Blog de Ciberseguridad y Tecnología

artículos recientes

Vulnerabilidades 08 Oct 2026 · 18:23

CVE-2015-3306: acceso arbitrario a archivos en ProFTPD

CISA confirma explotación activa de CVE-2015-3306 en ProFTPD. La falla crítica permite leer y escribir archivos arbitrarios mediante SITE CPFR y SITE CPTO.

cve-2015-3306cvevulnerabilidadproftpdftpseguridadcisa-kev

leer más 5 min

CVE-2023-22894

Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensi

Strapi · 2026-10-08

CVE-2021-3199

ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could all

ONLYOFFICE · 2026-10-08

CVE-2016-3081

Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Me

Apache · 2026-10-08

CVE-2015-5477

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

ISC · 2026-10-08

CVE-2015-3306

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and

ProFTPD · 2026-10-08

ver todos →

CIBERPLANETA