Blog de Ciberseguridad y Tecnología

artículos recientes

Vulnerabilidades 08 Oct 2026 · 18:23

CVE-2023-22894: exposición de datos sensibles en Strapi

CISA incorporó CVE-2023-22894 al catálogo KEV por explotación activa. La falla permite a usuarios con acceso al panel administrativo de Strapi descubrir datos sensibles mediante filtros de consulta y puede encadenarse con CVE-2023-22621 para lograr ejecución remota de código.

cve-2023-22894cvevulnerabilidadstrapiseguridadcisa-kev

leer más 4 min

CVE-2023-22894

Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensi

Strapi · 2026-10-08

CVE-2021-3199

ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could all

ONLYOFFICE · 2026-10-08

CVE-2016-3081

Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Me

Apache · 2026-10-08

CVE-2015-5477

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

ISC · 2026-10-08

CVE-2015-3306

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and

ProFTPD · 2026-10-08

ver todos →

CIBERPLANETA