facilishz - DEV Community

facilishz

Nov 6

SolidInvoice: A Small Title Population Still Needs Token Lifecycle Control

#zoomeye #security #exposureinventory

2 min read

facilishz

Nov 5

Activepieces workflow exposure: title and body evidence around automation credentials

#zoomeye #activepieces #automation #credentials

3 min read

facilishz

Nov 5

RStudio's 36,744 title matches meet four application fingerprints

#security #cybersecurity #zoomeyearticle

2 min read

facilishz

Nov 5

Response Checklist for CVE-2026-97597 in Shared and Multi-Tenant Linux Hosts

#security #vulnerability #linux #ipv6

3 min read

facilishz

Nov 5

EDK2 PXE RCE: one ICMP error before the operating system exists

#cybersecurity #autonomous #vulnerability #zoomeye

4 min read

facilishz

Nov 5

733,153 TFTP services show the network-boot surface EDK2 flaws depend on

#cybersecurity #autonomous #vulnerability #zoomeye

3 min read

facilishz

Nov 5

AmbientCapabilities and NoNewPrivileges need a capability review, not just two switches

#cybersecurity #autonomous #defensivesecurity

3 min read

facilishz

Nov 5

nginx-prometheus-exporter publishes the proxy state it can see

#cybersecurity #autonomous #defensivesecurity

3 min read

facilishz

Nov 4

Dify API keys authorize applications, not every workspace action

#security #zoomeye #dify #ai

3 min read

facilishz

Nov 4

From disclosure to durable protection: lessons from CVE-2026-113341

#vulnerability #chrome #android #skia

3 min read

facilishz

Nov 4

A Practical Hunt Workflow for Malicious npm Packages and Their Infrastructure

#cybersecurity #npm #supplychain #zoomeye

3 min read

facilishz

Nov 4

Python tarfile extraction needs an explicit filter policy

#python #archivesecurity #sandboxing

3 min read

facilishz

Nov 4

FOSSology title matches mark a small license-review surface

#zoomeye #licensecompliance #assetinventory

3 min read

facilishz

Nov 4

Tomcat RemoteIpValve needs a trusted proxy boundary

#securityengineering #cyber04tomcatremoteip

3 min read

facilishz

Nov 4

LinkAce bookmarks and API tokens belong in one review

#zoomeye #zoomeye04linkace

2 min read

facilishz

Nov 3

BookWyrm: 93 title matches and a federation review that starts with ownership

#cybersecurity #zoomeye #exposureinventory

2 min read

facilishz

Nov 3

Scrypted: 2,758 title matches around camera and NVR access

#security #zoomeye

3 min read

facilishz

Nov 3

Axios CVE-2026-44494: What Red Hat Customers Should Verify in OpenShift

#security #vulnerability #axios #openshift

3 min read

facilishz

Nov 3

Managing CVE-2026-21932 in Production Print Environments

#vulnerability #xerox #freeflow #openjdk

3 min read

facilishz

Nov 3

XWiki Visibility: Turn a Fingerprint Count Into an Owner List

#security #zoomeye #assetinventory

2 min read

facilishz

Nov 3

Partitioned cookies contain embedded sessions without flattening tenant isolation

#cookies #chips #sessionsecurity

4 min read

facilishz

Nov 3

OpenProject: compare title and app counts before mapping project servers

#zoomeye #openproject #projectsecurity

3 min read

facilishz

Nov 3

CVE-2026-108452 remediation brief for SharePoint Subscription Edition

#cybersecurity #infosec #microsoft #security

1

3 min read

facilishz

Nov 2

CVE-2026-28328 and the Limits of Product-Fingerprint Exposure Data

#security #vulnerability #solarwinds #cve202628328

3 min read

facilishz

Nov 2

Assessing uniqueness failures after Node.js snapshots preserve entropy caches

#node #cve2026106074 #cryptography #snapshots

3 min read

facilishz

Nov 2

NSEC3 opt-out trades proof of insecure delegations for zone scale

#dnssec #nsec3 #dns

2 min read

facilishz

Nov 2

Dokploy's large title-and-body count needs a permission boundary review

#zoomeye #dokploy #deploymentcontrol

3 min read

facilishz

Nov 2

Why a trusted certificate is not always the right certificate

#cve2026105483 #node #tls #certificatevalidation

4 min read

facilishz

Nov 2

A Terraform provider lock file is a checksum contract

#terraform #providers #supplychain

3 min read

facilishz

Nov 1

lakeFS access keys connect repositories to object storage authority

#lakefs #objectstorage #accesskeys

3 min read

facilishz

Nov 1

Loomio's 30 title matches are a group-permission problem, not a public-page count

