Software – Seguridad PY

Pentesting con Kali

26/01/2017 Gustavo Genez 0

Serie de entradas de Pentesting con Kali, conocimiento publicado por la página Sniferl4bs.com espero que lo disfruten. Pentesting con Kali: Taller #1 Pentesting con Kali: Taller #2 Leer Mas

Alice es un malware que roba el dinero líquido de los cajeros automáticos

25/01/2017 Gustavo Genez 0

Recientemente ha aparecido un nuevo malware que se dedica a robar efectivo de los cajeros automáticos (ATM) que ha sido bautizado con el nombre de Leer Mas

Acronis True Image 2017 te protegerá contra infecciones de cualquier ransomware

25/01/2017 Gustavo Genez 0

Acronis True Image es uno de los programas para la creación de copias de seguridad más fáciles de utilizar y más completos. No solo se Leer Mas

CVE-2019-11324 18/04/2019
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.
CVE-2019-3718 18/04/2019
Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.
CVE-2019-3719 18/04/2019
Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables.
CVE-2019-10893 18/04/2019
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email fields on the "CWP Settings > "Edit Settings" screen. By changing the email ID to any XSS Payload and clicking on Save Changes, the XSS Payload will execute.
CVE-2019-11084 18/04/2019
GAuth 0.9.9 beta has stored XSS that shows a popup repeatedly and discloses cookies.