CVE-2020-8597

CVE-2020-8597 Utilizo dos máquinas virtuales para probar en el mismo equipo. Una como servidor y otra como cliente, y ambas usan NAT para la conexión de red. Por lo tanto, todas están bajo la tarjeta de red ens33. configurar un servidor pppoe Puedes configurar el servicio según los siguientes...

Kali-Metasploitable

Reporte de Auditoría y Laboratorio de Seguridad Proyecto: Análisis de Vulnerabilidades y Explotación de Red Segura Fecha: Abril 2026 Autor: Ivo Albacete 1. Resumen Ejecutivo Este proyecto consistió en el despliegue de un entorno controlado para la práctica de técnicas de ciberseguridad. Se...

EUVD-2017-8898

Malware in sbrugna...

CVE-2017-17746

Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the...

Authentication flaw

Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the...

CVE-2017-17746

Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the...

CVE-2017-17746

TL-SG108E (firmware 1.0.0 Build 20160722 Rel.50167) suffers from CVE-2017-17746, a weak access control flaw where authentication state is stored on the device. This allows any user on a NAT network with an authenticated administrator to access the device without re-entering credentials, since the...

CVE-2017-17746: Missing Authentication for Critical Function

Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the...

VirtualBox - Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy Exploit

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1086 There is a vulnerability in VirtualBox that permits an attacker with root privileges in a virtual machine with a NAT network interface to corrupt the memory of the...

Oracle VM VirtualBox - Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1086 There is a vulnerability in VirtualBox that permits an attacker with root privileges in a virtual machine with a NAT network interface to corrupt the memory of the userspace host process and leak memory contents from the...

openSUSE Security Update : virtualbox (openSUSE-2016-672)

Virtualbox was updated to 5.0.20 to fix the following issues : Version bump to 5.0.20 released 2016-04-28 by Oracle This is a maintenance release. The following items were fixed and/or added : - NAT Network: File VBoxNetNAT no longer requires suid - Storage: fixed a regression causing write...