Netlas.io
前往频道在 Telegram
Explore the latest in cybersecurity with Netlas.io. Stay ahead with updates on high-profile vulnerabilities, expert tutorials, essential safety tips, and the latest Netlas developments.
显示更多2 376
订阅者
+424 小时
+157 天
+4830 天
正在加载数据
相似频道
标签云
进出提及
---
---
---
---
---
---
吸引订阅者
十月 '2610月 '26
十月 '26
+81
在1个频道中
九月 '26
+87
在1个频道中
Get PRO
八月 '26
+81
在0个频道中
Get PRO
七月 '26
+103
在1个频道中
Get PRO
六月 '26
+89
在2个频道中
Get PRO
五月 '26
+90
在0个频道中
Get PRO
四月 '26
+64
在0个频道中
Get PRO
三月 '26
+53
在0个频道中
Get PRO
二月 '26
+63
在1个频道中
Get PRO
一月 '26
+55
在0个频道中
Get PRO
十二月 '25
+88
在0个频道中
Get PRO
十一月 '25
+96
在2个频道中
Get PRO
十月 '25
+62
在1个频道中
Get PRO
九月 '25
+74
在1个频道中
Get PRO
八月 '25
+73
在3个频道中
Get PRO
七月 '25
+90
在2个频道中
Get PRO
六月 '25
+106
在2个频道中
Get PRO
五月 '25
+59
在1个频道中
Get PRO
四月 '25
+59
在0个频道中
Get PRO
三月 '25
+60
在0个频道中
Get PRO
二月 '25
+43
在2个频道中
Get PRO
一月 '25
+54
在0个频道中
Get PRO
十二月 '24
+62
在1个频道中
Get PRO
十一月 '24
+155
在4个频道中
Get PRO
十月 '24
+73
在1个频道中
Get PRO
九月 '24
+76
在1个频道中
Get PRO
八月 '24
+62
在1个频道中
Get PRO
七月 '24
+77
在3个频道中
Get PRO
六月 '24
+53
在1个频道中
Get PRO
五月 '24
+77
在2个频道中
Get PRO
四月 '24
+133
在3个频道中
Get PRO
三月 '24
+92
在2个频道中
Get PRO
二月 '24
+78
在0个频道中
Get PRO
一月 '24
+110
在2个频道中
Get PRO
十二月 '23
+165
在3个频道中
Get PRO
十一月 '23
+84
在3个频道中
Get PRO
十月 '23
+451
在5个频道中
| 日期 | 订阅者增长 | 提及 | 频道 | |
| 31 十月 | 0 | |||
| 30 十月 | +5 | |||
| 29 十月 | +4 | |||
| 28 十月 | +4 | |||
| 27 十月 | +1 | |||
| 26 十月 | +2 | |||
| 25 十月 | +3 | |||
| 24 十月 | +3 | |||
| 23 十月 | +4 | |||
| 22 十月 | +4 | |||
| 21 十月 | +3 | |||
| 20 十月 | 0 | |||
| 19 十月 | +3 | |||
| 18 十月 | +1 | |||
| 17 十月 | +1 | |||
| 16 十月 | +2 | |||
| 15 十月 | +6 | |||
| 14 十月 | +3 | |||
| 13 十月 | +1 | |||
| 12 十月 | +10 | |||
| 11 十月 | +2 | |||
| 10 十月 | +2 | |||
| 09 十月 | +4 | |||
| 08 十月 | 0 | |||
| 07 十月 | +2 | |||
| 06 十月 | +2 | |||
| 05 十月 | +3 | |||
| 04 十月 | +2 | |||
| 03 十月 | +2 | |||
| 02 十月 | +1 | |||
| 01 十月 | +1 |
频道帖子
🚧 Planned Maintenance 🚧
Short-term interruptions in service provision are possible❗️
On Sunday, November 1, at 07:00 UTC ⏰, we are scheduling about 1 hour of maintenance to improve server stability and service quality. Short interruptions are possible while it is underway.
Please remember to save your work before this time.
| 2 |  Actively exploited RCE and other new WordPress vulnerabilities, no CVE assigned yet, 8.1 rating 🔥
The recently disclosed unauthenticated race-condition vulnerability in the WordPress Core update process can lead to remote code execution. This flaw is known to be actively exploited in the wild!
Other disclosed vulnerabilities include stored XSS, DoS, information disclosure, and authorization weaknesses.
Search at Netlas.io:
👉 Link: https://nt.ls/UTiOc
👉 Dork: tag.name:"wordpress"
Read more:
https://www.wordfence.com/blog/2026/10/wordpress-7-1-4-security-release-rce/ | 187 |
| 3 | ☀️Fingerprinting Exposed Solar Inverters with Netlas
In March 2025, Forescout's SUN:DOWN report showed that reaching enough solar inverters at once could nudge the grid itself. That only works if the devices are reachable — and a surprising number of them are, openly announcing their vendor, model, and firmware.
