Investigación propia, Divulgación responsable

Security Advisories

Vulnerabilidades descubiertas y publicadas por nuestro equipo de investigación. Cada advisory documenta el hallazgo, la prueba de concepto, el impacto y el proceso de divulgación coordinada con el fabricante.

94 advisories publicados
15 años con publicaciones
CVE registro y coordinación con INCIBE
2001 investigando desde
Último publicado
2026-18363 CVE-2026-18363 Severidad crítica

Weak password recovery mechanism in osTicket

Un fallo lógico en la validación del token de restablecimiento de contraseña permite reutilizar tokens expirados para comprometer cuentas de usuario.

agosto 2026 Ismael de Frutos Díaz CWE-640
CVSS 9.1
Ver advisory completo
Archivo completo

2026

2 advisorys
2026-18363 Weak password recovery mechanism in osTicket by Enhancesoft LLC Password Recovery 2026-9507 Session Fixation in osTicket v1.18.2 Session Fixation

2020

1 advisory
2020-001 URL Redirection to Untrusted Site ('Open Redirect') in Google generic TLD and ccTLD Open Redirect

2018

5 advisorys
2018-005 Cross Site Scripting (XSS Reflected) in Movistar XSS Reflected 2018-004 Traversal Directory en VPN de la UAM Path Traversal 2018-003 Stored XSS on Microsoft Word (Office 365) Stored XSS 2018-002 (Blind) Stored XSS on earth.google.com Stored XSS 2018-001 XSS Reflected in Mercadolibre XSS Reflected

2017

19 advisorys
2017-019 Stored XSS found in Google Earth Stored XSS 2017-018 XSS Reflected found in a Vodafone Deutschland website XSS Reflected 2017-017 XSS Reflected found in a Vodafone Deutschland website XSS Reflected 2017-016 XSS Reflected found in the Vodafone German Shop XSS Reflected 2017-015 XSS Reflected found in the AT&T Reward Center portal XSS Reflected 2017-014 XSS Reflected found in the AT&T Reward Center portal XSS Reflected 2017-013 XSS Reflected found in the Microsoft Sign Up portal XSS Reflected 2017-012 XSS Reflected found in the Microsoft Azure Marketplace website XSS Reflected 2017-011 XSS Reflected found in the Microsoft app Source XSS Reflected 2017-010 Google Earth 'QtWebKit4' NULL Pointer Dereference vulnerability NULL Pointer 2017-009 Path Traversal found in the External Documentation Nokia Repository Path Traversal 2017-008 XSS Reflected found in the SAP events portal XSS Reflected 2017-007 www.nod32.com.br from Nod32 Brasil vulnerable to Time Based SQL SQL Injection 2017-006 SQL Injection found in the Portuguese ESET ecommerce SQL Injection 2017-005 XSS Reflected found in the ESET UK Partner Login page XSS Reflected 2017-004 XSS Reflected found in the Portuguese ESET ecommerce XSS Reflected 2017-003 My AOL Today's News vulnerable to Path Traversal Path Traversal 2017-002 Paypal(dot)com self-XSS vulnerability Self-XSS 2017-001 BlueRiver Mura CMS vulnerable to Stored Cross Site Scripting via rb parameter Stored XSS

2016

2 advisorys
2016-002 Stored XSS in Google Sites Stored XSS 2016-001 Desk.com is affected by Reflected Cross-Site Scripting vulnerability XSS Reflected

2015

1 advisory
2015-005 URL Redirection to Untrusted Site ('Open Redirect') in Google generic TLD and ccTLD Open Redirect

