Netlas.io
Explore the latest in cybersecurity with Netlas.io. Stay ahead with updates on high-profile vulnerabilities, expert tutorials, essential safety tips, and the latest Netlas developments.
- 24 часа
- +7
- 7 дней
- –
- 30 дней
- +44
- Реакции
- 5
- Репосты
- –
- Комментарии
- –
Динамика подписчиков
Подписчиков у канала «Netlas.io»: 2 388. Прирост за последние 30 дней: 44 (1,9 %).
По дням, последние 30 дней
| Дата | Подписчики | Изменение | Посты | Ср. просмотры поста |
|---|---|---|---|---|
| 11 ноя | 2 388 | +7 | 1 | 309 |
| 10 ноя | 2 381 | +2 | 1 | 218 |
| 9 ноя | 2 379 | −2 | 1 | 261 |
| 8 ноя | 2 381 | +38 | 0 | – |
| 12 окт | 2 343 | – | 0 | – |
Просмотры по возрасту поста
Средние просмотры в каждом возрасте, посты за последние 30 дней.
- 7 дней
- 376
Когда публикует
Время по UTC. 23 поста за 90 дней.
Последние посты
-
CVE-2026-116945: RCE in Microsoft SQL Server, 9.8 rating 🔥 Heap-based buffer overflow in Microsoft SQL Server allows an unauthorized attacker to execute code over a network. Search at Netlas.io: 👉 Link: https://nt.ls/KCIRB 👉 Dork: mssql:* Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116945
-
CVE-2026-120017 and others: Missing authentication in SAP NetWeaver AS ABAP and other vulnerabilities, up to 10.0 rating 🔥 SAP published multiple vulnerabilities in its products. The most severe is a missing authentication vulnerability in SAP NetWeaver AS ABAP, which occurs when the SAML2 service provider fails to properly verify login assertions under certain configurations. An attacker could submit specially crafted data to bypass authentication and impersonate arbitrary users, including privileged accounts. Search at Netlas.io: 👉 Link: https://nt.ls/pYpzT 👉 Dork: http.headers.server:"NetWeaver" Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-n...
-
CVE-2026-19868: SSLVPN Authentication Enforcement Vulnerability in SonicWALL SonicOS, 7.5 rating 🔥 An authentication enforcement vulnerability in SonicWALL SonicOS SSLVPN service could allow a user with valid credentials for an alternate method to bypass SAML authentication controls. This vulnerability is already being actively exploited in the wild! Search at Netlas.io: 👉 Link: https://nt.ls/NR7KB 👉 Dork: http.favicon.hash_sha256:6bb6f64adaa6a7ed4da10a2fe4edf4cb4d9914aa742c7ad607ca4ca678dcd3f1 OR certificate.subject_dn:"HTTPS Management Certificate for SonicWALL (self-signed)" OR http.headers.server:"SonicWALL" OR snmp.banner:"SonicOS" Vendor's advisory: https://psirt.global.sonicwall...
-
CVE-2026-113373 and others: Multiple vulnerabilities in Sonatype Nexus Repository, up to 9.1 rating 🔥 Sonatype disclosed multiple vulnerabilities in Sonatype Nexus Repository including a critical single sign-on bypass, admin takeover, SQL injection, and other security issues. Search at Netlas.io: 👉 Link: https://nt.ls/3XSu7 👉 Dork: http.title:"Sonatype Nexus Repository" OR http.title:"Nexus Repository Manager" OR http.headers.server:"Nexus" OR http.favicon.hash_sha256:9337dace49934010c4fdbb5c2c778c16f9e42bdb3da2ac476744dcc8705025c2 OR http.favicon.hash_sha256:1733fa73a6e2bd40f07bf7cfbd59dfcb8fb577f787999606346f626ace712673 Vendor advisories: https://support.sonatype.com/hc/en-us/sectio...
