{"id":37054,"date":"2019-10-31T22:15:30","date_gmt":"2019-10-31T19:15:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\/"},"modified":"2019-10-31T22:15:30","modified_gmt":"2019-10-31T19:15:30","slug":"pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","title":{"rendered":"Pwnie Awards 2019: A legjelent\u0151sebb sebezhet\u0151s\u00e9gek \u00e9s biztons\u00e1gi kudarcok","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A Las Vegasban megrendezett Black Hat USA konferenci\u00e1n <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/\">tartott\u00e1k<\/a><\/noindex> a d\u00edj\u00e1tad\u00f3 cerem\u00f3ni\u00e1t <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\">Pwnie Awards 2019<\/a><\/noindex>, amely keretein bel\u00fcl a legjelent\u0151sebb sebezhet\u0151s\u00e9geket \u00e9s abszurd biztons\u00e1gi kudarcokat d\u00edjazt\u00e1k. A Pwnie Awards a sz\u00e1m\u00edt\u00e1stechnikai biztons\u00e1g Oscarj\u00e1hoz \u00e9s Arany M\u00e1ln\u00e1j\u00e1hoz hasonl\u00edthat\u00f3, \u00e9s \u00e9vente megrendez\u00e9sre ker\u00fcl, 2007 \u00f3ta. <\/p>\n<p>F\u0151 <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/winners\/\">gy\u0151ztesek<\/a><\/noindex> \u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/nominations\">kateg\u00f3ri\u00e1k<\/a><\/noindex>: <\/p>\n<ul>\n<li class=\"l\"> <b>Legjobb szerverhiba<\/b>. Ezt a h\u00e1l\u00f3zati szolg\u00e1ltat\u00e1sban felfedezett \u00e9s kihaszn\u00e1lt technikailag legbonyolultabb \u00e9s leg\u00e9rdekesebb hib\u00e1\u00e9rt \u00edt\u00e9lik oda. A gy\u0151ztesek azok a kutat\u00f3k,  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.blackhat.com\/us-19\/briefings\/schedule\/#infiltrating-corporate-intranet-like-nsa---pre-auth-rce-on-leading-ssl-vpns-15545\">akik felfedezt\u00e9k<\/a><\/noindex> a Pulse Secure VPN-szolg\u00e1ltat\u00f3 sebezhet\u0151s\u00e9g\u00e9t, amelyet a Twitter, az Uber, a Microsoft, a Slack, a SpaceX, az Akamai, az Intel, az IBM, a VMware, az Egyes\u00fclt \u00c1llamok Haditenger\u00e9szete, az Egyes\u00fclt \u00c1llamok Belbiztons\u00e1gi Miniszt\u00e9riuma (DHS) \u00e9s val\u00f3sz\u00edn\u0171leg a Fortune 500 c\u00e9gek fel\u00e9nek haszn\u00e1lnak. A kutat\u00f3k egy h\u00e1ts\u00f3 ajt\u00f3t tal\u00e1ltak, amely lehet\u0151v\u00e9 tette a nem hiteles\u00edtett t\u00e1mad\u00f3 sz\u00e1m\u00e1ra, hogy megv\u00e1ltoztassa b\u00e1rmely felhaszn\u00e1l\u00f3 jelszav\u00e1t. Bemutatt\u00e1k a probl\u00e9ma kihaszn\u00e1l\u00e1s\u00e1t a VPN-szerverhez val\u00f3 root-hozz\u00e1f\u00e9r\u00e9s megszerz\u00e9s\u00e9re, ahol csak a HTTPS port van nyitva;\n<p>A d\u00edjat el nem nyert jel\u00f6ltek k\u00f6z\u00fcl kiemelhet\u0151ek: <\/p>\n<ul>\n<li class=\"l\"> A Jenkins folyamatos integr\u00e1ci\u00f3s rendszer\u00e9n\u00e9l hiteles\u00edt\u00e9si folyamat el\u0151tt kihaszn\u00e1lhat\u00f3 sebezhet\u0151s\u00e9g, amely lehet\u0151v\u00e9 