Thousands of Authelia login portals found exposed on port 9091, outside intended proxy setup

·5 views

A ZoomEye scan on 23 October 2026 returned 11,813 hosts with an Authelia title and 1,736 of them on port 9091. Authelia is designed to sit behind a reverse proxy, so direct public exposure of its portal is a configuration the documentation does not recommend. Such exposure makes the login form reachable from anywhere, allowing password spraying and exposing any registration or reset flows that are enabled. The scan results do not reveal software versions, patch status, or actual vulnerabilities, so the findings indicate configuration rather than confirmed weakness. The author notes that quick deployments are likely the cause, since convenience can conflict with the security architecture of such companions.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

LazyFlow AI: Open-Source Web App Aims to Cut Time Spent on Summaries and To-Do Lists

A developer has built LazyFlow AI, a lightweight web application that condenses long text into short summaries and task lists to reduce manual effort. The app offers a demo mode that runs without an API key, using simple heuristics, and an optional local mode that connects to Ollama so users can run open-weight AI models on their own machines. The creator says the approach avoids paid API subscriptions and gives users more privacy and flexibility. The project was submitted to the Hacktoberfest Open-Source AI Challenge and was built with an AI-assisted development workflow.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Adding JSON-LD structured data to a small business site to improve local search

A Pompano Beach web developer describes adding JSON-LD structured data to the Dream Futures Tech website to help search engines understand the business. The author recommends three blocks: an Organization block with name, address, phone, and logo; a WebSite block with an optional search action; and BreadcrumbList markup on interior pages. Blog posts were also given BlogPosting markup so headlines, authors, and dates can appear in rich results. After rolling out the snippets over a weekend, the author reports that Google began displaying a Local Business card and breadcrumb trails within a few weeks, with the site's appearance unchanged. The article advises validating each change with Google's Rich Results Test.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Nine Practical 3D-Printable Designs That Each Finish in Under Three Hours

The author shares nine parametrically modelled 3D-printable functional items, including cable clips, desk headphone hooks, a Raspberry Pi wall mount, and battery and bit holders. Each design is reported to print in a few hours or less and to use under 250 g of filament for the full set, typically in PLA or PETG at 0.2 mm layers. The write-up gives practical guidance on clearances of 0.4-0.6 mm for held parts, shallow countersinks to avoid supports, and print orientation so layer lines bear load correctly. The designs are sold on the author's Cults3D page for $0.99 to $1.42, and the author also promotes a separate paper planner store.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

New DEV Member Asks Community for Tips on Platform and Hacktoberfest

Shahzaib, a final-year Software Engineering student from Pakistan, has introduced himself on the DEV Community platform. He is a Flutter developer and founder of ZaphTech Solutions, a small agency building websites, mobile apps, and AI-powered tools for small businesses. He joined DEV to take part in Hacktoberfest and aims to learn open-source AI and work with open-weight models. He is asking members for guidance on how the platform works, advice for beginners, and what others are building this Hacktoberfest.

0 comments Read more at DEV Community