2014

1 advisory
2014-001 Reflected XSS vulnerability in Boxcryptor XSS Reflected

2013

16 advisorys
2013-018 Multiple XSS vulnerabilities in Project'Or RIA XSS 2013-017 SQL Injection in Project'Or RIA SQL Injection 2013-016 CSRF vulnerability in LinkedIn CSRF 2013-014 Multiple reflected XSS vulnerabilities in Atmail WebMail XSS Reflected 2013-012 Multiple Full Path Disclosure Vulnerabilities in TinyWebGallery Path Disclosure 2013-011 HTTP Response Splitting Vulnerability in WebCollab Response Splitting 2013-010 Multiple Reflected XSS vulnerabilities in BoltWire <= v3.5 Cross-Site Scripting 2013-009 Multiple Vulnerabilities in Telaen Multiple 2013-008 Multiple Vulnerabilities in Uebimiau <= 2.7.11 Open Redirect / XSS 2013-007 XAMPP 1.8.1 Local Write Access Vulnerability Local Write Access 2013-006 Multiple Reflected XSS vulnerabilities in LinkedIn Investors XSS Reflected 2013-005 LinkedIn is affected by Persistent Cross-Site Scripting vulnerability Stored XSS 2013-004 Reflected XSS in the view attachment message process of Atmail WebMail XSS Reflected 2013-003 XSS vulnerability in LinkedIn XSS 2013-002 Reflected XSS in Asteriskguru Queue Statistics XSS Reflected 2013-001 CSRF vulnerability in LinkedIn CSRF

2012

2 advisorys
2012-003 Multiple Reflected XSS vulnerabilities in LinkedIn XSS Reflected 2012-001 PL/SQL Injection in Oracle Portal Demo Organization Chart SQL Injection

2011

3 advisorys
2011-003 Multiple vulnerabilities in Zyncro social network Multiple Vulnerabilities 2011-002 Facebook social network vulnerable to CSRF Cross-Site Request Forgery 2011-001 Facebook social network vulnerable to Open Redirect Open Redirect

2010

10 advisorys
2010-011 Multiple vulnerabilities in Hi5.com social network Multiple Vulnerabilities 2010-010 Uninitialized variables allow to access the Motorito CMS administration panel Authentication Bypass 2010-009 Reflected XSS in the login process of the Atmail WebMail Cross-Site Scripting 2010-008 Insecure Direct Object Reference in tuenti.com allow any message read Insecure Direct Object Reference 2010-007 XSS in Oracle Portal Database Access Descriptor Cross-Site Scripting 2010-006 Facebook Abuse of Functionality of Lint for anonymous port scan and DoS attacks Abuse of Functionality 2010-005 SQL Injection and XSS in Motorito Motorito < v2.0 Ni 483 SQL Injection / XSS 2010-004 Facebook HTML and Script code injection vulnerability Cross-Site Scripting 2010-002 Facebook Cross-Site Request Forgery vulnerability Cross-Site Request Forgery 2010-001 Facebook HTML and Script code injection vulnerability Cross-Site Scripting

2009

12 advisorys
2009-013 Cisco ASA <= 8.x VPN SSL module Clientless URL-list control bypass Access Control Bypass 2009-012 Horde 3.3.5 "PHP_SELF" Cross-Site Scripting vulnerability Cross-Site Scripting 2009-011 PHP-Calendar v1.1 'configfile' Remote and Local File Inclusion vulnerability File Inclusion 2009-010 WP-Forum <= 2.3 SQL Injection & Blind SQL Injection vulnerabilities SQL Injection 2009-009 Joomla! < 1.5.13 Multiple Full Path Disclosure vulnerabilities Information Disclosure 2009-008 Gmail vulnerable to automated password cracking Brute Force 2009-007 Joomla! < 1.5.12 Multiple XSS vulnerabilities in HTTP Headers Cross-Site Scripting 2009-006 Joomla! 1.5.10 JA_Purity Multiple Persistent XSS Stored Cross-Site Scripting 2009-005 Simple PHP Blog <= 0.5.1 Local File Include vulnerability Local File Inclusion 2009-003 QuiXplorer <= 2.4.1beta 'lang' parameter Remote Code Execution vulnerability Remote Code Execution 2009-002 eXtplorer standalone & Joomla!/Mambo Remote Code Execution vulnerability Remote Code Execution 2009-001 ModSecurity < 2.5.9 is vulnerable to a remote Denial of Service (DoS) Denial of Service