teszi, hogy k\u00f3dot futtassanak a szerveren. A sebezhet\u0151s\u00e9get akt\u00edvan haszn\u00e1lj\u00e1k botok a kriptovaluta b\u00e1ny\u00e1szat\u00e1ra a szervereken; <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/orangetw\/awesome-jenkins-rce-2019\">vulnerability<\/a><\/noindex> Kritikus\n<li class=\"l\"> az Exim levelez\u0151szerverben, amely lehet\u0151v\u00e9 teszi k\u00f3d futtat\u00e1s\u00e1t root jogk\u00f6rrel a szerveren; <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50819\">vulnerability<\/a><\/noindex> Xiongmai XMeye P2P IP kamer\u00e1kban, amelyek lehet\u0151v\u00e9 teszik az eszk\u00f6z ir\u00e1ny\u00edt\u00e1s\u00e1nak megszerz\u00e9s\u00e9t. A kamer\u00e1k gy\u00e1ri jelsz\u00f3val \u00e9rkeztek, \u00e9s nem alkalmaztak hiteles\u00edt\u00e9st a firmware friss\u00edt\u00e9sekor;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2018\/10\/millions-of-xiongmai-video-surveillance-devices-can-be-hacked-via-cloud-feature-xmeye-p2p-cloud\/\">Vulnerabilities<\/a><\/noindex> az RDP protokoll megval\u00f3s\u00edt\u00e1s\u00e1ban Windows alatt, amely lehet\u0151v\u00e9 teszi t\u00e1voli k\u00f3d v\u00e9grehajt\u00e1s\u00e1t;\n<li class=\"l\"> az Exim levelez\u0151szerverben, amely lehet\u0151v\u00e9 teszi k\u00f3d futtat\u00e1s\u00e1t root jogk\u00f6rrel a szerveren; <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-0708\">vulnerability<\/a><\/noindex> WordPressben, amely a PHP k\u00f3d k\u00e9p form\u00e1j\u00e1ban val\u00f3 felt\u00f6lt\u00e9s\u00e9vel kapcsolatos. A probl\u00e9ma lehet\u0151v\u00e9 teszi tetsz\u0151leges k\u00f3d v\u00e9grehajt\u00e1s\u00e1t a szerveren, ha a k\u00f6zz\u00e9t\u00e9tel jogk\u00f6r\u00e9vel (Author) rendelkezi a felhaszn\u00e1l\u00f3;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50177\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> Legjobb klienoldali hiba\n<\/ul>\n<li class=\"l\"> <b>. A gy\u0151ztes egy k\u00f6nnyen kihaszn\u00e1lhat\u00f3 sebezhet\u0151s\u00e9g,<\/b>az Apple FaceTime csoportos h\u00edv\u00e1s rendszer\u00e9ben, amely lehet\u0151v\u00e9 teszi a csoportos h\u00edv\u00e1s ind\u00edt\u00f3j\u00e1nak, hogy k\u00e9nyszer\u00edtse a h\u00edvott f\u00e9l telefonj\u00e1nak felv\u00e9tel\u00e9t (p\u00e9ld\u00e1ul hallgat\u00e1s vagy megfigyel\u00e9s c\u00e9lj\u00e1b\u00f3l). <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-6223\">vulnerability<\/a><\/noindex> Apple FaceTime csoportos h\u00edv\u00e1srendszer\u00e9ben, amely lehet\u0151v\u00e9 teszi a csoportos h\u00edv\u00e1s kezdem\u00e9nyez\u0151je sz\u00e1m\u00e1ra, hogy k\u00e9nyszer\u00edtse a h\u00edvott f\u00e9l oldal\u00e1n bej\u00f6v\u0151 h\u00edv\u00e1s fogad\u00e1s\u00e1t (p\u00e9ld\u00e1ul lehallgat\u00e1sra \u00e9s kukkol\u00e1sra).