forensics – Seguridad PY

Forensic CTF Writeup: Baud, James Baud (I)

20/12/2016 Gustavo Genez 0

La informática forense es una disciplina amplia y compleja, que requiere de conocimientos profundos y en muchos casos casi milimétricos de algunas áreas. Afortunadamente, de Leer Mas

Ya podemos descargar CAINE 8.0, la nueva suite para análisis forense

13/11/2016 Gustavo Genez 0

En los últimos años han ganado un gran protagonismo todo tipo de distribuciones Linux orientadas a la seguridad informática, a la auditoría de sistemas y Leer Mas

Análisis de emails de Thunderbird y Outlook con MiTeC Mail Viewer

03/10/2016 Gustavo Genez 0

Me gustaría compartir con vosotros una herramienta para el análisis de emails de Outlook y Thunderbird, que suelo utilizar a menudo en los procesos forenses. Leer Mas

CVE-2019-9961 26/03/2019
A cross-site scripting (XSS) vulnerability in ressource view of Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML.
CVE-2019-8988 26/03/2019
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site contains a vulnerability that theoretically allows a user to escalate their privileges on the affected system, in a way that may allow for data modifications and deletions that should be denied. Affected releases […]
CVE-2019-8987 26/03/2019
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site scripting vulnerability that theoretically allows an authenticated user to gain access to all the capabilities of the web interface available to more privileged users. Affected releases are TIBCO Software Inc.'s TIBCO Data Science […]
CVE-2019-6341 26/03/2019
In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability.
CVE-2019-8989 26/03/2019
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a vulnerability that theoretically enables a user to spoof their account to look like a different user in the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and […]