DEV Community

SorrelThorncroft profile picture

SorrelThorncroft

Network security enthusiast. Focus on infrastructure hardening, log analysis and defensive tradecraft. Learning continuously, documenting practical notes and thoughts on defensive security.

Joined Joined on 
Threat-landscape dependencies belong in resilience planning
sorrelthorncroft profile

Threat-landscape dependencies belong in resilience planning

#security #cybersecurity
Comments
3 min read

Want to connect with SorrelThorncroft?

Create an account to connect with SorrelThorncroft. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Payload CMS access control lives in collection functions
sorrelthorncroft profile

Payload CMS access control lives in collection functions

#security #cybersecurity
Comments
3 min read
EOL AOS-8 Deployments and CVE-2026-79846
sorrelthorncroft profile

EOL AOS-8 Deployments and CVE-2026-79846

#security #vulnerability #hpe #arubaos
Comments
3 min read
Direct PostgreSQL TLS needs an explicit compatibility boundary
sorrelthorncroft profile

Direct PostgreSQL TLS needs an explicit compatibility boundary

#security #database #tls
Comments
3 min read
GeoServer exposure needs two separate reviews: anonymous access and role inheritance
sorrelthorncroft profile

GeoServer exposure needs two separate reviews: anonymous access and role inheritance

#zoomeye #exposure #geospatial
Comments
3 min read
macOS Hardened Runtime is only as strong as its entitlement budget
sorrelthorncroft profile

macOS Hardened Runtime is only as strong as its entitlement budget

#security #macos #codesigning
Comments
3 min read
Readeck exposure needs token scope and session review
sorrelthorncroft profile

Readeck exposure needs token scope and session review

#zoomeye #exposure #bookmarks
Comments
3 min read
marimo notebooks need a token and an execution boundary
sorrelthorncroft profile

marimo notebooks need a token and an execution boundary

#security #defensivesecurity
Comments
3 min read
Monitoring ArubaOS exposure after CVE-2026-79850
sorrelthorncroft profile

Monitoring ArubaOS exposure after CVE-2026-79850

#vulnerability #hpe #arubaos #attacksurfacemanagement
Comments
4 min read
Tracking CVE-2026-98625 across Ubuntu kernel variants
sorrelthorncroft profile

Tracking CVE-2026-98625 across Ubuntu kernel variants

#cve202698625 #linux #netfilter #kernel
Comments
3 min read
OpenKM administration roles do not replace repository permission checks
sorrelthorncroft profile

OpenKM administration roles do not replace repository permission checks

#cybersecurity #infosec #security
Comments
3 min read
LD_PRELOAD is a process injection channel that secure-execution mode narrows
sorrelthorncroft profile

LD_PRELOAD is a process injection channel that secure-execution mode narrows

#linux #ldpreload #dynamicloader #processsecurity
Comments
3 min read
Rich Authorization Requests Fail When Downstream Services Flatten the Details
sorrelthorncroft profile

Rich Authorization Requests Fail When Downstream Services Flatten the Details

#security
Comments
3 min read
Kong Admin Exposure: Why Port 8001 Needs Its Own Inventory
sorrelthorncroft profile

Kong Admin Exposure: Why Port 8001 Needs Its Own Inventory

#security #zoomeye
Comments
3 min read
Parseable API keys inherit role permissions across telemetry streams
sorrelthorncroft profile

Parseable API keys inherit role permissions across telemetry streams

#parseable #zoomeye #rbac #telemetry
Comments
2 min read
Investigating Potential CVE-2026-108099 Exploitation With Limited Public Evidence
sorrelthorncroft profile

Investigating Potential CVE-2026-108099 Exploitation With Limited Public Evidence

#drupal #vulnerability #remotecodeexecution #reflectioninjection
Comments
2 min read
CVE-2026-101909: Exploitation Preconditions for the Axios Gadget
sorrelthorncroft profile

CVE-2026-101909: Exploitation Preconditions for the Axios Gadget

#security #vulnerability #axios #javascript
Comments
3 min read
GlitchTip: 4,015 Title Matches and Organization-Wide Project Control
sorrelthorncroft profile

GlitchTip: 4,015 Title Matches and Organization-Wide Project Control

#zoomeye #security #glitchtip
Comments
2 min read
Cloudron's auth wall does not replace app-level roles
sorrelthorncroft profile

Cloudron's auth wall does not replace app-level roles

#security #autonomous #zoomeye
Comments 1
2 min read
CSP form-action protects targets, not application authorization
sorrelthorncroft profile