\n<p>A d\u00edjra szint\u00e9n p\u00e1ly\u00e1z\u00f3k voltak: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50679\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> a WhatsApp-ban, amely lehet\u0151v\u00e9 teszi k\u00f3dunk v\u00e9grehajt\u00e1s\u00e1t egy k\u00fcl\u00f6nlegesen form\u00e1zott hangh\u00edv\u00e1s k\u00fcld\u00e9s\u00e9vel;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=899689\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> a Chrome b\u00f6ng\u00e9sz\u0151ben haszn\u00e1lt Skia grafikai k\u00f6nyvt\u00e1rban, amely mem\u00f3ria s\u00e9r\u00fcl\u00e9s\u00e9t okozhatja, mivel lebeg\u0151pontos sz\u00e1m\u00edt\u00e1si hib\u00e1k fordulhatnak el\u0151 bizonyos geometriai transzform\u00e1ci\u00f3k sor\u00e1n;\n<\/ul>\n<li class=\"l\"> <b>A legjobb magas privil\u00e9gium\u00fa sebezhet\u0151s\u00e9g<\/b>. A gy\u0151zelmet az al\u00e1bbiak felfedez\u00e9s\u00e9\u00e9rt \u00edt\u00e9lt\u00e9k oda <noindex><a rel=\"nofollow\" href=\"https:\/\/googleprojectzero.blogspot.com\/2019\/01\/voucherswap-exploiting-mig-reference.html\">sebezhet\u0151s\u00e9gek<\/a><\/noindex> az iOS kernel\u00e9ben, amely iptvoucher-en kereszt\u00fcl kihaszn\u00e1lhat\u00f3, \u00e9s a Safari b\u00f6ng\u00e9sz\u0151n kereszt\u00fcl \u00e9rhet\u0151 el.\n<p>A d\u00edjra szint\u00e9n p\u00e1ly\u00e1z\u00f3k voltak: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-0859\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> a Windows rendszerben, amely lehet\u0151v\u00e9 teszi a rendszer teljes ir\u00e1ny\u00edt\u00e1s\u00e1t a CreateWindowEx (win32k.sys) funkci\u00f3 manipul\u00e1l\u00e1s\u00e1n kereszt\u00fcl. A probl\u00e9m\u00e1t egy rosszindulat\u00fa k\u00f3d elemz\u00e9se sor\u00e1n t\u00e1rt\u00e1k fel, amely a sebezhet\u0151s\u00e9get a jav\u00edt\u00e1sa el\u0151tt kihaszn\u00e1lta;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50130\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> a runc \u00e9s az LXC rendszer\u00e9ben, amely a Dockert \u00e9s m\u00e1s kont\u00e9neriz\u00e1ci\u00f3s rendszereket \u00e9rint, lehet\u0151v\u00e9 t\u00e9ve a t\u00e1mad\u00f3 \u00e1ltal ir\u00e1ny\u00edtott elk\u00fcl\u00f6n\u00edtett kont\u00e9nerb\u0151l a runc v\u00e9grehajthat\u00f3 f\u00e1jl m\u00f3dos\u00edt\u00e1s\u00e1t, \u00e9s \u00edgy root privil\u00e9giumok megszerz\u00e9s\u00e9t a gazda rendszeren;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.zecops.com\/vulnerabilities\/exploit-of-cve-2019-7286\/\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> az iOS-ben (CFPrefsDaemon), amely lehet\u0151v\u00e9 teszi az elszigetel\u00e9si m\u00f3dok megker\u00fcl\u00e9s\u00e9t \u00e9s a k\u00f3d root jogokkal val\u00f3 v\u00e9grehajt\u00e1s\u00e1t;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2018-9568\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> a Linux TCP-stackj\u00e9ben, amely az Androidban haszn\u00e1lt, lehet\u0151v\u00e9 teszi, hogy a helyi felhaszn\u00e1l\u00f3 megemelje a privil\u00e9giumait a