Italiano
English
La cybersecurity si impara da piccoli. Più di 1000 bambini (1007 per l’esattezza) delle scuole primarie e delle scuole secondarie di primo grado di tutta Italia durante quest’anno scolastico hanno potuto scoprire come navigare in maniera sicura e consapevole in Rete grazie ai laboratori sulla...
NEWS
SERVICES
|
The service offers a survey to check the compliance of an organization with the GDPR (General Data Protection... |
This service analyses sets of email file in .eml format to identify the unsolicited ones (SPAM). Moreover, the service... |
This service identifies typical ransomware behaviours such as file ciphering. Differently from signature-based anti-... |
The service aims at offering a representation of the Cybersecurity domain through the creation of a controlled... |
LATEST CVE
| Published | Description | |
|---|---|---|
| CVE-2019-12251 |
21-05-2019 12:29:01 |
sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter. |
| CVE-2019-12250 |
21-05-2019 12:29:01 |
IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, which can be triggered by viewing a log. |
| CVE-2019-10320 |
21-05-2019 09:29:00 |
Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and obtain the certificate content of files containing a PKCS#12 certificate. |
| CVE-2019-10319 |
21-05-2019 09:29:00 |
A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.DescriptorImpl#doTest allowed users with Overall/Read permission to obtain limited information about the file /etc/shadow and the user Jenkins is running as. |
| CVE-2019-11816 |
20-05-2019 18:29:00 |
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request. |
Pages
LATEST EXPLOIT
| Date | Title | Platform | Author |
|---|---|---|---|
|
21-05-2019 |
Deluge 1.3.15 - 'URL' Denial of Service (PoC) | multiple | Victor Mondragón |
|
21-05-2019 |
Brocade Network Advisor 14.4.1 - Unauthenticated Remote Code Execution | java | Jakub Palaczynski |
|
20-05-2019 |
AbsoluteTelnet 10.16 - 'License name' Denial of Service (PoC) | windows | Victor Mondragón |
|
20-05-2019 |
BulletProof FTP Server 2019.0.0.50 - 'DNS Address' Denial of Service (PoC) | windows | Victor Mondragón |
|
20-05-2019 |
Encrypt PDF 2.3 - Denial of Service (PoC) | windows | Alejandra Sánchez |