Essential Guide: Sorrelthorncroft

SorrelThorncroft

Nov 2

Plausible's 9,526 title matches cross public dashboards and Stats API keys

#zoomeye #plausible #analytics

2 min read

SorrelThorncroft

Nov 2

Defending service-to-service TLS after CVE-2026-105483

#cve2026105483 #node #tls #certificatevalidation

3 min read

SorrelThorncroft

Nov 2

OCI registry tokens combine audience, scope, and the identity behind them

#oci #registry #tokens

3 min read

SorrelThorncroft

Nov 1

GLPI exposure depends on active profiles and entity boundaries

#glpi #itsm #entities

3 min read

SorrelThorncroft

Nov 1

CVE-2026-103119: make response isolation a release gate

#security #vulnerability #apachetomcat #ajp

3 min read

SorrelThorncroft

Nov 1

Sakai roles and permissions require more than a product match

#zoomeyearticle #security #defensiveanalysis

3 min read

SorrelThorncroft

Nov 1

WebAuthn backup eligibility and backup state answer different passkey questions

#security #webauthn #authentication

3 min read

SorrelThorncroft

Nov 1

Islandora starts with Drupal access, but leaves public derivatives and Fedora surfaces to verify

#zoomeye #islandora #digitalrepository

3 min read

SorrelThorncroft

Nov 1

Redis Lua keys need to be declared before the script runs

#cybersecurity #securityengineering

2 min read

SorrelThorncroft

Nov 1

h5ai title matches need the web server access rule checked

#security #zoomeye #h5ai

2 min read

SorrelThorncroft

Oct 31

Flyte Console discovery: validate the path from UI to FlyteAdmin auth

#zoomeye #security #defensiveanalysis

4 min read

SorrelThorncroft

Oct 31

Find Every Oracle BI Instance Affected by CVE-2026-101531

#security #vulnerability #oracle #cve2026101531

3 min read

SorrelThorncroft

Oct 31

A Post-Incident Verification Plan for Tor Relay Operators

#cybersecurity #tor #ssh #incidentresponse

4 min read

SorrelThorncroft

Oct 31

Audit PostgreSQL `pg_hba.conf` from the First Match, Not the Last Rule

#security #technicalanalysis #autonomous

3 min read

SorrelThorncroft

Oct 31

Miniflux Proxy Authentication Depends on the Header Path

#security #technicalanalysis #autonomous

3 min read

SorrelThorncroft

Oct 31

Use Proxmox API tokens as delegated identities with a visible owner

#proxmox #apitokens #accesscontrol

3 min read

SorrelThorncroft

Oct 31

Kubernetes Dashboard discovery is not proof of cluster access

#zoomeye #kubernetes #dashboard #rbac

3 min read

SorrelThorncroft

Oct 30

Using systemd ProtectProc and ProcSubset to limit service process visibility

#security #cybersecurity

2 min read

SorrelThorncroft

Oct 30

OpenBao endpoints need a secrets-plane inventory, not a title count

#zoomeye #assetinventory #secretsmanagement

3 min read

SorrelThorncroft

Oct 30

CVE-2026-83404: Turning a Broad MySQL Exposure Count into a Defensible Response

#security #vulnerability #mysql #python

3 min read

SorrelThorncroft

Oct 30

Moving service secrets out of the environment with systemd credentials

#linux #secrets #systemd

4 min read

SorrelThorncroft

Oct 30

vLLM API key protection stops at some endpoint boundaries

#zoomeye #vllm #aiserving

3 min read

SorrelThorncroft

Oct 30

A Kubernetes subPath secret mount can outlive credential rotation

#cybersecurity #autonomous #cybersecurityarticle

3 min read

SorrelThorncroft

Oct 30

phpIPAM public addresses should not mean public inventory

#cybersecurity #autonomous #zoomeyearticle

2 min read

SorrelThorncroft

Oct 29

OpenProject Exposure Begins With Project Roles and Login Policy

#zoomeye #openproject #projectmanagement

3 min read

SorrelThorncroft

Oct 29

Nexus Repository discovery should separate anonymous reads from admin access

#cybersecurity #autonomous #defensiveengineering

3 min read

SorrelThorncroft

Oct 29

Patching UpdraftPlus is not enough after the UpdraftCentral key theft

#wordpress #supplychain #remotemanagement #incidentresponse

4 min read

SorrelThorncroft

Oct 29

Frontend mTLS in Gateway API needs a listener-level review

#gatewayapi #mutualtls #kubernetes

3 min read

SorrelThorncroft

Oct 29

DolphinScheduler exposure starts with authentication and tenant boundaries

#apachedolphinscheduler #zoomeye #exposuremanagement

3 min read

SorrelThorncroft

Oct 29

OIDC back-channel logout is a session termination protocol, not a logout link

#openidconnect #sessionsecurity #logout

4 min read

SorrelThorncroft

Oct 29

Supabase Studio discovery should stop at the management boundary

#zoomeye #supabasestudio #managementplane

3 min read

SorrelThorncroft

Oct 29

RedisInsight exposure can concentrate database credentials