k\u00e9sz\u00fcl\u00e9ken;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49931\">Vulnerabilities<\/a><\/noindex> a systemd-journald-ban, amely lehet\u0151v\u00e9 teszi a root jogok megszerz\u00e9s\u00e9t;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/usn.ubuntu.com\/4077-1\/\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> a tmpreaper eszk\u00f6zben a \/tmp tiszt\u00edt\u00e1s\u00e1hoz, amely lehet\u0151v\u00e9 teszi, hogy a f\u00e1jlt a f\u00e1jlrendszer b\u00e1rmely r\u00e9sz\u00e9n meg\u0151rizz\u00fck;\n<\/ul>\n<li class=\"l\"> <b>A legjobb kriptogr\u00e1fiai t\u00e1mad\u00e1s<\/b>. Azokat a legfontosabb sebezhet\u0151s\u00e9geket jutalmazz\u00e1k, amelyek a val\u00f3s rendszerek, protokollok \u00e9s titkos\u00edt\u00e1si algoritmusok felfedez\u00e9s\u00e9hez vezetnek. A d\u00edjat az al\u00e1bbiak felfedez\u00e9s\u00e9\u00e9rt \u00edt\u00e9lt\u00e9k oda <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50493\">sebezhet\u0151s\u00e9get<\/a><\/noindex> a WPA3 vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zatok v\u00e9delmi technol\u00f3gi\u00e1j\u00e1ban \u00e9s az EAP-pwd-ben, amelyek lehet\u0151v\u00e9 teszik a csatlakoz\u00e1si jelsz\u00f3 rekonstru\u00e1l\u00e1s\u00e1t \u00e9s a vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zathoz val\u00f3 hozz\u00e1f\u00e9r\u00e9st an\u00e9lk\u00fcl, hogy ismert lenne a jelsz\u00f3.\n<p>A d\u00edjra p\u00e1ly\u00e1z\u00f3k k\u00f6z\u00e9 tartozott: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48597\">M\u00f3dszer<\/a><\/noindex> PGP \u00e9s S\/MIME titkos\u00edt\u00e1si t\u00e1mad\u00e1sok levelez\u0151klienseken;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.f-secure.com\/cold-boot-attacks\/\">Alkalmaz\u00e1s<\/a><\/noindex> hideg \u00fajraind\u00edt\u00e1si m\u00f3dszer a Bitlocker titkos\u00edtott part\u00edci\u00f3inak tartalm\u00e1hoz val\u00f3 hozz\u00e1f\u00e9r\u00e9shez;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50213\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> az OpenSSL-ben, amely lehet\u0151v\u00e9 teszi a hib\u00e1s t\u00f6ltel\u00e9k \u00e9s hib\u00e1s MAC megszerz\u00e9s\u00e9nek helyzetek elv\u00e1laszt\u00e1s\u00e1t. A probl\u00e9ma a null\u00e1s b\u00e1jtok helytelen kezel\u00e9s\u00e9b\u0151l ered a t\u00f6ltel\u00e9kben (padding oracle);\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2018\/11\/my-name-is-johann-wolfgang-von-goethe-i-can-prove-it\/\">Problems<\/a><\/noindex> a N\u00e9metorsz\u00e1gban haszn\u00e1lt azonos\u00edt\u00f3 k\u00e1rty\u00e1kkal, amelyek SAML-t haszn\u00e1lj\u00e1k;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.chromium.org\/chromium-os\/u2f-ecdsa-vulnerability\">Probl\u00e9ma<\/a><\/noindex> a v\u00e9letlensz\u00e1mok entropi\u00e1j\u00e1ra a ChromeOS U2F token t\u00e1mogat\u00e1s\u00e1nak megval\u00f3s\u00edt\u00e1sa sor\u00e1n;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/monocypher.org\/quality-assurance\/disclosures\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> a Monocypher, amely miatt az EdDSA null\u00e1s al\u00e1\u00edr\u00e1sait elfogadhat\u00f3nak tartott\u00e1k.