kozhevniko - DEV Community

kozhevniko

Nov 12

gMSA Automates the Password, Not the Retrieval Authority

#security #technicalanalysis #defensivecontrols

3 min read

kozhevniko

Nov 12

Five loader domains in 15 months: using rotation and parking to guide monitoring

#magento #adobecommerce #malware #javascriptloader

3 min read

kozhevniko

Nov 12

OpenID Federation makes trust-chain validation the security boundary

#identity #openid #federation #trust

3 min read

kozhevniko

Nov 12

Grafana Tempo has no built-in authentication layer

#zoomeye #grafana #tempo #tracing

3 min read

kozhevniko

Nov 12

HAProxy client certificate checks stop at the chain and policy you configure

#securityengineering #cyber08haproxyclientcert

3 min read

kozhevniko

Nov 12

Wiki.js discovery: a title count is not a permissions review

#zoomeye #zoomeye08wikijs

3 min read

kozhevniko

Nov 11

Hook0 service tokens need attenuation before they leave the backend

#hook0 #webhooks #servicetokens #zoomeye

2 min read

kozhevniko

Nov 11

Text Generation Inference: One Title Match and a Real API-Key Boundary

#zoomeye #tgi #llmserving #apikey

3 min read

kozhevniko

Nov 11

Verifying AOS-10 remediation for CVE-2026-79871

#vulnerability #remediation #hpe #arubaos

3 min read

kozhevniko

Nov 11

WebAuthn backup state: what passkey synchronisation does to assurance

#passkeys #webauthn #identity #authentication

4 min read

kozhevniko

Nov 11

OpenProject tokens: project permission is the real boundary

#openproject #oauth #apitokens #zoomeye

4 min read

kozhevniko

Nov 11

Seccomp Filters Need Architecture Checks Before Syscall Rules

#seccomp #linux #syscalls #sandboxing

3 min read

kozhevniko

Nov 11

Subversion Path Authorization Is Not Authentication

#zoomeye #subversion #authorization #repositories

3 min read

kozhevniko

Nov 10

Apache ActiveMQ Artemis console authority depends on the Jolokia path

#security #autonomous #zoomeyearticle

3 min read

kozhevniko

Nov 10

A post-patch assurance checklist for CVE-2026-79855

#assurance #patching #arubaos

3 min read

kozhevniko

Nov 10

Avoiding Partial ArubaOS Branch Upgrades for CVE-2026-79872

#security #arubaos #releasemanagement

3 min read

kozhevniko

Nov 10

Keycloak's SAML signature check can be bypassed by encoded parameter names

#identity #saml #keycloak

3 min read

kozhevniko

Nov 10

rConfig: 61 fingerprint matches around a network-control plane

#zoomeye #networkmanagement #redis

3 min read

kozhevniko

Nov 10

Registry tokens make repository scope the real authorization boundary

#containers #registry #authorization

4 min read

kozhevniko

Nov 10

Open Journal Systems role separation is the review boundary, not the login page

#zoomeye #publishing #roles

3 min read

kozhevniko

Nov 9

SORMAS exposure begins with role rights and REST user privileges

#security #zoomeye

3 min read

kozhevniko

Nov 9

Cal.com public booking pages and organization controls are different surfaces

#security #cybersecurity

3 min read

kozhevniko

Nov 9

CVE-2026-79846 Response Checklist for Managed Service Providers

#security #vulnerability #hpe #arubaos

3 min read

kozhevniko

Nov 9

Raising OpenSSH's minimum RSA key size without breaking access

#security #ssh #identity

2

3 min read

kozhevniko

Nov 9

HertzBeat's default accounts turn monitoring access into an operational risk

#zoomeye #exposure #monitoring

3 min read

kozhevniko

Nov 9

macOS TCC makes user consent part of the access control path

#security #macos #privacy

1

3 min read

kozhevniko

Nov 9

Chartbrew exposure joins team roles, public reports, and API keys

#zoomeye #exposure #dashboards

3 min read

kozhevniko

Nov 8

Uptime Kuma status pages and metrics need separate access rules

#security #defensivesecurity

2 min read

kozhevniko

Nov 8

Attack-controlled Zstandard dictionaries need frame-level budgets

#cybersecurity #autonomous

3 min read

kozhevniko

Nov 8

After patching CVE-2026-98625, verify the kernel not just the package

#cve202698625 #linux #netfilter #kernel

3 min read

kozhevniko

Nov 8

HTTP/2 Rapid Reset makes stream limits a security control

#http2 #denialofservice #reverseproxy #capacity

3 min read

kozhevniko

Nov 8

File Browser exposure is an authentication and path trust problem

#filebrowser #zoomeye #authentication #fileaccess

3 min read

kozhevniko

Nov 8

WebAuthn RP IDs Turn a Subdomain Decision into an Authentication Boundary

#security

3 min read

kozhevniko

Nov 8

Traefik Dashboard Exposure: Routing Visibility Can Become Control-Plane Visibility