-
CVE-2026-73695 and others: Ten-vulnerability chain in Control Web Panel enables root access, 10.0 rating for the full chain 🔥 A recently disclosed chain of ten vulnerabilities in Control Web Panel (CWP) allows an attacker to execute code as a hosting user and escalate privileges to root. Search at Netlas.io: 👉 Link: https://nt.ls/HQXgY 👉 Dork: http.title:"CWP ADMIN" OR http.favicon.hash_sha256:69cd33a03067a7a00b6a743e52b357cd46ffdfeb1d72beaf44f2ffd9abfc153a OR http.headers.server:cwpsrv Read more: https://www.vulncheck.com/blog/control-web-panel-pre-auth-module-dispatch-rce
-
CVE-2026-58115: Actively exploited RCE in Node-RED, 10.0 rating 🔥 Disclosed in August'26, the missing-authentication vulnerability in Node-RED allows unauthenticated remote attackers to execute arbitrary system commands on exposed hosts. This CVE was assigned by Siemens, but other products and standalone Node-RED instances may also be affected. This flaw is currently being actively exploited in the wild! Search at Netlas.io: 👉 Link: https://nt.ls/fvYGg 👉 Dork: http.favicon.hash_sha256:303e35293994c1b46ed40f528ddc1ebfeb6a119a4689986d15a3dc529e5ecbff OR http.title:"Node-RED" Read more: https://www.vulncheck.com/blog/exploitation-targeting-node-red
-
CVE-2026-116241 and others: RCE via OS command injection and other new pgAdmin 4 vulnerabilities, up to 9.4 rating 🔥 The pgAdmin Development Team recently disclosed fifteen new vulnerabilities in pgAdmin 4. The most severe is an incomplete fix for CVE-2026-17566 that allows an attacker to execute arbitrary operating system commands on the pgAdmin host by using a specially crafted program clause. Search at Netlas.io: 👉 Link: https://nt.ls/g1pCL 👉 Dork: http.title:"pgAdmin" OR http.headers.set_cookie:"pga4_session=" OR http.favicon.hash_sha256:c3251099ffc5ed057dcbb624adbe79fa5794a0c64684442c1eaf1abc3edf7bde OR http.favicon.hash_sha256:6afa287fc6721817d9931bd8d7a796646ea535596f8bb038ff0486...
-
🚧 Planned Maintenance 🚧 Short-term interruptions in service provision are possible❗️ On Sunday, November 1, at 07:00 UTC ⏰, we are scheduling about 1 hour of maintenance to improve server stability and service quality. Short interruptions are possible while it is underway. Please remember to save your work before this time.
443 просмотров 3 Реакции -
Actively exploited RCE and other new WordPress vulnerabilities, no CVE assigned yet, 8.1 rating 🔥 The recently disclosed unauthenticated race-condition vulnerability in the WordPress Core update process can lead to remote code execution. This flaw is known to be actively exploited in the wild! Other disclosed vulnerabilities include stored XSS, DoS, information disclosure, and authorization weaknesses. Search at Netlas.io: 👉 Link: https://nt.ls/UTiOc 👉 Dork: tag.name:"wordpress" Read more: https://www.wordfence.com/blog/2026/10/wordpress-7-1-4-security-release-rce/
-
☀️Fingerprinting Exposed Solar Inverters with Netlas In March 2025, Forescout's SUN:DOWN report showed that reaching enough solar inverters at once could nudge the grid itself. That only works if the devices are reachable — and a surprising number of them are, openly announcing their vendor, model, and firmware. See what an inverter tells the internet about itself — and how that becomes a map of manufacturers, models, firmware, and locations. 👉 https://netlas.io/blog/fingerprinting_exposed_solar_inverters_with_netlas/
421 просмотров 6 Реакции
-
Token-based API guard authentication bypass in Laravel, no CVE assigned yet, 9.2 rating 🔥 An unauthenticated attacker may authenticate as another user without possessing that user's API token, leading to authentication bypass and account takeover on any route protected by Laravel's built-in TokenGuard when configured with a standard token-based API guard. This flaw affects applications using certain MySQL or MariaDB database configurations. Search at Netlas.io: 👉 Link: https://nt.ls/kfDww 👉 Dork: tag.name:"laravel" Vendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6
-
CVE-2026-114625: Actively exploited SQL injection flaw in Arista VeloCloud Orchestrator, 9.9 rating 🔥 Arista has disclosed a new SQL injection vulnerability in VeloCloud Orchestrator that allows any authenticated user to gain operator privileges and impersonate a local user with "superuser operator" privileges. This issue is known to be actively exploited! Search at Netlas.io: 👉 Link: https://nt.ls/Z5tBM 👉 Dork: http.body:"single-spa-application:@velocloud/vco-header" OR http.body:"vco/branding.css" OR http.body:"vco/favicon" Vendor's advisory: https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199
-