\n<\/ul>\n<li class=\"l\"> <b>A leginnovat\u00edvabb kutat\u00e1s.<\/b>  A d\u00edjat a technika fejleszt\u0151je kapta <noindex><a rel=\"nofollow\" href=\"https:\/\/gamozolabs.github.io\/fuzzing\/2018\/10\/14\/vectorized_emulation.html\">Vektoriz\u00e1lt emul\u00e1ci\u00f3<\/a><\/noindex>, amely az AVX-512 vektore instrukci\u00f3kat haszn\u00e1lja a programok fut\u00e1s\u00e1nak emul\u00e1l\u00e1s\u00e1ra, \u00e9s jelent\u0151s sebess\u00e9gn\u00f6veked\u00e9st lehet\u0151v\u00e9 t\u00e9ve a fuzzing tesztel\u00e9s sor\u00e1n (40-120 milli\u00e1rd utas\u00edt\u00e1s m\u00e1sodpercenk\u00e9nt). A technika minden CPU magon p\u00e1rhuzamosan hajthat v\u00e9gre 8 db 64 bites vagy 16 db 32 bites virtu\u00e1lis g\u00e9pet fuzzing tesztel\u00e9si utas\u00edt\u00e1sokkal.\n<p>A d\u00edjra jel\u00f6ltek voltak: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mimecast.com\/blog\/2019\/06\/exploit-using-microsoft-excel-power-query-for-remote-dde-execution-discovered\/\">S\u00e9r\u00fcl\u00e9kenys\u00e9g<\/a><\/noindex> a Power Query technol\u00f3gi\u00e1val az MS Excelben, amely lehet\u0151v\u00e9 teszi a k\u00f3d v\u00e9grehajt\u00e1s\u00e1t \u00e9s a speci\u00e1lis form\u00e1z\u00e1s\u00fa t\u00e1bl\u00e1zatok megnyit\u00e1sakor az alkalmaz\u00e1sizol\u00e1ci\u00f3s m\u00f3dszerek kiker\u00fcl\u00e9s\u00e9t;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50446\">M\u00f3dszer<\/a><\/noindex> a Tesla aut\u00f3k automatikus pil\u00f3t\u00e1j\u00e1nak kij\u00e1tsz\u00e1sa, hogy a szembej\u00f6v\u0151 s\u00e1vra hajtsanak;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2019\/02\/reverse-engineering-architecture-pinout-plc\/\">M\u0171k\u00f6d\u00e9s<\/a><\/noindex> a Siemens S7-1200 ASICS chipj\u00e9nek visszafejt\u00e9s\u00e9vel;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/arxiv.org\/abs\/1808.10250\">SonarSnoop<\/a><\/noindex> \u2014 az \u00e9rint\u00e9si mozg\u00e1sok nyomk\u00f6vet\u00e9s\u00e9nek technik\u00e1ja a telefon felold\u00f3 k\u00f3dj\u00e1nak meghat\u00e1roz\u00e1s\u00e1hoz, amely a szon\u00e1r m\u0171k\u00f6d\u00e9si elv\u00e9re \u00e9p\u00edt \u2014 a telefon fels\u0151 \u00e9s als\u00f3 hangsz\u00f3r\u00f3i hallhatatlan rezg\u00e9seket gener\u00e1lnak, m\u00edg az integr\u00e1lt mikrofonok ezeket r\u00f6gz\u00edtik a visszaver\u0151d\u0151 k\u00e9zrezg\u00e9sek elemz\u00e9s\u00e9hez;\n<li class=\"l\"> \t<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50260\">Fejleszt\u00e9s<\/a><\/noindex> az NSA Ghidra visszafejt\u0151 eszk\u00f6z\u00e9vel;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/medium.com\/@massarelli\/safe-self-attentive-function-embedding-d80abbfea794\">SAFE<\/a><\/noindex> \u2014 