firefox – Seguridad PY

Firefox y Tor Browser se actualizan para corregir el grave fallo de seguridad

07/12/2016 Gustavo Genez 0

Ayer mismo hacíamos eco de la noticia que anunciaba el descubrimiento de un nuevo bug en Firefox que permitía desenmascarar a los usuarios de Tor. Leer Mas

Vulnerabilidad crítica en Mozilla Firefox

30/11/2016 Gustavo Genez 0

La Fundación Mozilla ha publicado una actualización de seguridad destinados a corregir una vulnerabilidad considerada crítica (MFSA 2016-91) en el navegador Firefox. El problema (CVE-2016-9078) Leer Mas

Vulnerabilidad en Firefox permite suplantar los servidores de Mozilla

22/09/2016 Gustavo Genez 0

Una vulnerabilidad crítica hallada en Firefox podría permitir a atacantes con los recursos necesarios el poder realizar ataques de suplantación man-in-the-middle que también pueden afectar a la red Leer Mas

PasswordFox: extrayendo contraseñas de Firefox automáticamente

06/09/2016 Gustavo Genez 0

PasswordFox es una de esas herramientas simples que nos facilitarán las labores de pentesting enormemente. Cuando estamos en una auditoría y nos facilitan un equipo Leer Mas

CVE-2017-1750 25/04/2018
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 135523.
CVE-2017-12714 25/04/2018
Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H. Abbott has developed a firmware […]
CVE-2018-1363 25/04/2018
IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137448.
CVE-2017-12716 25/04/2018
Abbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit unencrypted patient information via RF communications to programmers and home monitoring units. Additionally, the Accent and Anthem pacemakers store the optional patient information without encryption. CVSS v3 base score: 3.1, CVSS vector string: AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Abbott has developed a firmware update to help […]
CVE-2017-7652 25/04/2018
In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available (default limit typically 1024 file descriptors on Linux), then […]