📟Fingerprinting Exposed Siemens S7 PLCs with Netlas In 2010, Stuxnet targeted Siemens PLCs. More than fifteen years later, thousands of these devices still answer on TCP port 102 — openly revealing their model, firmware version, and even the internal names engineers gave them. See how a few Netlas queries narrow thousands of exposed S7 services down to the ones worth a closer look — and reveal a surprising trait many of those responses share. 👉 https://netlas.io/blog/fingerprinting_exposed_siemens_s7_plcs_with_netlas/
485 просмотров 3 Реакции -
🎥Turning Recon Data into Findings with Netlas In his video, ZACK0X01 walks through the reconnaissance and scanning workflow behind his AI agent, showing how Netlas turns raw recon data into actionable findings. You'll see how certificate and favicon hash searches can surface assets that subdomain enumeration misses, and how scanning turns a list of hosts into open services and technology fingerprints — with structured JSON output that's ready for automation. 👉 https://www.youtube.com/watch?v=v9v9eGpy87M
478 просмотров 3 Реакции -
CVE-2026-109618 & CVE-2026-109619: Two RCE vulnerabilities in PHP (PHP2Shell), rating 9.2 for both 🔥 Today the PHP security team released an emergency update addressing two critical vulnerabilities in the PHP core, which allow unauthenticated remote code execution as the web worker account. Details of the two vulnerabilities were disclosed by researchers yesterday, ahead of today’s release. Search at Netlas.io: 👉 Link: https://nt.ls/MDn37 👉 Dork: tag.name:"php" Vendor advisories: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
-
CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, and CVE-2026-110264: Four CVEs in Ruby’s regular expression engine, discovered by GitLab, up to 10.0 rating 🔥 Last week, the Ruby team released patches for several bugs in Ruby’s regular expression engine (Onigmo). GitLab found that these bugs could be exploited for RCE on GitLab servers. The same risk applies to any other Ruby application that compiles user-supplied regular expressions. Search at Netlas.io: 👉 Link: https://nt.ls/1j93T 👉 Dork: tag.name:"ruby" Vendor's advisory: https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/
-
CVE-2026-110264 and others: 12 new vulnerabilities in GitLab, up to 10.0 rating 🔥 GitLab has disclosed 12 new vulnerabilities affecting GitLab CE & EE. The most severe allows an unauthenticated remote attacker to execute arbitrary code on the GitLab server. Search at Netlas.io: 👉 Link: https://nt.ls/dxdTf 👉 Dork: http.title:"Sign in · GitLab" OR http.unknown_headers.key:"x_gitlab_meta" OR http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef Vendor's advisory: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
-
🚧 Planned Maintenance 🚧 Short-term interruptions in service provision are possible❗️ On Sunday, November 1, at 07:00 UTC ⏰, we are scheduling about 1 hour of maintenance to improve server stability and service quality. Short interruptions are possible while it is underway. Please remember to save your work before this time.
443 просмотров 3 Реакции -
Actively exploited RCE and other new WordPress vulnerabilities, no CVE assigned yet, 8.1 rating 🔥 The recently disclosed unauthenticated race-condition vulnerability in the WordPress Core update process can lead to remote code execution. This flaw is known to be actively exploited in the wild! Other disclosed vulnerabilities include stored XSS, DoS, information disclosure, and authorization weaknesses. Search at Netlas.io: 👉 Link: https://nt.ls/UTiOc 👉 Dork: tag.name:"wordpress" Read more: https://www.wordfence.com/blog/2026/10/wordpress-7-1-4-security-release-rce/
-
🚧 Planned Maintenance 🚧 Short-term interruptions in service provision are possible❗️ On Saturday, October 24, at 06:00 UTC ⏰, we will carry out work on both replicas aimed at improving server stability and quality of service. The work will take about 2 hours, and short interruptions are possible during this time. Please remember to save your work before this time.
434 просмотров 1 Реакции
Вопросы о канале «Netlas.io»
Сколько подписчиков у канала «Netlas.io»?
У канала «Netlas.io» (@netlas) 2 388 подписчиков на 12 ноября 2026 г.
Растёт ли канал «Netlas.io»?
Да. Прирост за последние 30 дней: 44 (1,9 %).
О чём канал «Netlas.io»?
Канал в категории «Технологии», язык постов: английский. Описание канала: «Explore the latest in cybersecurity with Netlas.io. Stay ahead with updates on high-profile vulnerabilities, expert tutorials, essential safety tips, and the latest Netlas developments.»
Какое место занимает канал «Netlas.io»?
По числу подписчиков: №168 в категории «Технологии», №5 145 среди каналов на языке «английский», №5 875 в мире.
Публикует ли канал «Netlas.io» рекламу?
За последние 30 дней ни один из 23 постов не помечен как реклама (#ad, Sponsored, «Реклама»). Рекламу без пометки определить нельзя.
Когда публикует канал «Netlas.io»?
Пик публикаций: понедельник, около 09:00 по UTC. Выходит около 7 постов в неделю.
Статистика обновлена 35 минут назад.