a bin\u00e1ris \u00f6sszes\u00edt\u00e9sek elemz\u00e9s\u00e9n alapul\u00f3 technika, amely az azonos funkci\u00f3j\u00fa k\u00f3dok haszn\u00e1lat\u00e1t hat\u00e1rozza meg t\u00f6bb futtathat\u00f3 f\u00e1jlban;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/vulmon.com\/vulnerabilitydetails?qid=CVE-2019-11098&#038;scoretype=cvssv2\">M\u00f3dszer kidolgoz\u00e1sa<\/a><\/noindex> az Intel Boot Guard mechanizmus\u00e1nak megker\u00fcl\u00e9s\u00e9re az al\u00e1\u00edr\u00e1s ellen\u0151rz\u00e9se n\u00e9lk\u00fcli m\u00f3dos\u00edtott UEFI firmware-ek bet\u00f6lt\u00e9s\u00e9re.\n<\/ul>\n<li class=\"l\"> <b>A legrosszabb v\u00e1lasz a gy\u00e1rt\u00f3t\u00f3l<\/b> (Lamest Vendor Response). Nomin\u00e1ci\u00f3 a legkev\u00e9sb\u00e9 megfelel\u0151 reakci\u00f3\u00e9rt a saj\u00e1t term\u00e9kben \u00e9szlelt sebezhet\u0151s\u00e9gre. A gy\u0151ztes a BitFi kriptovaluta p\u00e9nzt\u00e1rca fejleszt\u0151i, akik a term\u00e9k\u00fck rendk\u00edv\u00fcli biztons\u00e1g\u00e1r\u00f3l kiab\u00e1lnak, ami val\u00f3j\u00e1ban illuz\u00f3rikusnak bizonyult, \u00e9s zaklatj\u00e1k a sebezhet\u0151s\u00e9geket felfed\u0151 kutat\u00f3kat, mik\u00f6zben nem fizetik ki a felfedez\u00e9s\u00e9rt \u00edg\u00e9rt d\u00edjakat.\n<p>A d\u00edjra jel\u00f6ltek k\u00f6z\u00f6tt szint\u00e9n szerepeltek: <\/p>\n<ul>\n<li class=\"l\"> A biztons\u00e1gi kutat\u00f3 azzal v\u00e1dolta az Atrient igazgat\u00f3j\u00e1t, hogy az \u00e1ltala \u00e9szlelt sebezhet\u0151s\u00e9g jelent\u00e9s\u00e9nek elt\u00fcntet\u00e9s\u00e9re k\u00e9nyszer\u00edtette, de az igazgat\u00f3 tagadja az incidens megt\u00f6rt\u00e9nt\u00e9t, \u00e9s a megfigyel\u0151 kamer\u00e1k nem r\u00f6gz\u00edtett\u00e9k az t\u00e1mad\u00e1st;\n<li class=\"l\"> A Zoom t\u00e1rsas\u00e1g k\u00e9slekedett a kritikus hiba jav\u00edt\u00e1s\u00e1val <noindex><a rel=\"nofollow\" href=\"https:\/\/medium.com\/bugbountywriteup\/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5\">sebezhet\u0151s\u00e9gek<\/a><\/noindex> A konferencia-rendszer\u00e9ben a probl\u00e9m\u00e1t csak nyilv\u00e1nos f\u00e9ny der\u00fcl\u00e9se ut\u00e1n jav\u00edtott\u00e1k. A sebezhet\u0151s\u00e9g lehet\u0151v\u00e9 tette, hogy egy k\u00fcls\u0151 t\u00e1mad\u00f3 adatokat szerezzen a macOS felhaszn\u00e1l\u00f3k webkamer\u00e1ib\u00f3l, amikor speci\u00e1lisan kialak\u00edtott oldalt nyitottak meg a b\u00f6ng\u00e9sz\u0151ben (a Zoom kliens oldalon egy HTTP szervert ind\u00edtott, amely parancsokat fogadott a helyi alkalmaz\u00e1st\u00f3l).\n<li class=\"l\"> T\u00f6bb mint 10 \u00e9ve k\u00e9ptelenek voltak jav\u00edtani <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51006\">a probl\u00e9m\u00e1t<\/a><\/noindex> az OpenPGP titkos\u00edt\u00f3 kulcsgener\u00e1tor szervereihez, arra hivatkozva, hogy a k\u00f3d egy specifikus OCaml nyelven van meg\u00edrva, \u00e9s nincs hozz\u00e1 t\u00e1mogat\u00e1s.