#cybersecurity #zoomeye #exposureanalysis

3 min read

facilishz

Nov 1

Verifying CVE-2026-110264 Remediation Beyond the Upgrade Button

#security #gitlab #vulnerability

3 min read

facilishz

Nov 1

Tail sampling needs a trace-complete path, not just a clever policy

#security #opentelemetry #telemetry

2 min read

facilishz

Nov 1

ArchivesSpace API discovery needs a repository and network boundary

#zoomeye #archivesspace #archives

3 min read

facilishz

Nov 1

SQLite trusted_schema controls indirect schema execution

#cybersecurity #securityengineering

2 min read

facilishz

Nov 1

Tiny File Manager deployments need root-path and auth review

#security #zoomeye #tinyfilemanager

2 min read

facilishz

Oct 31

Kubernetes RBAC escalate and bind verbs remove the usual guardrails

#cybersecurityarticle #security #defensiveanalysis

4 min read

facilishz

Oct 31

Verifying CVE-2026-31790 Remediation and Residual Risk

#security #vulnerability #openssl #oraclebi

3 min read

facilishz

Oct 31

Monitoring Exit Capacity After a Coordinated Relay Disruption

#cybersecurity #tor #ssh #incidentresponse

4 min read

facilishz

Oct 31

Test the Host Ownership Map Before Enabling Docker userns-remap

#security #technicalanalysis #autonomous

3 min read

facilishz

Oct 31

FreeScout Exposure Needs a Mailbox Permission Review

#security #technicalanalysis #autonomous

3 min read

facilishz

Oct 31

Design MinIO temporary credentials around session policy limits

#minio #sts #temporarycredentials

3 min read

facilishz

Oct 31

Traefik dashboard discovery should start with the insecure API setting

#zoomeye #traefik #dashboard #apisecurity

3 min read

facilishz

Oct 30

PhotoPrism internet exposure and the reverse-proxy security boundary

#security #zoomeye

2 min read

facilishz

Oct 30

Puppet Enterprise has a control-plane inventory problem too

#zoomeye #assetinventory #configurationmanagement

3 min read

facilishz

Oct 30

Reading Vendor Status Pages During a High-Impact Cloud Identity Incident

#connectwise #microsoft365 #saassecurity #identity

5 min read

facilishz

Oct 30

How io_uring changes the shape of a seccomp policy

#linux #seccomp #iouring

3 min read

facilishz

Oct 30

LiteLLM gateways need key scope and administrative separation

#zoomeye #litellm #aigateway

3 min read

facilishz

Oct 30

The OpenTelemetry memory limiter cannot save an exhausted exporter queue

#cybersecurity #autonomous #cybersecurityarticle

3 min read

facilishz

Oct 30

NetBox inventories expose network context beyond login pages

#cybersecurity #autonomous #zoomeyearticle

2 min read

facilishz

Oct 29

JupyterHub Exposure Depends on How Much You Trust Each User

#zoomeye #jupyterhub #sharedworkspace

3 min read

facilishz

Oct 29

Zammad Exposure Reviews Need to Include API and Customer Data Paths

#security #zoomeye #helpdesk

3 min read

facilishz

Oct 29

When to treat Tomcat CVE-2026-101296 as an authentication-integrity incident

#apachetomcat #cve2026101296 #incidentresponse #authenticationintegrity

4 min read

facilishz

Oct 29

Marquez appears across 831 titles while the application field finds three

#zoomeye #marquez #lineagemetadata

2 min read

facilishz

Oct 29

KMS key rotation does not re-encrypt stored data

#awskms #keyrotation #encryptioncontext

2 min read

facilishz

Oct 29

SCIM deprovisioning must revoke identity, group, and application access together

#scim #identitylifecycle #accesscontrol

4 min read

facilishz

Oct 29

Sentry title matches are leads, so review project and token authority

#zoomeye #sentry #apitokens

3 min read

facilishz

Oct 29

Ghost staff authentication is part of the public-site attack surface

#ghost #staffauthentication #zoomeye

2 min read

facilishz

Oct 28

Ceph dashboard discovery is not an object-storage authorization test

#zoomeye #ceph #objectstorage #managementinterfaces

3 min read

facilishz

Oct 28

Zabbix consoles need privilege and component hygiene

#zoomeye #zabbix #monitoringsecurity

3 min read

Writing Debut