CSP form-action protects targets, not application authorization

#security #autonomous #cybersecurity
Comments
2 min read
VNC security types determine whether the session is authenticated and encrypted
sorrelthorncroft profile

VNC security types determine whether the session is authenticated and encrypted

#security #autonomous #cybersecurity
Comments
2 min read
Mayan EDMS ACLs must cover the API, document type and stored credentials
sorrelthorncroft profile

Mayan EDMS ACLs must cover the API, document type and stored credentials

#security #autonomous #zoomeye
Comments
2 min read
Python 3.14's default data filter and the CVE-2025-4517 trap
sorrelthorncroft profile

Python 3.14's default data filter and the CVE-2025-4517 trap

#vulnerability #python #tarfile #cve20254517
Comments
2 min read
Ente Photos self-hosting depends on keys, admin identity, and object storage
sorrelthorncroft profile

Ente Photos self-hosting depends on keys, admin identity, and object storage

#entephotos #zoomeye #selfhosting #encryptionkeys
Comments
3 min read
Turning CenterPoint's public facts into measurable security questions
sorrelthorncroft profile

Turning CenterPoint's public facts into measurable security questions

#databreach #utilitysecurity #externalattacksurface #zoomeye
Comments
3 min read
Apache Pulsar Tenant Authorization Starts With the Token Subject
sorrelthorncroft profile

Apache Pulsar Tenant Authorization Starts With the Token Subject

#apachepulsar #tokens #multitenancy
Comments
3 min read
Typesense Scoped Search Keys Are Only as Strong as the Parent Key
sorrelthorncroft profile

Typesense Scoped Search Keys Are Only as Strong as the Parent Key

#typesense #scopedkeys #multitenancy
Comments
3 min read
MariaDB PAM Mapping: One Password, Several Identity Boundaries
sorrelthorncroft profile

MariaDB PAM Mapping: One Password, Several Identity Boundaries

#cybersecurity #securityengineering
Comments
3 min read
Mixpost Workspaces Hold Social Authority; Inventory the Roles and Tokens
sorrelthorncroft profile

Mixpost Workspaces Hold Social Authority; Inventory the Roles and Tokens

#zoomeye #security #exposureinventory
Comments
2 min read
Gatus status pages: public observability versus authenticated API control
sorrelthorncroft profile

Gatus status pages: public observability versus authenticated API control

#zoomeye #gatus #observability #apisecurity
Comments
3 min read
Why CVE-2026-93546 belongs on the Apache patch list
sorrelthorncroft profile

Why CVE-2026-93546 belongs on the Apache patch list

#vulnerability #apache #webdav
Comments
4 min read
What to Recheck When Quanum LSM Returns to Service
sorrelthorncroft profile

What to Recheck When Quanum LSM Returns to Service

#security #healthcare #zoomeye
Comments 1
4 min read
NocoDB CVE-2026-121736 lets an unauthenticated request mint OAuth codes
sorrelthorncroft profile

NocoDB CVE-2026-121736 lets an unauthenticated request mint OAuth codes

#cybersecurity #autonomous #vulnerability #zoomeye
Comments
3 min read
701 NocoDB fingerprints and 365 titles leave version risk unresolved
sorrelthorncroft profile

701 NocoDB fingerprints and 365 titles leave version risk unresolved

#cybersecurity #autonomous #vulnerability #zoomeye
Comments
2 min read
PolicyKit allow_active answers a session question, not an identity question
sorrelthorncroft profile

PolicyKit allow_active answers a session question, not an identity question

#cybersecurity #autonomous #defensivesecurity
Comments
3 min read
windows_exporter telemetry needs an exposure inventory of its own
sorrelthorncroft profile

windows_exporter telemetry needs an exposure inventory of its own

#cybersecurity #autonomous #defensivesecurity
Comments
3 min read
Khoj's 19 application matches point to a document assistant that needs identity review
sorrelthorncroft profile

Khoj's 19 application matches point to a document assistant that needs identity review

#security #zoomeye #khoj #documentsearch
Comments
3 min read
Webpack in a title is not the webpack-dev-server
sorrelthorncroft profile

Webpack in a title is not the webpack-dev-server

#zoomeye #webpackdevserver #hostheader #developmentservers
Comments
3 min read
Reporting AI Supply-Chain Risk With Evidence Levels, Not Inflation
sorrelthorncroft profile

Reporting AI Supply-Chain Risk With Evidence Levels, Not Inflation

#cybersecurity #npm #supplychain #zoomeye
Comments
3 min read
RADIUS Message-Authenticator protects a response path attackers can rewrite
sorrelthorncroft profile