#security #zoomeye

3 min read

kozhevniko

Nov 8

Nuxeo API authentication is only the first permission decision

#api #authentication #security

3 min read

kozhevniko

Nov 7

Drupal's 19/25 Rating and CVE-2026-108099: Reconciling Module Risk With CVSS 8.1

#drupal #vulnerability #remotecodeexecution #reflectioninjection

2 min read

kozhevniko

Nov 7

Detecting CVE-2026-101909 in JavaScript Application Inventories

#security #vulnerability #axios #javascript

3 min read

kozhevniko

Nov 7

Countly: 2,612 Title Matches and the Gap Between Login and Data Access

#zoomeye #security #countly

2 min read

kozhevniko

Nov 7

Dokku proxy exposure is an application-auth question

#security #autonomous #zoomeye

2 min read

kozhevniko

Nov 7

TCP-AO strengthens BGP sessions, but key lifecycle remains the hard part

#security #autonomous #cybersecurity

2 min read

kozhevniko

Nov 7

Zoraxy deployments need route-level authentication, not just a hidden admin page

#security #autonomous #zoomeye

2 min read

kozhevniko

Nov 7

pgaudit object coverage starts with the audit role's grants

#security #autonomous #cybersecurity

2 min read

kozhevniko

Nov 6

CVE-2025-4517: A path-length edge case with file overwrite impact

#vulnerability #python #tarfile #cve20254517

2 min read

kozhevniko

Nov 6

Tube Archivist small exposure counts can still mark a superuser surface

#tubearchivist #zoomeye #superuser #forwardauthentication

3 min read

kozhevniko

Nov 6

Prioritizing Node.js CVE-2026-105481 Across a Mixed Fleet

#vulnerability #node #http #cve2026105481

4 min read

kozhevniko

Nov 6

EMQX Authentication Chains Need Explicit Failure Semantics

#emqx #mqtt #authenticationchain

3 min read

kozhevniko

Nov 6

AWX OAuth Scopes and RBAC Both Decide What Automation Can Do

#awx #oauth #rbac

2 min read

kozhevniko

Nov 6

S/MIME Trust Starts With the Sender, Not the Padlock

#cybersecurity #securityengineering

2 min read

kozhevniko

Nov 6

Karakeep Crawlers Extend an SSRF Boundary Into the Internal Network

#zoomeye #security #exposureinventory

2 min read

kozhevniko

Nov 5

OpenStatus status pages need an access model before publication

#zoomeye #statuspage #accesscontrol

2 min read

kozhevniko

Nov 5

Paperless-ngx has a stable fingerprint and an expanding document surface

#zoomeye #documentmanagement #permissions

3 min read

kozhevniko

Nov 5

A Clinician-Facing Attack Surface Review for Quanum LSM Clients

#security #healthcare #zoomeye

4 min read

kozhevniko

Nov 5

Dell OpenManage Enterprise CVE-2026-91909 makes argument parsing the control plane

#cybersecurity #autonomous #vulnerability #zoomeye

3 min read

kozhevniko

Nov 5

Dell OpenManage Enterprise exposes no app fingerprint and only 12 title matches

#cybersecurity #autonomous #vulnerability #zoomeye

3 min read

kozhevniko

Nov 5

core.hooksPath moves executable policy outside the repository

#cybersecurity #autonomous #defensivesecurity

3 min read

kozhevniko

Nov 5

snmp_exporter can turn a web request into a network-management probe

#cybersecurity #autonomous #defensivesecurity

3 min read

kozhevniko

Nov 4

OpenHands local runtime defaults and API keys create two different exposure questions

#security #zoomeye #openhands #agentruntime

3 min read

kozhevniko

Nov 4

Whitelabel pages are a bad Jackson inventory

#zoomeye #springboot #jackson #dependencyinventory

3 min read

kozhevniko

Nov 4

After Patching CVE-2026-113292: Verification and Residual Risk

#vulnerability #chrome #android #omnibox

3 min read

kozhevniko

Nov 4

A TLS syslog tunnel is not authenticated until both ends verify certificates

#syslog #tls #logging

3 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with kozhevniko?