See what an inverter tells the internet about itself — and how that becomes a map of manufacturers, models, firmware, and locations.
👉 https://netlas.io/blog/fingerprinting_exposed_solar_inverters_with_netlas/ | 231 |
| 4 |  CVE-2026-103594 and others: Multiple vulnerabilities in WatchGuard Fireware OS, up to 9.5 rating 🔥
WatchGuard disclosed seventeen vulnerabilities in Fireware OS. The most severe flaws allow unauthenticated attackers to cause a DoS condition and potentially execute arbitrary code or invoke privileged system-level administrative actions.
Search at Netlas.io:
👉 Link: https://nt.ls/g5Xka
👉 Dork: certificate.subject_dn:"WatchGuard" OR http.favicon.hash_sha256:9560bc07784890efa36dc4636b6d5f091059914bb5cb8941d00c5b47646efb8c OR http.title:"Fireware XTM User Authentication"
Read more:
https://psirt.watchguard.com/ | 267 |
| 5 |  CVE-2026-115188 and others: Multiple vulnerabilities in Mautic, up to 9.9 rating 🔥
The Mautic project disclosed multiple vulnerabilities in the open-source Mautic marketing automation platform, including remote code execution (RCE) via unrestricted file upload, sandbox escape, PHP object injection, blind SQL injection, stored XSS, and other security flaws.
Search at Netlas.io:
👉 Link: https://nt.ls/PmA2e
👉 Dork: tag.name:"mautic"
Read more:
https://github.com/mautic/mautic/releases/tag/7.2.2 | 306 |
| 6 |  CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, and CVE-2026-110264: Four CVEs in Ruby’s regular expression engine, discovered by GitLab, up to 10.0 rating 🔥
Last week, the Ruby team released patches for several bugs in Ruby’s regular expression engine (Onigmo). GitLab found that these bugs could be exploited for RCE on GitLab servers. The same risk applies to any other Ruby application that compiles user-supplied regular expressions.
Search at Netlas.io:
👉 Link: https://nt.ls/1j93T
👉 Dork: tag.name:"ruby"
Vendor's advisory:
https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/ | 365 |
| 7 |  CVE-2026-114625: Actively exploited SQL injection flaw in Arista VeloCloud Orchestrator, 9.9 rating 🔥
Arista has disclosed a new SQL injection vulnerability in VeloCloud Orchestrator that allows any authenticated user to gain operator privileges and impersonate a local user with "superuser operator" privileges. This issue is known to be actively exploited!
Search at Netlas.io:
👉 Link: https://nt.ls/Z5tBM
👉 Dork: http.body:"single-spa-application:@velocloud/vco-header" OR http.body:"vco/branding.css" OR http.body:"vco/favicon"
Vendor's advisory:
https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199 | 437 |
| 8 | 📟Fingerprinting Exposed Siemens S7 PLCs with Netlas
In 2010, Stuxnet targeted Siemens PLCs. More than fifteen years later, thousands of these devices still answer on TCP port 102 — openly revealing their model, firmware version, and even the internal names engineers gave them.
See how a few Netlas queries narrow thousands of exposed S7 services down to the ones worth a closer look — and reveal a surprising trait many of those responses share.
👉 https://netlas.io/blog/fingerprinting_exposed_siemens_s7_plcs_with_netlas/ | 392 |
| 9 | 🚧 Planned Maintenance 🚧
Short-term interruptions in service provision are possible❗️
On Saturday, October 24, at 06:00 UTC ⏰, we will carry out work on both replicas aimed at improving server stability and quality of service. The work will take about 2 hours, and short interruptions are possible during this time.
Please remember to save your work before this time. | 365 |
| 10 | 🎥Turning Recon Data into Findings with Netlas
In his video, ZACK0X01 walks through the reconnaissance and scanning workflow behind his AI agent, showing how Netlas turns raw recon data into actionable findings.
You'll see how certificate and favicon hash searches can surface assets that subdomain enumeration misses, and how scanning turns a list of hosts into open services and technology fingerprints — with structured JSON output that's ready for automation.
👉 https://www.youtube.com/watch?v=v9v9eGpy87M | 383 |
| 11 |  CVE-2026-110264 and others: 12 new vulnerabilities in GitLab, up to 10.0 rating 🔥
GitLab has disclosed 12 new vulnerabilities affecting GitLab CE & EE. The most severe allows an unauthenticated remote attacker to execute arbitrary code on the GitLab server.