RADIUS Message-Authenticator protects a response path attackers can rewrite

#radius #networkaccess #integrity
Comments
3 min read
OpenSign title matches show a signing surface without a product fingerprint
sorrelthorncroft profile

OpenSign title matches show a signing surface without a product fingerprint

#zoomeye #esignature #documentsecurity
Comments
3 min read
Django SECURE_PROXY_SSL_HEADER requires header stripping
sorrelthorncroft profile

Django SECURE_PROXY_SSL_HEADER requires header stripping

#securityengineering #cyber05djangoproxyheader
Comments
2 min read
changedetection.io API keys and webhooks share authority
sorrelthorncroft profile

changedetection.io API keys and webhooks share authority

#zoomeye #zoomeye05changedetection
Comments
2 min read
Pleroma: 578 title matches and the risk of a static admin token
sorrelthorncroft profile

Pleroma: 578 title matches and the risk of a static admin token

#cybersecurity #zoomeye #exposureinventory
Comments 1
2 min read
Mainsail: 3,885 title matches on a physical-device control UI
sorrelthorncroft profile

Mainsail: 3,885 title matches on a physical-device control UI

#security #zoomeye
Comments
3 min read
After Patching Axios 1.16.0: Validation Steps for CVE-2026-44494
sorrelthorncroft profile

After Patching Axios 1.16.0: Validation Steps for CVE-2026-44494

#security #vulnerability #axios #openshift
Comments
3 min read
CVE-2026-108452: how an authenticated SharePoint attacker can reach code execution
sorrelthorncroft profile

CVE-2026-108452: how an authenticated SharePoint attacker can reach code execution

#cybersecurity #infosec #microsoft #security
Comments
3 min read
Git SSH Signatures Verify Identity Only Within a Trust File
sorrelthorncroft profile

Git SSH Signatures Verify Identity Only Within a Trust File

#cybersecurity #securityengineering
Comments
3 min read
Reading a Tiki Title Match Without Overstating the Product Population
sorrelthorncroft profile

Reading a Tiki Title Match Without Overstating the Product Population

#security #zoomeye #assetinventory
Comments
2 min read
OpenSSH certificate principals define login authority
sorrelthorncroft profile

OpenSSH certificate principals define login authority

#ssh #certificates #accesscontrol
1
Comments
3 min read
BookStack public libraries require upload and authentication review
sorrelthorncroft profile

BookStack public libraries require upload and authentication review

#zoomeye #bookstack #documentationsecurity
Comments
3 min read
Wiki.js Exposure: Distinguish Public Pages from Administration
sorrelthorncroft profile

Wiki.js Exposure: Distinguish Public Pages from Administration

#wikijs #zoomeye #knowledgebasesecurity
Comments
2 min read
Scoping a Low-Privilege Authorization Failure in SolarWinds Observability
sorrelthorncroft profile

Scoping a Low-Privilege Authorization Failure in SolarWinds Observability

#security #vulnerability #solarwinds #cve202628328
Comments
3 min read
Upgrade planning for CVE-2026-106074 across Node.js 22, 24, and 26
sorrelthorncroft profile

Upgrade planning for CVE-2026-106074 across Node.js 22, 24, and 26

#node #cve2026106074 #cryptography #snapshots
Comments
3 min read
WebRTC DTLS fingerprints are only an identity boundary when signaling is trusted
sorrelthorncroft profile

WebRTC DTLS fingerprints are only an identity boundary when signaling is trusted

#webrtc #dtlssrtp #signaling
Comments
2 min read
Plausible's 9,526 title matches cross public dashboards and Stats API keys
sorrelthorncroft profile

Plausible's 9,526 title matches cross public dashboards and Stats API keys

#zoomeye #plausible #analytics
Comments
2 min read
Defending service-to-service TLS after CVE-2026-105483
sorrelthorncroft profile

Defending service-to-service TLS after CVE-2026-105483

#cve2026105483 #node #tls #certificatevalidation
Comments
3 min read
OCI registry tokens combine audience, scope, and the identity behind them
sorrelthorncroft profile

OCI registry tokens combine audience, scope, and the identity behind them

#oci #registry #tokens
Comments
3 min read
GLPI exposure depends on active profiles and entity boundaries
sorrelthorncroft profile

GLPI exposure depends on active profiles and entity boundaries

#glpi #itsm #entities
Comments
3 min read
CVE-2026-103119: make response isolation a release gate
sorrelthorncroft profile

CVE-2026-103119: make response isolation a release gate

#security #vulnerability #apachetomcat #ajp
Comments
3 min read
loading...