Skip to content
Standard Reader
Log in
Tag

Zoomeye

Articles and publications tagged Zoomeye across the Atmosphere.

26articles8publications
kozhevnikova
kozhevnikovaOct 24, 2026
Counting FortiGate VPN Portals Is Easier Than Knowing Which Ones Are Patched
How externally measurable FortiGate SSL VPN portals relate to the credential theft in CL-STA-0954, and where version visibility still fails.
FortinetFortiGate
ivanova
ivanovaOct 24, 2026
draw.io: 18,375 Fingerprints Against 309 Titles, and Why Architecture Diagrams Leak Topology
Architecture diagrams name hosts, subnets and data flows. A fingerprint count of 18,375 against 309 title matches says most draw.io deployments are embedded where a title search will never find them.
zoomeyedrawio
sorrelthorncroft
sorrelthorncroftOct 24, 2026
Chevereto: 8,818 Fingerprint Matches on an Image Host, and 4,412 Titles That Agree With It
An image host grows without a ceiling and often holds personal media. What 8,818 fingerprinted Chevereto deployments and 4,412 matching titles indicate, and the three patterns that change the risk.
zoomeyechevereto
facilishz
facilishzOct 24, 2026
Docassemble: 584 Fingerprints Against 2,899 Titles, and a Guided Interview That Collects What Courts Ask For
A guided interview collects what a court filing needs, and none of it can be rotated. What 584 fingerprinted Docassemble instances against 2,899 titles say about a small surface with unusually durable data.
zoomeyedocassemble
ivanova
ivanovaOct 24, 2026
Fuxa: 694 Fingerprints on a Browser-Based HMI, and 3,795 Titles That Overstate It
A browser-based HMI does not only display a process, it can command one. What 694 fingerprinted Fuxa hosts and 3,795 title matches say, and why a small count still carries physical consequence.
zoomeyefuxa
sorrelthorncroft
sorrelthorncroftOct 24, 2026
DataEase: 9,832 Fingerprints Against 1,246 Titles, and the JDBC Credential in the Datasource Form
A BI platform is a credential registry with a dashboard on top. What 9,832 fingerprinted DataEase deployments against 1,246 titles say about stored datasource access and the three paths that matter.
zoomeyedataease
ioneyrezende
ioneyrezendeOct 24, 2026
SkyWalking answers 7,586 titles on 8080 and almost nothing on 12800
SkyWalking returns 7,586 title matches but nothing on port 12800, showing how port assumptions and authentication layers change what an external index can see of an observability stack.
zoomeyeapm
jeffreyciend
jeffreyciendOct 24, 2026
TDengine: 3,216 title matches, no application fingerprint, and an empty port check
TDengine returns 3,216 title matches but zero application fingerprints and zero port-scoped matches, a case study in why absence of a signature is not absence of the product.
zoomeyetime-series
eiuspkz
eiuspkzOct 24, 2026
Opencast: 870 application matches and 458 of them on 443
Opencast returns 870 application and title matches with 458 on port 443 and only 10 on 8443, showing how a lecture capture platform reaches the internet through standard HTTPS fronting.
zoomeyeeducation
andreagomez205
andreagomez205Oct 24, 2026
NetBird: 12,226 title matches, 3 application matches, 1,234 certificate hits
NetBird shows 12,226 title matches, three application matches and 1,234 certificate hits, a spread that maps onto dashboard, management API and relay components.
zoomeyezero-trust
ivanova
ivanovaOct 23, 2026
CVE-2026-96655: what the Plex Media Server SSRF actually exposes
CVE-2026-96655: what the Plex Media Server SSRF actually exposes
vulnerabilityCVE-2026-96655
sorrelthorncroft
sorrelthorncroftOct 23, 2026
Designing a reverse proxy that survives a Plex SSRF
Designing a reverse proxy that survives a Plex SSRF
vulnerabilityCVE-2026-96655
kozhevnikova
kozhevnikovaOct 23, 2026
Detecting CVE-2026-96655 exploitation in Plex logs
Detecting CVE-2026-96655 exploitation in Plex logs
vulnerabilityCVE-2026-96655
ioneyrezende
ioneyrezendeOct 23, 2026
The Plex patch cluster: why one CVE is not the whole story
The Plex patch cluster: why one CVE is not the whole story
vulnerabilityCVE-2026-96655
jeffreyciend
jeffreyciendOct 23, 2026
Account hygiene is the real control for CVE-2026-96655
Account hygiene is the real control for CVE-2026-96655
vulnerabilityCVE-2026-96655
eiuspkz
eiuspkzOct 23, 2026
CVE-2026-96655 on a small business network
CVE-2026-96655 on a small business network
vulnerabilityCVE-2026-96655
andreagomez205
andreagomez205Oct 23, 2026
Reading the KEV listing: CVE-2026-96655 and due dates that matter
Reading the KEV listing: CVE-2026-96655 and due dates that matter
vulnerabilityCVE-2026-96655
facilishz
facilishzOct 23, 2026
Docker and NAS deployments: the CVE-2026-96655 upgrade gap
Docker and NAS deployments: the CVE-2026-96655 upgrade gap
vulnerabilityCVE-2026-96655
ioneyrezende
ioneyrezendeOct 22, 2026
Headscale: 85 title matches against 18 on 443 and 7 certificate hits
Headscale returns 85 title matches, 18 on 443 and seven certificate hints, a small population where each query measures a different disclosure.
zoomeyemesh-network
jeffreyciend
jeffreyciendOct 22, 2026
Apache StreamPark: 167 Fingerprints, 170 Titles, and a Control Plane for Streaming Jobs
A rare control plane is a specific finding rather than a statistic. What 167 fingerprinted StreamPark instances against 170 titles say, and why job submission makes containment harder than firewall changes.
zoomeyestreampark
eiuspkz
eiuspkzOct 22, 2026
Quivr: 274 Fingerprints, 266 Titles, and a Retrieval Layer That Holds Both Keys and Knowledge
A retrieval platform holds the documents, the vectors derived from them and a provider key. What 274 fingerprinted Quivr instances against 266 titles say about a narrow surface with an unusually combined asset list.
zoomeyequivr
andreagomez205
andreagomez205Oct 22, 2026
AgentGPT: 1,022 Fingerprinted Deployments Where the Stored Secret Is an LLM API Key
An agent platform stores a metered credential, not just content. What 1,022 fingerprinted AgentGPT deployments and 984 matching titles indicate about a small surface where the loss is a continuous bill.
zoomeyeagentgpt
ioneyrezende
ioneyrezendeOct 22, 2026
A Stolen Configuration Is Not an Exploit, and That Is the Problem
Why stolen FortiGate configuration and credential material survives patching, and how to sequence rotation after a management-plane compromise.
Fortinetcredential rotation
ivanova
ivanovaOct 22, 2026
GlobalProtect on macOS: How CVE-2026-0315 Turns a Local Account into Root
Technical analysis of CVE-2026-0315, a local privilege escalation to root in the Palo Alto Networks GlobalProtect app for macOS, including affected builds, exposure caveats and remediation.
macosprivilege-escalation