Search at Netlas.io:
👉 Link: https://nt.ls/dxdTf
👉 Dork: http.title:"Sign in · GitLab" OR http.unknown_headers.key:"x_gitlab_meta" OR http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef
Vendor's advisory:
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/ | 377 |
| 12 |  CVE-2026-109618 & CVE-2026-109619: Two RCE vulnerabilities in PHP (PHP2Shell), rating 9.2 for both 🔥
Today the PHP security team released an emergency update addressing two critical vulnerabilities in the PHP core, which allow unauthenticated remote code execution as the web worker account.
Details of the two vulnerabilities were disclosed by researchers yesterday, ahead of today’s release.
Search at Netlas.io:
👉 Link: https://nt.ls/MDn37
👉 Dork: tag.name:"php"
Vendor advisories:
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp | 392 |
| 13 | 🔍Using Netlas in Houdin
One ThreatFox indicator, one default certificate, and Netlas data in between: Houdin traces how a single alert turns into a list of servers running CyberStrikeAI, an open-source platform for AI-assisted attacks.
See how a shared certificate and a default page title become a search selector, and how to reproduce the pivot in Netlas.
👉 https://netlas.io/blog/using_netlas_in_houdin/ | 382 |
| 14 |  Token-based API guard authentication bypass in Laravel, no CVE assigned yet, 9.2 rating 🔥
An unauthenticated attacker may authenticate as another user without possessing that user's API token, leading to authentication bypass and account takeover on any route protected by Laravel's built-in TokenGuard when configured with a standard token-based API guard. This flaw affects applications using certain MySQL or MariaDB database configurations.
Search at Netlas.io:
👉 Link: https://nt.ls/kfDww
👉 Dork: tag.name:"laravel"
Vendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6 | 915 |
| 15 |  Multiple vulnerabilities in Roundcube, no CVE assigned 🤷🏻♂️
The Roundcube project today disclosed multiple vulnerabilities in Roundcube Webmail, including IMAP command injection, mail header injection, SSRF, CSRF, XSS, and other security issues.
Search at Netlas.io:
👉 Link: https://nt.ls/Hq2Fn
👉 Dork: tag.name:"roundcube"
Vendor's advisory:
https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5 | 395 |
| 16 | 🤝Netlas supported the DRIFT Linux project
DRIFT Linux is an open-source, not-for-profit project in digital forensics, OSINT, and cybersecurity. It shares knowledge and builds tools for incident investigation.
Netlas has supported independent research within the project. In the future, we hope to see Netlas integrated into DRIFT Linux as one of its tools.
Read more about project:
https://www.driftlinux.org | 383 |
| 17 |  CVE-2026-89067, CVE-2026-87093, and others: 12 new vulnerabilities in Progress MOVEit Transfer, up to 8.8 rating 🔥
Progress Software has disclosed twelve new vulnerabilities in MOVEit Transfer, including authentication bypass, local privilege escalation, SQL injection, and XSS. Successful exploitation could allow an attacker to gain unauthorized access or administrative control and could also lead to data exposure, service instability, and resource exhaustion.
Search at Netlas.io:
👉 Link: https://nt.ls/JYNPz
👉 Dork: tag.name:"progress_moveit"
Vendor's advisory:
https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026 | 457 |
| 18 | ⚙️Hunting Exposed LLM Infrastructure with Netlas
In this new article by CyberBit, we explore how any publicly accessible instance of a self-hosted LLM platform can reveal the models it uses and even the runtime environment on which the AI service operates.
See how unsecured AI gateways, configuration files, and leaked API keys create security threats, and how to detect them using Netlas.
👉 https://netlas.io/blog/hunting_exposed_llm_infrastructure_with_netlas/ | 489 |
| 19 |  CVE-2026-97205, CVE-2026-93479, and CVE-2026-15176: Three new vulnerabilities in NGINX, 9.2 rating 🔥
F5 has disclosed three new vulnerabilities in NGINX Plus and NGINX Open Source. All of them expose the data plane to remote DoS attacks and potential RCE. An unauthenticated attacker can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.
Search at Netlas.io:
👉 Link: https://nt.ls/Jv7X3
👉 Dork: tag.name:"nginx"
Vendor advisories:
https://my.f5.com/manage/s/article/K000162608
https://my.f5.com/manage/s/article/K000162607
https://my.f5.com/manage/s/article/K000162416 | 618 |
| 20 |  CVE-2026-74040, CVE-2026-74041 and others: 15 new vulnerabilities in Wazuh, up to 9.1 rating 🔥
Wazuh has disclosed 15 new vulnerabilities in its open-source platform. Two of them could allow an attacker to execute code as root.
Search at Netlas.io:
👉 Link: https://nt.ls/lD8bp
👉 Dork: certificate.issuer_dn:"Wazuh" OR http.headers.server:"Wazuh" OR raw.banner:"Unable to add agent"
Vendor's advisory:
https://github.com/wazuh/wazuh/security/advisories | 440 |
