Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
zoomeye
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Invoice Ninja: The Client Portal Is Part of the Exposure Surface
johnettagaweraks
johnettagaweraks
johnettagaweraks
Follow
Nov 6
Invoice Ninja: The Client Portal Is Part of the Exposure Surface
#
zoomeye
#
security
#
exposureinventory
Comments
Add Comment
2 min read
Moderation
Komga: API Keys and Library Restrictions Need to Be Reviewed Together
andreagomez
andreagomez
andreagomez
Follow
Nov 6
Komga: API Keys and Library Restrictions Need to Be Reviewed Together
#
zoomeye
#
security
#
exposureinventory
Comments
Add Comment
2 min read
Moderation
LocalAI API exposure and the model-management control plane
johnettagaweraks
johnettagaweraks
johnettagaweraks
Follow
Nov 5
LocalAI API exposure and the model-management control plane
#
zoomeye
#
localai
#
aisecurity
#
apisecurity
Comments
Add Comment
3 min read
Moderation
Mixpost Workspaces Hold Social Authority; Inventory the Roles and Tokens
SorrelThorncroft
SorrelThorncroft
SorrelThorncroft
Follow
Nov 6
Mixpost Workspaces Hold Social Authority; Inventory the Roles and Tokens
#
zoomeye
#
security
#
exposureinventory
Comments
Add Comment
2 min read
Moderation
Karakeep Crawlers Extend an SSRF Boundary Into the Internal Network
kozhevniko
kozhevniko
kozhevniko
Follow
Nov 6
Karakeep Crawlers Extend an SSRF Boundary Into the Internal Network
#
zoomeye
#
security
#
exposureinventory
Comments
Add Comment
2 min read
Moderation
Activepieces workflow exposure: title and body evidence around automation credentials
facilishz
facilishz
facilishz
Follow
Nov 5
Activepieces workflow exposure: title and body evidence around automation credentials
#
zoomeye
#
activepieces
#
automation
#
credentials
Comments
Add Comment
3 min read
Moderation
Gatus status pages: public observability versus authenticated API control
SorrelThorncroft
SorrelThorncroft
SorrelThorncroft
Follow
Nov 5
Gatus status pages: public observability versus authenticated API control
#
zoomeye
#
gatus
#
observability
#
apisecurity
Comments
Add Comment
3 min read
Moderation
Statping-ng inventory starts with administrator defaults
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Nov 5
Statping-ng inventory starts with administrator defaults
#
zoomeye
#
monitoring
#
authentication
Comments
Add Comment
2 min read
Moderation
Stack Auth visibility is a reminder to inventory application identity
StarkMan
StarkMan
StarkMan
Follow
Nov 5
Stack Auth visibility is a reminder to inventory application identity
#
zoomeye
#
identity
#
applicationsecurity
Comments
Add Comment
2 min read
Moderation
OpenStatus status pages need an access model before publication
kozhevniko
kozhevniko
kozhevniko
Follow
Nov 5
OpenStatus status pages need an access model before publication
#
zoomeye
#
statuspage
#
accesscontrol
Comments
Add Comment
2 min read
Moderation
Cosmos Cloud URL authentication is a per-resource decision
yutianle
yutianle
yutianle
Follow
Nov 5
Cosmos Cloud URL authentication is a per-resource decision
#
zoomeye
#
reverseproxy
#
authentication
#
selfhosting
Comments
Add Comment
3 min read
Moderation
Recovery Proof After the Nextcloud richdocumentscode Exploit
johnettagaweraks
johnettagaweraks
johnettagaweraks
Follow
Nov 5
Recovery Proof After the Nextcloud richdocumentscode Exploit
#
security
#
nextcloud
#
collabora
#
zoomeye
Comments
Add Comment
5 min read
Moderation
FrankenPHP appears more often by runtime than by page title
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Nov 5
FrankenPHP appears more often by runtime than by page title
#
zoomeye
#
php
#
runtimeinventory
Comments
Add Comment
3 min read
Moderation
Paperless-ngx has a stable fingerprint and an expanding document surface
kozhevniko
kozhevniko
kozhevniko
Follow
Nov 5
Paperless-ngx has a stable fingerprint and an expanding document surface
#
zoomeye
#
documentmanagement
#
permissions
Comments
Add Comment
3 min read
Moderation
Detection Engineering for the richdocumentscode Command Injection
andreagomez
andreagomez
andreagomez
Follow
Nov 5
Detection Engineering for the richdocumentscode Command Injection
#
security
#
nextcloud
#
collabora
#
zoomeye
Comments
Add Comment
4 min read
Moderation
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account