Software – Seguridad PY

Cuando la Inteligencia Artificial se utiliza de modo malicioso

Cómo los hackers utilizan la tecnología en diversas estrategias de phishing e ingeniería social Si hablamos de Inteligencia Artificial (IA)

Serie de entradas de Pentesting con Kali, conocimiento publicado por la página Sniferl4bs.com espero que lo disfruten. Pentesting con Kali: Taller #1

Recientemente ha aparecido un nuevo malware que se dedica a robar efectivo de los cajeros automáticos (ATM) que ha sido

Acronis True Image es uno de los programas para la creación de copias de seguridad más fáciles de utilizar y

CVE-2016-6154 23/08/2019
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect).
CVE-2019-5594 23/08/2019
An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.
CVE-2019-6695 23/08/2019
Lack of root file system integrity checking in Fortinet FortiManager VM application images of all versions below 6.2.1 may allow an attacker to implant third-party programs by recreating the image through specific methods.
CVE-2019-15092 23/08/2019
The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CSV file created by the WF_CustomerImpExpCsv_Exporter class.
CVE-2019-12400 23/08/2019
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this implementation might be cached and re-used by Apache Santuario […]