Blog de Ciberseguridad y Tecnología

artículos recientes

Vulnerabilidades 08 Oct 2026 · 18:23

CVE-2016-3081: inyección de comandos en Apache Struts

CISA confirma explotación activa de CVE-2016-3081 en Apache Struts. La falla permite ejecución remota mediante method:prefix cuando Dynamic Method Invocation está habilitado.

cve-2016-3081cvevulnerabilidadapachestrutsseguridadkev

leer más 4 min

CVE-2023-22894

Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensi

Strapi · 2026-10-08

CVE-2021-3199

ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could all

ONLYOFFICE · 2026-10-08

CVE-2016-3081

Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Me

Apache · 2026-10-08

CVE-2015-5477

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

ISC · 2026-10-08

CVE-2015-3306

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and

ProFTPD · 2026-10-08

ver todos →

CIBERPLANETA