Skip to content
Standard Reader
Log in
ivanova
Author

ivanova

@iva-nova.bsky.social
Follow

The ivanova man.

ivanova
ivanovaOct 24, 2026
draw.io: 18,375 Fingerprints Against 309 Titles, and Why Architecture Diagrams Leak Topology
Architecture diagrams name hosts, subnets and data flows. A fingerprint count of 18,375 against 309 title matches says most draw.io deployments are embedded where a title search will never find them.
zoomeyedrawio
ivanova
ivanovaOct 24, 2026
Fuxa: 694 Fingerprints on a Browser-Based HMI, and 3,795 Titles That Overstate It
A browser-based HMI does not only display a process, it can command one. What 694 fingerprinted Fuxa hosts and 3,795 title matches say, and why a small count still carries physical consequence.
zoomeyefuxa
ivanova
ivanovaOct 24, 2026
AIStore's legacy ETL API accepted Kubernetes security settings from the caller
CVE-2026-65162: NVIDIA AIStore's legacy ETL PodSpec API let a remote caller supply host namespace and container security settings, putting the cluster rather than the pod in scope.
kubernetescontainer-escape
ivanova
ivanovaOct 23, 2026
CVE-2026-96655: what the Plex Media Server SSRF actually exposes
CVE-2026-96655: what the Plex Media Server SSRF actually exposes
vulnerabilityCVE-2026-96655
ivanova
ivanovaOct 23, 2026
NGINX's October fixes: five CVEs and the configuration questions that decide your exposure
securitycybersecurity_article
ivanova
ivanovaOct 23, 2026
An authentication bypass on a remote-support appliance is a key to every site it manages
An authentication bypass on a remote-support appliance is a key to every site it manages
security
ivanova
ivanovaOct 23, 2026
The .pth file that runs before your code: lessons from the LiteLLM 1.107.0 compromise
How a .pth file in LiteLLM 1.107.0 ran a credential stealer before any import, and the checks that answer whether you were exposed.
supply-chainlitellm
ivanova
ivanovaOct 23, 2026
Drone: 4,692 fingerprints against 26,577 titles, and a CI server that already holds your deploy keys
Drone: 4,692 fingerprints against 26,577 titles, and a CI server that already holds your deploy keys
security
ivanova
ivanovaOct 23, 2026
Read-Only Was Never Harmless: Identity Lessons from CVE-2026-114625
CVE-2026-114625 makes every VeloCloud Orchestrator login a potential escalation path, including read-only tenant accounts. Here is how to re-scope account inventory.
identityleast-privilege
ivanova
ivanovaOct 22, 2026
When the search returns nothing: reading zero and near-zero results for a niche security product
securityzoomeye_article
ivanova
ivanovaOct 22, 2026
Nomad's default port answers on one host and its console appears on eleven thousand
Nomad's default port answers on one host and its console appears on eleven thousand
securityattack-surface-management
ivanova
ivanovaOct 22, 2026
GlobalProtect on macOS: How CVE-2026-0315 Turns a Local Account into Root
Technical analysis of CVE-2026-0315, a local privilege escalation to root in the Palo Alto Networks GlobalProtect app for macOS, including affected builds, exposure caveats and remediation.
macosprivilege-escalation