Alertas de Seguridad de la Información

ManageEngine OpManager y Network Configuration Manager en versiones previas a 12.8.671 contienen una vulnerabilidad de traversal de directorios (CVSS 7.5) que permite acceso no autorizado a archivos del sistema. Afecta principalmente a equipos de TI en México y LATAM que usan estas herramientas para monitoreo de infraestructura. La explotación podría comprometer credenciales y configuraciones altas de red.

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows service installation and parameter-update logic in src/win32-service.c can pass an unquoted service ImagePath to CreateServiceA. When Suricata is installed below a path containing spaces and an earlier path component is writable by a local low…