Auditoría
-
Nutcracking SquirrelMail: 19 Undocumented Vulnerabilities
SquirrelMail has been end-of-life since 2011. It’s still sitting in production behind corporate proxies, university mail portals and a surprising number of hosting panels. So one quiet afternoon I pulled…
-
001. Coordinated Vulnerability Disclosure – Public Sector (Spain)
Coordinated report submitted through a national CERT. Context This section documents a real-world case of responsible security disclosure involving a public-sector system in Spain. The finding was identified through non-intrusive…