testing – Seguridad PY

Comprueba que tu servidor de correo está bien configurado con Mail-Tester

19/09/2016 Gustavo Genez 0

Que levante la mano quien gestione uno o más servidores de correo electrónico. Y que sigan con la mano levantada los que tengan esos servidores Leer Mas

PasswordFox: extrayendo contraseñas de Firefox automáticamente

06/09/2016 Gustavo Genez 0

PasswordFox es una de esas herramientas simples que nos facilitarán las labores de pentesting enormemente. Cuando estamos en una auditoría y nos facilitan un equipo Leer Mas

SimpleEmailSpoofer y SpoofCheck: Herramientas que agilizan el Email Spoofing

28/08/2016 Gustavo Genez 0

Fuente: www.flu-project.com El email spoofing es una técnica muy antigua utilizada para engañar a un usuario haciéndole creer que está recibiendo un correo electrónico de una Leer Mas

CVE-2019-7629 18/02/2019
Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to execute arbitrary code by sending a long message to the client.
CVE-2019-8919 18/02/2019
The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
CVE-2019-8917 18/02/2019
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may be abused by an attacker to execute commands as the SYSTEM user.
CVE-2019-8908 18/02/2019
An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading an image file, as demonstrated by a .php filename and the "Content-Type: image/gif" header.
CVE-2019-8909 18/02/2019
An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) via crafted dimensions for the verification code image.