Italiano
English
In tempi di virus non si ferma l’attività criminale di phishing, che anzi si avvale dell’allarme per trarre in inganno e truffare sprovveduti navigatori che abboccano all’amo. La Polizia Postale sta avvertendo la rete di non aprire per nessun motivo il file CoronaVirusSafetyMeasures.pdf. Si...
NOTIZIE
SERVIZI
|
Il servizio analizza un log di richieste DNS e identifica se all’interno sono stati risolti dei nomi a dominio che... |
Il servizio raccoglie informazioni relative ad exploit pubblici aggiornati giornalmente attraverso il repository... |
Il servizio utilizza una raccolta di tweet provenienti da utenti appartenenti a Twitter i cui tweet utilizzano parole... |
Il servizio analizza gruppi di email file (formato .eml) per identificare le email indesiderate (SPAM). Il servizio... |
ULTIMI CVE
| Published | Description | |
|---|---|---|
| CVE-2019-12132 |
18-03-2020 19:15:00 |
An issue was discovered in ONAP SDNC before Dublin. By executing sla/dgUpload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected. |
| CVE-2020-10659 |
18-03-2020 02:15:00 |
Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with a web site that has an invalid certificate chain. |
| CVE-2019-20510 |
18-03-2020 01:15:00 |
rlm_eap/types/rlm_eap_pwd/eap_pwd.c in the EAP-pwd implementation in FreeRADIUS before 3.0.20 allows remote attackers to discover passwords because there is a side-channel information leak associated with the Hunting and Pecking abort for excessive iterations. |
| CVE-2020-8470 |
18-03-2020 01:15:00 |
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability. |
| CVE-2020-8600 |
18-03-2020 01:15:00 |
Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key file to bypass authentication. |
Pages
ULTIMI EXPLOIT
| Date | Title | Platform | Author |
|---|---|---|---|
|
10-02-2020 |
OpenSMTPD - MAIL FROM Remote Code Execution (Metasploit) | linux | Metasploit |
|
10-02-2020 |
LearnDash WordPress LMS Plugin 3.1.2 - Reflective Cross-Site Scripting | php | Jinson Varghese Behanan |
|
10-02-2020 |
Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow | windows | ZwX |
|
10-02-2020 |
Dota 2 7.23f - Denial of Service (PoC) | windows | Bogdan Kurinnoy |
|
10-02-2020 |
Ricoh Driver - Privilege Escalation (Metasploit) | windows | Metasploit |
Pages
CERT feeds
| Published | Title | URL |
|---|---|---|
| 15-05-2019 | Vulnerabilità in prodotti Cisco (13-14 maggio 2019) | CERT LINK |
| 15-05-2019 | Vulnerabilità in Samba | CERT LINK |
| 15-05-2019 | Aggiornamento di sicurezza per Google Chrome (14 maggio 2019) | CERT LINK |
| 15-05-2019 | Aggiornamenti di sicurezza per prodotti Microsoft (maggio 2019) | CERT LINK |