\n<\/ul>\n<p><b>A legfennh\u00e9j\u00e1z\u00f3bb sebezhet\u0151s\u00e9gr\u0151l sz\u00f3l\u00f3 bejelent\u00e9s<\/b>. A legfennh\u00e9j\u00e1z\u00f3bb \u00e9s legkiterjedtebb probl\u00e9ma internetes \u00e9s m\u00e9diabeli bemutat\u00e1s\u00e1\u00e9rt j\u00e1r, k\u00fcl\u00f6n\u00f6sen akkor, ha v\u00e9g\u00fcl a sebezhet\u0151s\u00e9g gyakorlatban nem kihaszn\u00e1lhat\u00f3. A d\u00edjat a Bloomberg kapta <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49393\">nyilatkozatot<\/a><\/noindex> a Super Micro alaplapokban felfedezett k\u00e9mprogram chipek \u00fcgy\u00e9ben, amely nem igazol\u00f3dott, \u00e9s a forr\u00e1s teljesen <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49417\">m\u00e1s inform\u00e1ci\u00f3t jelzett.<\/a><\/noindex>.<\/p>\n<p>A jel\u00f6ltek k\u00f6z\u00f6tt szerepel: <\/p>\n<ul>\n<li class=\"l\"> A libssh sebezhet\u0151s\u00e9ge, amely <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49453\">\u00e9rintette<\/a><\/noindex> az egyedi szerveralkalmaz\u00e1sokat (a libssh alig haszn\u00e1latos szerverek sz\u00e1m\u00e1ra), de az NCC Group \u00fagy mutatta be, mint olyan sebezhet\u0151s\u00e9get, amely lehet\u0151v\u00e9 teszi b\u00e1rmely OpenSSH szerver megt\u00e1mad\u00e1s\u00e1t.\n<li class=\"l\"> A DICOM form\u00e1tum\u00fa k\u00e9pek felhaszn\u00e1l\u00e1s\u00e1val t\u00f6rt\u00e9n\u0151 t\u00e1mad\u00e1s l\u00e9nyege, hogy k\u00e9sz\u00edthet\u0151 egy Windows sz\u00e1m\u00e1ra futtathat\u00f3 \u00e1llom\u00e1ny, amely \u00fagy n\u00e9z ki, mint egy \u00e9rv\u00e9nyes DICOM k\u00e9pf\u00e1jl. Ezt az \u00e1llom\u00e1nyt orvosi eszk\u00f6zre lehet felt\u00f6lteni \u00e9s v\u00e9grehajtani.\n<li class=\"l\"> S\u00e9r\u00fcl\u00e9kenys\u00e9g <noindex><a rel=\"nofollow\" href=\"https:\/\/thrangrycat.com\/\">Thrangrycat<\/a><\/noindex>, amely lehet\u0151v\u00e9 teszi a Cisco eszk\u00f6z\u00f6k biztons\u00e1gos ind\u00edt\u00e1si mechanizmus\u00e1nak megker\u00fcl\u00e9s\u00e9t. A sebezhet\u0151s\u00e9get felf\u00fajt probl\u00e9mak\u00e9nt kategoriz\u00e1lt\u00e1k, mivel a t\u00e1mad\u00e1shoz root jogosults\u00e1gok sz\u00fcks\u00e9gesek, de ha a t\u00e1mad\u00f3 m\u00e1r root-hozz\u00e1f\u00e9r\u00e9st szerzett, akkor milyen biztons\u00e1gr\u00f3l lehet sz\u00f3. A sebezhet\u0151s\u00e9g egyben a legalacsonyabbra \u00e9rt\u00e9kelt probl\u00e9m\u00e1k kateg\u00f3ri\u00e1j\u00e1t is megnyerte, mivel lehet\u0151v\u00e9 teszi egy \u00e1lland\u00f3 h\u00e1ts\u00f3 ajt\u00f3 beilleszt\u00e9s\u00e9t a Flash-be;\n<\/ul>\n<li class=\"l\"> <b>A legnagyobb kudarc<\/b> (Legnagyobb Epikus KUDARC). A gy\u0151zelem a Bloomberg kiadv\u00e1ny\u00e1nak jutalmazott, mert szenz\u00e1ci\u00f3s cikkek sor\u00e1t k\u00f6z\u00f6lte hangzatos c\u00edmekkel, de kital\u00e1lt t\u00e9nyekkel, forr\u00e1sok eltitkol\u00e1s\u00e1val, \u00f6sszeesk\u00fcv\u00e9s-elm\u00e9letekhez