forensics – Seguridad PY

Forensic CTF Writeup: Baud, James Baud (I)

20/12/2016 Gustavo Genez 0

La informática forense es una disciplina amplia y compleja, que requiere de conocimientos profundos y en muchos casos casi milimétricos de algunas áreas. Afortunadamente, de Leer Mas

Ya podemos descargar CAINE 8.0, la nueva suite para análisis forense

13/11/2016 Gustavo Genez 0

En los últimos años han ganado un gran protagonismo todo tipo de distribuciones Linux orientadas a la seguridad informática, a la auditoría de sistemas y Leer Mas

Análisis de emails de Thunderbird y Outlook con MiTeC Mail Viewer

03/10/2016 Gustavo Genez 0

Me gustaría compartir con vosotros una herramienta para el análisis de emails de Outlook y Thunderbird, que suelo utilizar a menudo en los procesos forenses. Leer Mas

CVE-2019-6500 21/01/2019
In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring.
CVE-2019-6499 21/01/2019
Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint database account (in viewpoint-portal\conf\server.xml) that could potentially be exploited by malicious users to compromise the affected system.
CVE-2019-6498 21/01/2019
GattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c because strncpy is misused.
CVE-2019-6497 20/01/2019
Hotels_Server through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter.
CVE-2018-18908 20/01/2019
The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP. This makes the data submitted in these requests prone to Man in The Middle (MiTM) attacks, whereby an attacker would be able to obtain the data sent in these requests. Some of the requests contain potentially sensitive information that […]