edit_note

Blog

Security research, internet scanning insights, vulnerability analysis, and product updates from the Zondex team.

grid_viewAll science Research school Tutorials gpp_maybe Threat Intelligence new_releases Product Updates

IP Tracker Links: How They Work and How to Protect Yourself

IP tracker links work by logging client metadata during the HTTP request-response cycle, capturing IP addresses, user agents, and geolocation data. This guide explains the technical mechanics of tracking and provides advanced defense strategies.

personZondex Research Team calendar_todayMay 22, 2026

Threat Intelligence May 17, 2026

Gunicorn 20.0.4 Vulnerability: What You Need to Know

The Gunicorn 20.0.4 vulnerability refers primarily to CVE-2020-14343 (Denial of Service) and CVE-2020-14344 (Request Smuggling), critical flaws allowing attackers to disrupt service or bypass security controls by exploiting improper handling of chunked HTTP requests, necessitating immediate upgrades

personZondex Research Team

Read arrow_forward

Python Vulnerability Web Server

Research May 16, 2026

Global Distribution of Lighttpd Servers by Country

Zondex's comprehensive scans reveal the United States as the top country with Lighttpd servers, hosting approximately 35% of all publicly accessible instances. This article dissects global distribution, security implications, and how Zondex aids in discovery and risk assessment for this lightweight

personZondex Research Team

Read arrow_forward

Geolocation Statistics Web Server

Tutorials May 15, 2026

Shodan Dorks: Complete Cheat Sheet for Internet Search Queries

This comprehensive guide provides a practical shodan dorks list, detailing advanced search operators to precisely identify internet-connected devices, services, and vulnerabilities for cybersecurity reconnaissance and threat intelligence.

personZondex Research Team

Read arrow_forward

Cheatsheet Osint Search Queries

Research May 13, 2026

Global Distribution of Lighttpd Servers by Country

Zondex data reveals the United States hosts the largest number of publicly accessible Lighttpd servers globally. This article details the geographical distribution, common security risks, and provides practical Zondex queries for identification.

personZondex Research Team

Read arrow_forward

Geolocation Statistics Web Server

Research May 12, 2026

Jenkins Servers Exposed to Internet: Security Analysis

Thousands of Jenkins servers are critically exposed to the internet, creating severe risks for organizations. This exposure often leads to remote code execution, sensitive data breaches, and supply chain attacks, which Zondex actively identifies through its comprehensive indexing capabilities.

personZondex Research Team

Read arrow_forward

Ci Cd Exposure Jenkins

Tutorials May 11, 2026

OSINT Email Search: Free Tools to Find Information by Email Address

Effectively perform OSINT email search free of charge using tools like Have I Been Pwned, Hunter.io, and theHarvester to uncover crucial information. This guide covers practical techniques for cybersecurity professionals to aid in investigations and reconnaissance.

personZondex Research Team

Read arrow_forward

Email Osint Tools

Tutorials May 10, 2026

IP Tracker Links: How They Work and How to Protect Yourself

IP tracker links embed invisible components (pixels, redirects) that log the requesting IP address, user-agent, and geographic location upon access. Understanding how an IP tracker link works is critical for cybersecurity professionals to defend against doxing, phishing, and unwanted surveillance.

personZondex Research Team

Read arrow_forward

Ip Tracking Privacy Security

Threat Intelligence May 09, 2026

CVE-2018-2380: SAP CRM Vulnerability Deep Dive

CVE-2018-2380 exposes SAP CRM systems to critical XML External Entity (XXE) vulnerabilities, allowing attackers to read arbitrary files, trigger server-side requests, or potentially execute code. This flaw can lead to severe data breaches and system compromise if left unpatched, emphasizing the need

personZondex Research Team

Read arrow_forward

Cve Sap Vulnerability

Research May 07, 2026

Exposed Kubernetes Dashboards: Finding Unsecured Clusters

Zondex identifies thousands of Kubernetes Dashboards directly exposed to the internet, primarily due to misconfigurations. These unsecured interfaces offer attackers direct control over containerized environments, leading to potential data breaches and system compromise. Learn how to detect and secu

personZondex Research Team

Read arrow_forward

Cloud Exposure Kubernetes

Research May 04, 2026

Axis IP Camera Default IP Address and Security Risks

Axis IP cameras commonly use default IP addresses like 192.168.0.90 or 192.168.1.90, often with default credentials. Unchanged, these configurations create critical security vulnerabilities, enabling unauthorized access and exploitation.

personZondex Research Team

Read arrow_forward

Cameras Default Credentials Iot

Research May 02, 2026

WebcamXP 5: Why Thousands of Cameras Are Still Exposed

Thousands of WebcamXP 5 installations remain exposed online due to end-of-life software, default configurations, and direct internet access, creating significant privacy and security risks for individuals and organizations.

personZondex Research Team

Read arrow_forward

Cameras Exposure Iot

1 / 4 Nextchevron_right

explore

Explore the Internet

Search devices, services, and vulnerabilities across 80M+ indexed hosts with Zondex.

searchStart Searching