val\u00f3 visszat\u00e9r\u00e9ssel, valamint olyan kifejez\u00e9sek haszn\u00e1lat\u00e1val, mint a \u201ekiberfegyver\u201d, \u00e9s elfogadhatatlan \u00e1ltal\u00e1nos\u00edt\u00e1sokkal. M\u00e1s nevezettek:\n<ul>\n<li class=\"l\"> A Shadowhammer t\u00e1mad\u00e1s az Asus firmware friss\u00edt\u00e9si szolg\u00e1ltat\u00e1s ellen;\n<li class=\"l\"> A BitFi t\u00e1rol\u00f3 felt\u00f6r\u00e9se, amelyet \"megbonthatatlannak\" rekl\u00e1moztak;\n<li class=\"l\"> Szem\u00e9lyes adatok kisziv\u00e1rg\u00e1sa \u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49366\">tokenek<\/a><\/noindex> hozz\u00e1f\u00e9r\u00e9s a Facebookhoz.\n<\/ul>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Forr\u00e1s: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51267\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie Awards 2019, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0430\u0431\u0441\u0443\u0440\u0434\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Pwnie Awards \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u043e\u043c \u041e\u0441\u043a\u0430\u0440\u0430 \u0438 \u0417\u043e\u043b\u043e\u0442\u043e\u0439 \u043c\u0430\u043b\u0438\u043d\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0435\u0436\u0435\u0433\u043e\u0434\u043d\u043e, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 2007 \u0433\u043e\u0434\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0438 \u0438 \u043d\u043e\u043c\u0438\u043d\u0430\u0446\u0438\u0438: \u041b\u0443\u0447\u0448\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37054","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Pwnie Awards 2019: \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:15:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:15:30+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pwnie Awards 2019: a legfontosabb biztons\u00e1gi sebezhet\u0151s\u00e9gek \u00e9s hib\u00e1k | ProHoster","description":"A Las Vegas-i Black Hat USA konferenci\u00e1n d\u00edj\u00e1tad\u00f3 \u00fcnneps\u00e9get tartottak, ahol \u00e1tadt\u00e1k a Pwnie-d\u00edjakat.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Pwnie Awards 2019: \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:15:30+00:00","article:modified_time":"2019-10-31T19:15:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37054","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:53:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:34:24","updated":"2026-01-22 05:53:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/37054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=37054"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/37054\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=37054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=37054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=37054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}