DEV Community

StarkMan profile picture

StarkMan

404 bio not found

Joined Joined on 
The Unauthenticated Docker API: 298,430 Exposed Endpoints and Why Port 2375 Still Matters
stark_zhuang_df5076f35c68 profile

The Unauthenticated Docker API: 298,430 Exposed Endpoints and Why Port 2375 Still Matters

#zoomeye #docker #containersecurity #exposure
Comments
3 min read

Want to connect with StarkMan?

Create an account to connect with StarkMan. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Tool-Call Injection in LLM Agents: Why Your MCP Server Is the New Attack Surface
stark_zhuang_df5076f35c68 profile

Tool-Call Injection in LLM Agents: Why Your MCP Server Is the New Attack Surface

#aisecurity #llm #mcp #promptinjection
Comments
4 min read
15.6 Million Exposed RDP Endpoints: Why Remote Desktop Remains the Favourite Initial Access Vector
stark_zhuang_df5076f35c68 profile

15.6 Million Exposed RDP Endpoints: Why Remote Desktop Remains the Favourite Initial Access Vector

#zoomeye #rdp #ransomware #remoteaccess
Comments
4 min read
CVE-2026-87827 and the botnet supply chain behind cheap DVR hardware
stark_zhuang_df5076f35c68 profile

CVE-2026-87827 and the botnet supply chain behind cheap DVR hardware

#vulnerability #iot #kguard #cve202687827
Comments
2 min read
CVE-2026-73807 and CVE-2026-82567: Missing Authorization in mySCADA myPRO Manager
stark_zhuang_df5076f35c68 profile

CVE-2026-73807 and CVE-2026-82567: Missing Authorization in mySCADA myPRO Manager

#vulnerability #ics #myscada #cve202673807
Comments
2 min read
Why CVE-2026-67277 Reached the CISA KEV Catalog So Fast
stark_zhuang_df5076f35c68 profile

Why CVE-2026-67277 Reached the CISA KEV Catalog So Fast

#security #vulnerability #mikrotik #routeros
Comments
3 min read
When an Authentication Filter Reads the URL Instead of the Route: Lessons from CVE-2026-49869 in Kestra
stark_zhuang_df5076f35c68 profile

When an Authentication Filter Reads the URL Instead of the Route: Lessons from CVE-2026-49869 in Kestra

#security #authentication #kestra #cve202649869
Comments
4 min read
CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization
stark_zhuang_df5076f35c68 profile

CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization

#security #vulnerability #starlette #fastapi
1
Comments
4 min read
Exposed PLCs in the Water Sector: What CISA's Alert Reveals About Internet-Facing OT
stark_zhuang_df5076f35c68 profile

Exposed PLCs in the Water Sector: What CISA's Alert Reveals About Internet-Facing OT

#cybersecurity #infosec #iot #security
Comments
5 min read
Langflow CVE-2026-12944: How a Scanner Blocklist Gap Turns Into Root Code Execution
stark_zhuang_df5076f35c68 profile

Langflow CVE-2026-12944: How a Scanner Blocklist Gap Turns Into Root Code Execution

#security #vulnerability #langflow #ssrf
Comments
4 min read
SonicWall SMA1000 Command Injection (CVE-2026-83549): Chained Zero-Day to Root on the Edge
stark_zhuang_df5076f35c68 profile

SonicWall SMA1000 Command Injection (CVE-2026-83549): Chained Zero-Day to Root on the Edge

#vulnerability #sonicwall #sma1000 #cve202683549
Comments
3 min read
The Management Plane Is the Attack Surface: What Cisco FMC's Exploited Zero-Day Teaches About Exposed Admin Interfaces
stark_zhuang_df5076f35c68 profile

The Management Plane Is the Attack Surface: What Cisco FMC's Exploited Zero-Day Teaches About Exposed Admin Interfaces

#cybersecurity #attacksurface #exposuremanagement #cisco
Comments
5 min read
Exposed PLCs Are Still on the Internet: What CISA's Water Sector Alert Means for Attack Surface Management
stark_zhuang_df5076f35c68 profile

Exposed PLCs Are Still on the Internet: What CISA's Water Sector Alert Means for Attack Surface Management

#security #otsecurity #ics #zoomeye
Comments
5 min read
Security Exposure Counts Need Context
stark_zhuang_df5076f35c68 profile

Security Exposure Counts Need Context

#security #beginners
Comments
1 min read
Use ZoomEye to find Jupyter servers without identity verification enabled
stark_zhuang_df5076f35c68 profile

Use ZoomEye to find Jupyter servers without identity verification enabled

#cybersecurity #osint
Comments
6 min read
Best Practices for Enhancing Attack Surface Management and Accelerating Vulnerability Response
stark_zhuang_df5076f35c68 profile

Best Practices for Enhancing Attack Surface Management and Accelerating Vulnerability Response

#cybersecurity #osint
Comments
2 min read
Shodan vs ZoomEye Query Syntax Comparison
stark_zhuang_df5076f35c68 profile

Shodan vs ZoomEye Query Syntax Comparison

#cybersecurity #osint
1
Comments
2 min read
A Complete Guide to the Latest ZoomEye Search Syntax
stark_zhuang_df5076f35c68 profile

A Complete Guide to the Latest ZoomEye Search Syntax

#cybersecurity #osint
2
Comments
6 min read
Top 5 Domain and IP Intelligence Tools in OSINT
stark_zhuang_df5076f35c68 profile

Top 5 Domain and IP Intelligence Tools in OSINT

#cybersecurity #osint
2
Comments
3 min read
The Hunter Behind the Hacker
stark_zhuang_df5076f35c68 profile

The Hunter Behind the Hacker

#cybersecurity #osint
Comments 1
3 min read
Top 5 Technical Asset Discovery Tools in OSINT
stark_zhuang_df5076f35c68 profile

Top 5 Technical Asset Discovery Tools in OSINT

#cybersecurity #osint
Comments
3 min read
loading...