2008

3 advisorys
2008-004 PSI remote integer overflow DoS Integer Overflow / DoS 2009-004 WordPress MU < 2.7 'Host' HTTP Header Cross Site Scripting (XSS) Vulnerability Cross-Site Scripting 2008-001 Wordpress is vulnerable to an unauthorized upgrade and XSS Unauthorized Upgrade / XSS

2007

6 advisorys
2007-006 Tikiwiki CMS is vulnerable to path traversal attack Path Traversal 2007-005 Cygwin buffer overflow due incorrect filename length check Buffer Overflow 2007-004 wwwstats is vulnerable to Persistent XSS Stored Cross-Site Scripting 2007-003 CSRF vulnerability in GMail service Cross-Site Request Forgery 2007-002 Multiple vulnerabilities in WiFi router COMTREND CT-536/HG-536+ Multiple Vulnerabilities 2007-001 Oracle Reports Web Cartridge (RWCGI60) vulnerable to XSS Cross-Site Scripting

2006

11 advisorys
2006-013 Microsoft IIS5 NTLM and Basic authentication bypass Authentication Bypass 2006-011 IMAP/SMTP Injection in Hastymail IMAP/SMTP Injection 2006-010 XSS vulnerability in error page of ISMail Cross-Site Scripting 2006-009 rWeb application firewall is prone to multiple evasion attacks Filter Bypass 2006-007 BlueSocket web administration vulnerable to XSS Cross-Site Scripting 2006-006 SmbClientParser perl module allows remote command execution OS Command Injection 2006-005 Strings command is vulnerable to a Denial of Service Denial of Service 2006-004 VTLS.web.gateway cgi is vulnerable to XSS Cross-Site Scripting 2006-003 Arbitrary flash code remote execution in 123flashchat server Code Injection 2006-002 IMAP/SMTP Injection in SquirrelMail IMAP/SMTP Injection 2006-001 Arbitrary remote file creation in 123flashchat server Arbitrary File Creation
Divulgación responsable

Política de divulgación responsable

Todo hallazgo se comunica primero al fabricante y se publica únicamente cuando existe una corrección disponible o ha transcurrido un plazo razonable de respuesta. Coordinamos el registro CVE y la notificación a los CERT correspondientes.

Si has identificado una vulnerabilidad en un producto que auditamos, o quieres que nuestro equipo revise el tuyo antes de que lo haga un tercero, escríbenos.

Proceso de divulgación

01 Identificación y verificación técnica del hallazgo
02 Notificación privada al fabricante
03 Solicitud de CVE y coordinación con CERT / INCIBE
04 Publicación del advisory con la corrección disponible
Recíbelo por correo

No te pierdas el próximo advisory

Novedades de seguridad, nuevos advisories publicados y convocatorias de webinars técnicos. Dinos qué te interesa y te incluimos en la lista de distribución.

Suscribirme al boletín Ver todos los boletines
Contacto

¿Quieres saber más sobre nuestras publicaciones?

Cuéntanos tu situación y nuestro equipo se pondrá en contacto contigo para orientarte o agendar una llamada técnica.

Oficinas
Barcelona, Madrid, Bogotá

Solicitar información

Nos pondremos en contacto contigo lo antes posible.
Presencia Global

Nuestras oficinas

Barcelona

C. Santander, 101. Edificio A-2
E-08030 Barcelona (España)

+34 93 305 13 18
Madrid

C. Arequipa, 1
E-28043 Madrid (España)

+34 91 763 40 47
Bogotá

Transversal 22 # 98-82, Ed. Porta 100 Of. 1003
110221 Bogotá (Colombia)

+57 601 638 68 88
25
años de experiencia en ciberseguridad
Contacta con nosotros