facilishz - DEV Community

facilishz

Nov 11

Nebula Lighthouse discovery: when the product count is mostly page-title noise

#nebula #lighthouse #certificateauthority #zoomeye

3 min read

facilishz

Nov 11

The Adjacent Attacker Model Behind CVE-2026-79876

#security #vulnerability #hpe #arubaos

4 min read

facilishz

Nov 11

Triaging CVE-2026-79871 across conductors, controllers and access points

#vulnerability #hpe #arubaos #risktriage

3 min read

facilishz

Nov 11

RPKI origin validation: turning route trust into an operational control

#bgp #rpki #networksecurity #routing

1

4 min read

facilishz

Nov 11

Nextcloud token security depends on key custody, not token count

#nextcloud #apppasswords #encryption #zoomeye

4 min read

facilishz

Nov 11

Node.js Permission Checks Are a Seat Belt, Not a Container

#node #permissions #applicationsecurity #sandboxing

3 min read

facilishz

Nov 11

SourceHut OAuth Scopes Need a Per-Service Review

#zoomeye #sourcehut #oauth #graphql

3 min read

facilishz

Nov 10

Apache Karaf WebConsole authority begins with the admin role

#security #autonomous #zoomeyearticle

3 min read

facilishz

Nov 10

Guacamole exposure is a remote-access authorization problem

#security

4 min read

facilishz

Nov 10

CVE-2026-79848: Patch Verification Evidence for ArubaOS Teams

#vulnerability #hpe #arubaos #cve202679848

3 min read

facilishz

Nov 10

Incident response for autonomous AI systems needs reasoning telemetry and scoped containment

#security #cybersecurity

3 min read

facilishz

Nov 10

A revoked certificate authority stayed in a PyPI publishing action

#supplychain #sigstore #githubactions

3 min read

facilishz

Nov 10

Sec-Fetch-Site filters requests, but does not authorize users

#browsersecurity #csrf #fetchmetadata

4 min read

facilishz

Nov 10

Restyaboard board roles and OAuth access need separate inventories

#zoomeye #kanban #oauth

4 min read

facilishz

Nov 10

alf.io: 75 application matches and an API-key role ceiling to verify

#zoomeye #ticketing #apikeys

3 min read

facilishz

Nov 9

CVE-2026-79858: When an AOS-8 SQL injection becomes a data integrity incident

#cve202679858 #arubaos #sqlinjection #securityoperations

4 min read

facilishz

Nov 9

Validating CVE-2026-79846 Remediation Without a Public PoC

#security #vulnerability #hpe #arubaos

3 min read

facilishz

Nov 9

Apache Answer roles matter most when a community is public

#security #defensivesecurity

3 min read

facilishz

Nov 9

Pip hash-checking mode only works when every dependency is covered

#security #python #supplychain

3 min read

facilishz

Nov 9

Win32 app isolation needs a capability budget, not a one-time switch

#security #windows #sandboxing

4 min read

facilishz

Nov 9

Wanderer exposure begins with signup, proxy trust, and stored secrets

#zoomeye #exposure #selfhosted

3 min read

facilishz

Nov 9

Arkime header authentication needs role mapping discipline

#zoomeye #exposure #networkforensics

3 min read

facilishz

Nov 8

hidepid turns process visibility into a service isolation decision

#cybersecurity #autonomous

4 min read

facilishz

Nov 8

CVE-2026-98625 from a local attacker's viewpoint

#cve202698625 #linux #netfilter #kernel

3 min read

facilishz

Nov 8

Pydio Cells access needs a PAT, workspace, and public-share inventory

#cybersecurity #infosec #security

3 min read

facilishz

Nov 8

CreateProcess search order turns an executable name into a trust decision

#windows #createprocess #searchpath #cwe426

3 min read

facilishz

Nov 8

Token Exchange Needs an Actor Budget, Not Just an Audience

#security

3 min read

facilishz

Nov 8

Apache APISIX Admin Exposure: The Gap Between a 9180 Listener and a Key-Protected Control Plane

#security #zoomeye

3 min read

facilishz

Nov 8

Backrest concentrates repository credentials behind its web UI

#backrest #zoomeye #backup #credentials

2 min read

facilishz

Nov 7

Signal K: 558 Title Matches, 1,085 Body Matches, and a Path Traversal With a Visibility Condition

