Sizing CVE-2025-38680 Exposure: What 18.2 Million Linux SSH Hosts Do and Do Not Tell You
Sizing CVE-2025-38680 Exposure: What 18.2 Million Linux SSH Hosts Do and Do Not Tell You Vulnerability overview CVE-2025-38680 is a Linux kernel out…
Последние новости Open Source от Tech News
Sizing CVE-2025-38680 Exposure: What 18.2 Million Linux SSH Hosts Do and Do Not Tell You Vulnerability overview CVE-2025-38680 is a Linux kernel out…
Penpot returned a true zero: 3,617 title matches and no fingerprint in any field Zero is a result worth reporting precisely, and it is also easy to…
Apache Airflow on 73,265 observed hosts: the scheduler that holds every connection string A ZoomEye fingerprint query for app="Apache Airflow" ( res…
Scoping Estonia’s Public-Sector Attack Surface After September’s DDoS Wave In September 2026, Estonia’s state information system authority, the Riig…
Collaboration Platforms Under Measurement: 185,584 Confluence and 91,979 Jira Instances Collaboration platforms rank high on attacker lists because…
9,045 internet-reachable Couchbase instances: measuring the document database layer Opening Couchbase is a distributed document database. It has a q…
17,474 MLflow Servers Online: Experiment Tracking as an Exposure Problem A query for the MLflow application fingerprint returned 17,474 records on 2…
1,577,590 F5 BIG-IP Matches: Sizing the Management Plane After Two KEV Entries When CISA added F5 BIG-IP APM CVE-2026-94127 to the Known Exploited V…
An LLM observability platform stores prompts, and prompts are the application A title query for Langfuse returns 346 matches in ZoomEye. The number…
Apache Zeppelin on the Internet: 25,617 Fingerprint Matches and a Notebook With Cluster Credentials Why a notebook server is a high-value service Ze…
6,918 Paperless matches: a document archive that was meant to replace the filing cabinet Paperless-ngx scans paper documents, runs optical character…
Telling Docker Daemons Apart from Other Docker-Facing Services Docker is a name for several things that answer on a network. The CARBONATO advisory…
55,812 SonicWall SSL-VPN Assets on HTTP and the Management Plane Problem Remote access products are measured differently from web servers, because t…
What Click2Shell Teaches About Reporting a Parser Discrepancy Most RCE disclosures lead with the code execution. The Click2Shell report, published S…
Why "Zimbra Web Client" Appears Half a Million Times and Almost None of It Is a Mail Server CISA advisory AA26-204A, released 23 July 2026, describe…
Concourse: 3,767 title matches on the pipeline system that executes your build code A continuous integration system runs code that the organisation…
1,890,595 MongoDB Service Matches: The Default-Configuration Problem at Internet Scale MongoDB has supported authentication for many years, and its…
5432 and 1433: two database ports, ten million answers, and the question of what answered The counts Database ports appear at very large scale in in…
Small Numbers, Real Findings: AWX, NiFi, Pulsar and CockroachDB ZoomEye queries on 26 September 2026 returned 6,087 matches for app="Apache NiFi", 5…
Graylog on the Internet: 14,061 Matches on a Platform That Centralises Every Log Log aggregation platforms exist to collect data from every other sy…
917,169 Matches on Port 623 and 109,327 on app="IPMI": Two Views of the Out-of-Band Layer Baseboard management controllers are the machines that wat…
2,404,811 answers on port 2181 and 1,381,208 on port 9092: the difference between a coordinator and a broker The counts Two ports associated with di…
Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out Verdaccio is a lightweight private registry for npm packages. Teams ru…
152,655 Matches for ownCloud and the CVE That Matches It Exactly When a product query and a CVE filter return the same number CVE-2023-49105 is an a…
73,105 Airflow instances, 11,673 SonarQube and 33,837 Nexus: fingerprinting the build and quality toolchain The counts Three products that sit in th…
132,158 Observable Magento Stores: Sizing the Population Exposed in the StyleSmuggler Window Opening CVE-2026-75650 (StyleSmuggler) was exploited fr…
5,102,346 Hosts on Port 5900: VNC and the Legacy Remote-Access Surface VNC predates most of the security assumptions that modern remote access takes…
The Virtualization Control Plane Is on the Internet: 414,092 ESXi and 140,746 Proxmox VE Fingerprints A hypervisor is not a workload. It is the laye…
AI Gateways Are Becoming Attack Surface: Measuring Exposed LiteLLM Deployments A new category of infrastructure has quietly joined the list of thing…
90,626 Jupyter Notebooks Are Publicly Indexed: The Difference Between Sharing and Exposing Jupyter notebooks are where analysis happens: data explor…