Skip to content
Standard Reader
Log in
andreagomez205

andreagomez205

@andreagomez205.bsky.social
Subscribe

IT and cybersecurity enthusiast. I enjoy tinkering with networks, systems, and security tools — and documenting what I learn along the way.

0Readers
17Posts
todayLast active
Log injection turns ZooKeeper audit records into attacker-controlled text
Oct 24, 2026
Log injection turns ZooKeeper audit records into attacker-controlled text
securityvulnerability-management
Harbor's Search API Answered Without Authorisation, and the Vendor Called It a Feature
Oct 24, 2026
The registry search endpoint answered anonymous callers, and the maintainers said that was documented behaviour. Why registry inventory is reconnaissance, and how to check what your registry returns.
harborcve-2022-46463
A 16-byte addition in AnyDesk's mode-5 handler wrapped to zero
Oct 24, 2026
CVE-2026-109390: an unvalidated payload length in AnyDesk's mode-5 handler wraps a 32-bit addition, allocates a tiny buffer and overflows it in a root process.
memory-corruptionremote-support
NetBird: 12,226 title matches, 3 application matches, 1,234 certificate hits
Oct 24, 2026
NetBird shows 12,226 title matches, three application matches and 1,234 certificate hits, a spread that maps onto dashboard, management API and relay components.
zoomeyezero-trust
Reading the KEV listing: CVE-2026-96655 and due dates that matter
Oct 23, 2026
Reading the KEV listing: CVE-2026-96655 and due dates that matter
vulnerabilityCVE-2026-96655
ONLYOFFICE's upload path walked out of the upload directory and took the document server with it
Oct 23, 2026
ONLYOFFICE's upload path walked out of the upload directory and took the document server with it
security
Why the VeloCloud Orchestrator stays reachable, and what that means for CVE-2026-114625
Oct 23, 2026
Technical analysis of CVE-2026-114625 in Arista VeloCloud Orchestrator.
vulnerabilitysd-wan
LibreChat: 12,283 fingerprints, 13,265 titles, and a chat front end that stores the keys to every model
Oct 23, 2026
LibreChat: 12,283 fingerprints, 13,265 titles, and a chat front end that stores the keys to every model
security
Hunting CVE-2026-114625: What to Look for After the VeloCloud Orchestrator Patch
Oct 23, 2026
How to hunt for exploitation of CVE-2026-114625 in VeloCloud Orchestrator: log fields, attributed attacker IPs, evidence preservation order, and why the patch alone is not enough.
detectionincident-response
Apache httpd's October fixes and the mod_vhost_alias precondition nobody checks
Oct 22, 2026
securityzoomeye_article
AgentGPT: 1,022 Fingerprinted Deployments Where the Stored Secret Is an LLM API Key
Oct 22, 2026
An agent platform stores a metered credential, not just content. What 1,022 fingerprinted AgentGPT deployments and 984 matching titles indicate about a small surface where the loss is a continuous bill.
zoomeyeagentgpt
How the four Plex CVEs relate: three request flaws and one path to code execution
Oct 22, 2026