varios – Seguridad PY

Feliz Año 2017

Desde este tu sitio de Seguridad PY quiero agradecer a todos por el acompañamiento en estos meses que he empezando

Ya sabemos todos, que el objetivo de las vallas publicitarias es llamar la atención de los transeúntes. Esta vez, la

Los fallos de seguridad en los dispositivos y sistemas operativos que utilizamos a diario valen mucho. Los hacks filtrados de

Si te gusta la música seguro que eres usuario – o cliente – de Spotify, un servicio que te trae

Estamos por terminar la 2da temporada de Mr Robot, la serie que hizo del hacking algo cool y que puso

CVE-2019-12552 22/07/2019
In SweetScape 010 Editor 9.0.1, an integer overflow during the initialization of variables could allow an attacker to cause a denial of service.
CVE-2019-12551 22/07/2019
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the Memcpy function (provided by the scripting engine) allows an attacker to overwrite arbitrary memory, which could lead to code execution.
CVE-2019-3414 22/07/2019
All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invokes the security management to obtain the resources of the specified operation code owned by a user, the malicious script code could be transmitted in the parameter. If the front end does not process the […]
CVE-2019-12328 22/07/2019
A command injection (missing input validation) issue in the remote phonebook configuration URI in the web interface of the Atcom A10W VoIP phone with firmware 2.6.1a2421 allows an authenticated remote attacker in the same network to trigger OS commands via shell metacharacters in a POST request.
CVE-2019-12327 22/07/2019
Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed.