Linux & Cyber Security & Penetration Testing & Python

Tag: E-Ticarette Güven Damgası

Ara 19

E-Ticarette Güven Damgası Dönemi ve Sızma Testi

By Kayhan KAYIHAN in Genel

Şüphesiz Türkiyeelektronik alışveriş için dünyadaki önemli pazarlardan birisi, bunun en büyük nedeniinterneti aktif olarak kullanan ciddi bir genç kitlenin olması ve bu gençkitlenin alışveriş alışkanlıklarının hızla internete yönelmesi. Gençlerdeki bu alışveriş alışkanlığı değişikliği Türkiye’yi dünya pazarında önemli bir market haline getiriyor. Peki bu potansiyele sahip bir ülkede elektronik dolandırıcılık ne durumda derseniz,maalesef burada da ciddi …

Devamını oku

Social Media

RECENT VULNERABILITIES

CVE-2020-25749
The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telnet service cannot be disabled and this password cannot be […]
CVE-2020-25748
A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339). Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP servers and force the camera to use the […]
CVE-2020-25747
The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings (brightness, clarity, time), restart the camera, or reset it to […]
CVE-2020-24692
The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to gain access to a user session.
CVE-2020-24592
Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system information due to insufficient output sanitization.
CVE-2020-24718
bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 2020.04), does not properly restrict VMCS and VMCB read/write operations, as demonstrated by a root user in a container on an Intel system, who can gain privileges by modifying VMCS_HOST_RIP.
CVE-2020-24595
Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control.
CVE-2020-24615
Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP.
CVE-2020-25203
The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By calling the intent with the action set to android.intent.action.VIEW, any other application is able to load any website/web content into the application's context, which is shown as a full-screen overlay to the user.
CVE-2020-25726
A Directory Traversal issue was discovered on Hak5 WiFi Pineapple Mark VII 1.x before 1.0.1-beta.2020091914551 devices. An unauthenticated user can connect to the wireless management network, including the open wireless network, and access all files and subdirectories under /pineapple/ui, regardless of file permissions.

Last Tweets

@sans_isc 21 Ocak 2020

DeepBlueCLI: Powershell Threat Hunting i5c.us/2sILyot https://t.co/l98o1OdXbS
@c1982 21 Ocak 2020

Bugün 19:00'da @IzmirGophers 'da görüşürüz. Konumuz TDD ve Clean Architecture 🤟meetup.com/IzmirGophers/e…
@yakuter 20 Ocak 2020

Go serverlere güzel bir Türkçe e-kitap (PDF) paylaşayım. @ksckaan1 tarafından hazırlanmış, oldukça da güzel olmuş 👏… twitter.com/i/web/status/1…
@PuCCaa 16 Ocak 2020

Sonra yarım gün çalışıyorlar zaten diye kadınlar işe alınmasın. Verim alamıyoruz diye işten çıkartmalar olsun.. haa… twitter.com/i/web/status/1…
@kayhankayihan 14 Ocak 2020

#RDP ve #CryptoAPI zafiyeteri için hızla aksiyon almak faydalı olacaktır. Geçtiğimiz hafta yayınlanan Citrix zafiy… twitter.com/i/web/status/1…

Tag: E-Ticarette Güven Damgası

E-Ticarette Güven Damgası Dönemi ve Sızma Testi

Social Media

Category

RECENT VULNERABILITIES

Last Tweets

Recent Posts

Followed By

Links