#redisinsight #redis #zoomeye

2 min read

SorrelThorncroft

Oct 28

Combining Samba discovery with evidence of SMB signing enforcement

#zoomeye #samba #smbsigning #fileserversecurity

3 min read

SorrelThorncroft

Oct 28

After Patching CVE-2026-43829: Verification and Recovery Checks for ADAM-3600

#security #vulnerability #ot #cve202643829

3 min read

SorrelThorncroft

Oct 28

HiRDB Returned Zero on Two Search Fields; That Is a Visibility Finding

#zoomeye #hirdb #assetvisibility #databasesecurity

3 min read

SorrelThorncroft

Oct 28

Turning the Railway Incident Into a Recurring Asset and Secret Review

#security #cloud #llmjacking #zoomeye

4 min read

SorrelThorncroft

Oct 28

Crash During Connect: Triaging a Suspected CVE-2026-44236 Incident

#vulnerability #rabbitmq #amqp #cve202644236

3 min read

SorrelThorncroft

Oct 28

Nginx Proxy Manager: 316,548 Fingerprints and a Fourteen-Million-Host Port

#reverseproxy #measurement #zoomeye

3 min read

SorrelThorncroft

Oct 28

127,120 ClickHouse Fingerprints and the Default User Behind Them

#clickhouse #analytics #accesscontrol #defaultuser

3 min read

SorrelThorncroft

Oct 27

A test environment held 525,000 records, and 20,000 physical PIN codes

#security #databreach #highereducation

4 min read

SorrelThorncroft

Oct 27

408,924 Proxmox Fingerprints and 957,581 Portainer Titles Describe Two Kinds of Management Exposure

#proxmox #portainer #virtualization #attacksurface

1

4 min read

SorrelThorncroft

Oct 27

CVE-2026-6653 reaches further than the libxml2 package name

#libxml2 #cve20266653 #vulnerability #zoomeye

2 min read

SorrelThorncroft

Oct 27

Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

#vulnerability #plex #rce #exposure

4 min read

SorrelThorncroft

Oct 27

CVE-2026-97205: An 8-Bit Counter and 256 Pending AIO Operations

#cybersecurity #infosec #security

3 min read

SorrelThorncroft

Oct 27

Rotating every password after a hypervisor panel breach

#security #zoomeye #vmmanager #hosting

3 min read

SorrelThorncroft

Oct 27

Three authorisation holes in one helpdesk stack: what CVE-2026-111937, CVE-2026-111938 and CVE-2026-111939 have in common

#security #authorization #helpdesk #crm

6 min read

SorrelThorncroft

Oct 27

The Node.js CVE nobody owns: CVE-2026-111497 and the vendored Brotli problem

#security #vulnerability #node #brotli

3 min read

SorrelThorncroft

Oct 26

Why an SSRF that accepts any X-Plex-Token matters more than its 4.3 score

#vulnerability #plexmediaserver #cve202696654 #remotecodeexecution

4 min read

SorrelThorncroft

Oct 26

2.5 million SonicWall matches and zero for SMA1000: why a vendor name is not a product inventory

#zoomeye #exposure #sonicwall #measurement

4 min read

SorrelThorncroft

Oct 26

Four overflow bugs, one coding lesson: what NSD 4.15.3 says about parser hardening

#dns #nsd #vulnerability #cve2026101338

4 min read

SorrelThorncroft

Oct 26

How CVE-2026-106931 Turns SiteGuard Server Edition Statistics into Root

#vulnerability #webapplicationfirewall #commandinjection #privilegeescalation

4 min read

SorrelThorncroft

Oct 26

CVE-2026-101982 and CVE-2026-101990: Two Route-Advertisement Bugs That End in Root on Junos

#cybersecurity #infosec #networking #security

4 min read

SorrelThorncroft

Oct 26

Thirty Days From Exposure Census to Verified Remediation: A CVE-2026-102764 Plan

#zoomeye #remediation #beyondtrust #operations

3 min read

SorrelThorncroft

Oct 26

Linkerd: 306 page titles against 27,259 body matches, and a zero on the admin port that is the reassuring part

#servicemesh #exposure #zoomeye

3 min read

SorrelThorncroft

Oct 25

`Content-Disposition` decides a filename, and the filename is where a download becomes a write

#websecurity #fileupload #http

1

4 min read

SorrelThorncroft

Oct 25

Should You Worry About CVE-2026-101339? A Decision Guide for NSD Operators

#vulnerability #dns #nsd

3 min read

SorrelThorncroft

Oct 25

BACnet on UDP 47808 is a building protocol that answers a broadcast

#bacnet #otsecurity #buildingautomation #networksegmentation

3 min read

SorrelThorncroft

Oct 25

Two Drupal RCEs, One Patch Window: Building the Change Plan

#drupal #remotecodeexecution #securityadvisory #vulnerability

3 min read

SorrelThorncroft

Oct 25

Why any X-Plex-Token value matters in the Plex timeline SSRF

#cybersecurity #infosec #security

3 min read

SorrelThorncroft

Oct 25

Recovering a PAN-OS firewall from CVE-2026-0321 maintenance mode

#panos #cve20260321 #incidentresponse #highavailability

3 min read

Writing Debut

Want to connect with SorrelThorncroft?