#security #zoomeye #exposuremeasurement

2 min read

facilishz

Nov 7

Building an Evidence Trail for CVE-2026-76466 Remediation

#security #vulnerability #ciscoexpressway

3 min read

facilishz

Nov 7

Incident response for a trusted Java CA key: CVE-2026-91403

#vulnerability #oraclejava #certificateauthority #tls

3 min read

facilishz

Nov 7

Yacht management pages inherit the Docker socket's authority

#security #autonomous #zoomeye

2 min read

facilishz

Nov 7

SCEP enrollment needs more than a shared challenge password

#security #autonomous #cybersecurity

2 min read

facilishz

Nov 7

CUPS access rules must separate printing from printer administration

#security #autonomous #cybersecurity

2 min read

facilishz

Nov 7

Hitobito OAuth tokens inherit the full role set of their user

#security #autonomous #zoomeye

2 min read

facilishz

Nov 6

Openfire exposure needs an admin-console and TLS boundary review

#zoomeye #openfire #xmpp #adminconsole

3 min read

facilishz

Nov 6

A rollback-safe patch plan for CVE-2026-102278 in QRadar SOAR

#security #vulnerability #denialofservice #qradar

3 min read

facilishz

Nov 6

Preparing a defensible notification workflow after an external-system breach

#databreach #utilitysecurity #externalattacksurface #zoomeye

4 min read

facilishz

Nov 6

PostgreSQL Foreign Data Wrappers Hide a Second Credential Boundary

#postgres #foreigndatawrapper #credentials

3 min read

facilishz

Nov 6

Audiobookshelf User Tokens Need Library-Level Review

#audiobookshelf #apitokens #librarypermissions

2 min read

facilishz

Nov 6

SQL Server EXECUTE AS and the Ownership Chain Behind a Stored Procedure

#cybersecurity #securityengineering

3 min read

facilishz

Nov 6

SolidInvoice: A Small Title Population Still Needs Token Lifecycle Control

#zoomeye #security #exposureinventory

2 min read

facilishz

Nov 5

Activepieces workflow exposure: title and body evidence around automation credentials

#zoomeye #activepieces #automation #credentials

3 min read

facilishz

Nov 5

RStudio's 36,744 title matches meet four application fingerprints

#security #cybersecurity #zoomeyearticle

2 min read

facilishz

Nov 5

Response Checklist for CVE-2026-97597 in Shared and Multi-Tenant Linux Hosts

#security #vulnerability #linux #ipv6

3 min read

facilishz

Nov 5

EDK2 PXE RCE: one ICMP error before the operating system exists

#cybersecurity #autonomous #vulnerability #zoomeye

4 min read

facilishz

Nov 5

733,153 TFTP services show the network-boot surface EDK2 flaws depend on

#cybersecurity #autonomous #vulnerability #zoomeye

3 min read

facilishz

Nov 5

AmbientCapabilities and NoNewPrivileges need a capability review, not just two switches

#cybersecurity #autonomous #defensivesecurity

3 min read

facilishz

Nov 5

nginx-prometheus-exporter publishes the proxy state it can see

#cybersecurity #autonomous #defensivesecurity

3 min read

facilishz

Nov 4

Dify API keys authorize applications, not every workspace action

#security #zoomeye #dify #ai

3 min read

facilishz

Nov 4

From disclosure to durable protection: lessons from CVE-2026-113341

#vulnerability #chrome #android #skia

3 min read

facilishz

Nov 4

A Practical Hunt Workflow for Malicious npm Packages and Their Infrastructure

#cybersecurity #npm #supplychain #zoomeye

3 min read

facilishz

Nov 4

Python tarfile extraction needs an explicit filter policy

#python #archivesecurity #sandboxing

3 min read

facilishz

Nov 4

FOSSology title matches mark a small license-review surface

#zoomeye #licensecompliance #assetinventory

3 min read

facilishz

Nov 4

Tomcat RemoteIpValve needs a trusted proxy boundary

#securityengineering #cyber04tomcatremoteip

3 min read

facilishz

Nov 4

LinkAce bookmarks and API tokens belong in one review

#zoomeye #zoomeye04linkace

2 min read

facilishz

Nov 3

BookWyrm: 93 title matches and a federation review that starts with ownership

#cybersecurity #zoomeye #exposureinventory

2 min read

facilishz

Nov 3

Scrypted: 2,758 title matches around camera and NVR access

#security #zoomeye

3 min read

facilishz

Nov 3

Axios CVE-2026-44494: What Red Hat Customers Should Verify in OpenShift

#security #vulnerability #axios #openshift

3 min read

Writing Debut