Drupal core – Critical – Third-party libraries – SA-CORE-2021-001
Otra petadita de las buenas … a actualizar pero ya. 7.78, 8.9.13, 9.0.11 y 9.1.3.
Leer más
Advisories
Problemas de seguridad, hay que promover la cultura del parcheo … sin mas. Un parche instalado a tiempo te evita problemas en el futuro (bueno, lo mismo con Microsoft hay que esperar un poco mas).
Drupal core – Critical – Remote code execution – SA-CORE-2020-012
Acaban de soltarlo, critica … 17 sobre 25. Drupal core does not properly sanitize certain filenames on uploaded files, which
Leer más
Vulnerabilidad en Netlogon Remote Protocol
Otra de esas de 10 sobre 10 … toma petada. CVE-2020-1472. To exploit the vulnerability, an unauthenticated attacker would be
Leer más
Cisco NX-OS Software Unexpected IP in IP Packet Processing Vulnerability
Nueva petadita que afecta a algunos cacharros de cisco …
Leer más
Spamicide – Critical – Access bypass – SA-CONTRIB-2020-009
Project: Spamicide [1] Date: 2020-April-08 Security risk: *Critical* 18∕25 AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:All [2] Vulnerability: Access bypass
Leer más
[DSA 4625-1] thunderbird security update
Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of
Leer más
[DSA 4610-1] webkit2gtk security update
Han descubierto 3 nuevas vulnerabilidades en Webkit2gt, se recomienda actualizar a la versión 2.26.3-1~deb10u1.
Leer más
APPLE-SA-2020-1-29-2 iCloud for Windows 10.9.2
iCloud for Windows 10.9.2 is now available
Leer más
[SECURITY] [DSA 4611-1] opensmtpd security update
Qualys discovered that the OpenSMTPD SMTP server performed insufficient validation of email addresses which could result in the execution of
Leer más
[CVE-2019-20358] CVE-2019-9491 in Trend Micro Anti-Threat Toolkit (ATTK) was NOT properly FIXED
TrendMicro assigned CVE-2019-9491 to this vulnerability and told the reporter, his dog and the world on October 18, 2019, that
Leer más
[DSA 4609-1] python-apt security update
Two security issues were found in the Python interface to the apt package manager; package downloads from unsigned repositories were
Leer más
Predictable TCP sequences generated by Security Gateway in R80.20 / R80.30
Acaban de soltarlo desde checkpoint … toca actualizar (de nuevo). «Since R80.20, predictable TCP sequences are generated (in some cases)
Leer más
Citrix publica el parche para solucionar los problemas de ADC en los Netscalers
La que se esta liando con esto … parece que por fin Citrix se ha dignado (o mas bien han
Leer más
January 2020 Security Updates: CVE-2020-0601
Parece que se esta liando (y tiene pinta que se va a liar aun mas) con el CVE-2020-0601.
Leer más
[TZO-04-2020] Bitdefender Generic Malformed Archive Bypass (BZ2)
All Bitdefender Products and Vendors that have licensed the Engine before Dec 12 2019. Exact version is unknown as Bitdefender
Leer más
[TZO-03-2020] ESET Generic Malformed Archive Bypass (ZIP Compression Information)
10 years ago I took a look at ways to evade AV/DLP Engine detection by using various techniques and released
Leer más
[TZO-02-2020] Kaspersyk Generic Malformed Archive Bypass (ZIP GFlag)
10 years ago I took a look at ways to evade AV/DLP Engine detection by using various techniques and released
Leer más
[TZO-01-2020] AVIRA Generic Malformed Container bypass (ISO)
10 years ago I took a look at ways to evade AV/DLP Engine detection by using various techniques and released
Leer más
[RT-SA-2019-015] IceWarp: Cross-Site Scripting in Notes for Contacts
During a penetration test, RedTeam Pentesting discovered that the IceWarp WebMail Server is prone to user-assisted cross-site scripting attacks in
Leer más
Microsoft Windows .Group File / URL Field Code Execution
Windows «.group» files are related to Contact files and suffer from unexpected code execution when clicking the «Contact Group Details»
Leer más