testing – Seguridad PY

Comprueba que tu servidor de correo está bien configurado con Mail-Tester

19/09/2016 Gustavo Genez 0

Que levante la mano quien gestione uno o más servidores de correo electrónico. Y que sigan con la mano levantada los que tengan esos servidores Leer Mas

PasswordFox: extrayendo contraseñas de Firefox automáticamente

06/09/2016 Gustavo Genez 0

PasswordFox es una de esas herramientas simples que nos facilitarán las labores de pentesting enormemente. Cuando estamos en una auditoría y nos facilitan un equipo Leer Mas

SimpleEmailSpoofer y SpoofCheck: Herramientas que agilizan el Email Spoofing

28/08/2016 Gustavo Genez 0

Fuente: www.flu-project.com El email spoofing es una técnica muy antigua utilizada para engañar a un usuario haciéndole creer que está recibiendo un correo electrónico de una Leer Mas

CVE-2019-11469 23/04/2019
Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequently, an unauthenticated user can gain the authority of SYSTEM on the server by uploading a malicious file via the "Execute Program Action(s)" feature.
CVE-2019-11463 23/04/2019
A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive through 3.3.3 allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo.
CVE-2013-7470 23/04/2019
cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310.
CVE-2019-0218 22/04/2019
A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface.
CVE-2019-11460 22/04/2019
An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox […]