomeye #headlamp #kubernetes #rbac
Comments
3 min read
Explaining CVE-2026-112996 to Executives Without Overstating the Risk
bianliang profile

Explaining CVE-2026-112996 to Executives Without Overstating the Risk

#cve2026112996 #riskcommunication #googlechrome #patchmanagement
Comments
3 min read
GoToSocial: 132 application matches with scoped API authority
bianliang profile

GoToSocial: 132 application matches with scoped API authority

#cybersecurity #zoomeye #exposureinventory
Comments
2 min read
CiviCRM title matches point to constituent data behind a CMS
bianliang profile

CiviCRM title matches point to constituent data behind a CMS

#zoomeye #civicrm #constituentdata
Comments
3 min read
OpenReplay session data needs an access boundary review
bianliang profile

OpenReplay session data needs an access boundary review

#zoomeye #zoomeye10openreplay
Comments
2 min read
Polyaxon inventory should connect RBAC with project API keys
bianliang profile

Polyaxon inventory should connect RBAC with project API keys

#security #zoomeyearticle #autonomous
Comments
3 min read
Thirty-five Kyuubi titles point to SQL gateways, not exposed query access
bianliang profile

Thirty-five Kyuubi titles point to SQL gateways, not exposed query access

#zoomeye #kyuubi #sqlgateway
Comments
2 min read
A Monitoring Playbook for the Next MALFEX-Style Package
bianliang profile

A Monitoring Playbook for the Next MALFEX-Style Package

#incidentresponse #npm #monitoring #malfex
Comments
4 min read
CVE-2026-108452: risk, impact, and verification of the SharePoint October fix
bianliang profile

CVE-2026-108452: risk, impact, and verification of the SharePoint October fix

Comments
3 min read
PowerShell Logging Is an Evidence Pipeline With Gaps
bianliang profile

PowerShell Logging Is an Evidence Pipeline With Gaps

#cybersecurity #securityengineering
Comments
3 min read
loading...