Engineering notes from the trenches.
Reverse-engineering APIs, automation that survives production, security research, and honest takes on the tools I ship with.
Filtered by tag:#vulnerability-analysis×
Sort
2 posts ← reset filters
SecurityThat Nslookup Endpoint Is a Shell: Ruijie's CVE-2026-12197 and the Persistent Stupidity of Router Diagnostic APIs
CVE-2026-12197 reveals command injection in Ruijie EG105G-P's JSON-RPC diagnose endpoint—here's why nslookup endpoints keep handing out shells, how to detect them, and what to do about it.
Jun 16, 2026 · 13 min
SecurityThe API trusted the token. That's the whole story.
A comment in nebula-mesh's code confesses the design flaw: API trusts the bearer token for authorization. Here's why that breaks multi-tenant isolation, how to spot the pattern, and how to fix it before it becomes an incident.
Jun 9, 2026 · 10 min