Skip to content
Standard
Reader
Log in
Author
@andreagomez205.bsky.social
@andreagomez205.bsky.social
Follow
Posts
17
Publications
1
andreagomez205
·
Oct 24, 2026
Log injection turns ZooKeeper audit records into attacker-controlled text
Log injection turns ZooKeeper audit records into attacker-controlled text
security
·
vulnerability-management
andreagomez205
·
Oct 24, 2026
Harbor's Search API Answered Without Authorisation, and the Vendor Called It a Feature
The registry search endpoint answered anonymous callers, and the maintainers said that was documented behaviour. Why registry inventory is reconnaissance, and how to check what your registry returns.
harbor
·
cve-2022-46463
andreagomez205
·
Oct 24, 2026
A 16-byte addition in AnyDesk's mode-5 handler wrapped to zero
CVE-2026-109390: an unvalidated payload length in AnyDesk's mode-5 handler wraps a 32-bit addition, allocates a tiny buffer and overflows it in a root process.
memory-corruption
·
remote-support
andreagomez205
·
Oct 24, 2026
NetBird: 12,226 title matches, 3 application matches, 1,234 certificate hits
NetBird shows 12,226 title matches, three application matches and 1,234 certificate hits, a spread that maps onto dashboard, management API and relay components.
zoomeye
·
zero-trust
andreagomez205
·
Oct 23, 2026
Reading the KEV listing: CVE-2026-96655 and due dates that matter
Reading the KEV listing: CVE-2026-96655 and due dates that matter
vulnerability
·
CVE-2026-96655
andreagomez205
·
Oct 23, 2026
ONLYOFFICE's upload path walked out of the upload directory and took the document server with it
ONLYOFFICE's upload path walked out of the upload directory and took the document server with it
security
andreagomez205
·
Oct 23, 2026
Why the VeloCloud Orchestrator stays reachable, and what that means for CVE-2026-114625
Technical analysis of CVE-2026-114625 in Arista VeloCloud Orchestrator.
vulnerability
·
sd-wan
andreagomez205
·
Oct 23, 2026
LibreChat: 12,283 fingerprints, 13,265 titles, and a chat front end that stores the keys to every model
LibreChat: 12,283 fingerprints, 13,265 titles, and a chat front end that stores the keys to every model
security
andreagomez205
·
Oct 23, 2026
Hunting CVE-2026-114625: What to Look for After the VeloCloud Orchestrator Patch
How to hunt for exploitation of CVE-2026-114625 in VeloCloud Orchestrator: log fields, attributed attacker IPs, evidence preservation order, and why the patch alone is not enough.
detection
·
incident-response
andreagomez205
·
Oct 22, 2026
Apache httpd's October fixes and the mod_vhost_alias precondition nobody checks
security
·
zoomeye_article
andreagomez205
·
Oct 22, 2026
AgentGPT: 1,022 Fingerprinted Deployments Where the Stored Secret Is an LLM API Key
An agent platform stores a metered credential, not just content. What 1,022 fingerprinted AgentGPT deployments and 984 matching titles indicate about a small surface where the loss is a continuous bill.
zoomeye
·
agentgpt
andreagomez205
·
Oct 22, 2026
How the four Plex CVEs relate: three request flaws and one path to code execution
security
Home
Latest
Discover
Search
