Over 52,000 SonarQube pages found exposed on port 9000 in one-day ZoomEye scan

·8 views

A scan of internet-facing assets on 26 October 2026 counted about 52,068 SonarQube pages on port 9000, using ZoomEye data. SonarQube stores repository tokens, webhook secrets and integration credentials, and holds lists of known code weaknesses that could guide an attacker. The report advises teams to confirm their instances are reachable only from the analysis network and authorized developers. The counts reflect pages observed on a single day, so instances behind SSO proxies may not appear, and the figures do not by themselves show that authentication is weak. Regional breakdowns are based on IP address geolocation.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

MatchGrind Launches Football Data API With Scores, Standings and Injury Tracking

MatchGrind offers a football data API that provides live scores, fixtures, standings, club information and match analytics across 60 competitions, including the Premier League, LaLiga, MLS, Brasileirão and Tanzania's NBC Premier League. The service derives injury and suspension information from match events rather than manual entry, and card totals per player show how many bookings remain before a ban. Access is available through the Global-Football-API listing on the RapidAPI marketplace, with a free BASIC plan that requires no payment card. Users obtain an API key after subscribing and can retrieve the list of available competitions with a first call, with no additional setup needed. The overview is based on public information from the project's website, and pricing and terms should be verified there before adoption.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

SlothBudget Pro: Open-Source Offline Agent Automates Receipt Tracking and Spending Classification

A developer has released SlothBudget Pro, an autonomous financial agent designed to process receipts and transaction logs without manual data entry. Users drop raw text files into a local folder or upload them through a cloud dashboard, and the agent extracts transaction details, classifies spending, and archives the records. Text extraction runs on Google's open-weight Gemma 3 1B model via Ollama, while TabPFN-3.5 handles categorization and anomaly detection. The project's developer says running the models locally keeps user data private, avoids operating costs, and removes the need for an internet connection. The interactive dashboard is hosted on Render, and Sentry is used to monitor agent latency and errors.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Moves Repository Tests from H2 to Real PostgreSQL Using Flyway

A developer building a library app discovered that their repository tests passed only against H2, an in-memory database that does not match the PostgreSQL engine used in production. The Phase 3 work moved persistence to PostgreSQL 17, with Flyway managing the schema through a baseline migration that mirrors the JPA entities and uses named constraints. Hibernate was set to validate rather than generate the schema, and database settings were moved to environment variables with setup documented in the README. Only the book copy repository test class was switched to the real database, while 45 other tests stayed on H2, and PostgreSQL runs natively since Docker was unavailable.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Setting up Hermes Agent with OmniRoute, Ollama Cloud, and Parch on an old PC

A developer repurposed an old four-core Phenom II machine with 8 GB of RAM into a home AI workstation running Parch with XFCE. They used OmniRoute as a gateway to manage multiple AI providers, including proxy support and free model access. Web-cookie connections to Claude and DeepSeek were tried, but Claude risked account bans and DeepSeek failed on code-related tool calls. Ollama Cloud, connected via API key, ended up being the provider that made the agent work reliably, using the Gemma 31B model as the main model.

0 comments Read more at DEV Community