novembre 2013

Archives du Mois

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18	Hacker Facebook 2013-11-18 19:58:14 TNT Sécurité
19
20
21
22
23
24
25
26
27
28
29	Vulnérablité UPnP 2013-11-29 21:14:44 TNT Sécurité
30	Est-ce que votre navigateur est sécuritaire ? 2013-11-30 10:16:40 TNT Sécurité

CVE-2025-24024 21 janvier 2025

Critical Severity Description Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's functions, including server administration components if enabled. Version 1.9.1 reverts the feature that introduced the bug, and […]

CVE-2025-23369 21 janvier 2025

Medium Severity Description An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed signature spoofing for unauthorized internal users. Instances not utilizing SAML single sign-on or where the attacker is not already an existing user were not impacted. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12.14, […]

CVE-2024-51417 21 janvier 2025

High Severity Description An issue in System.Linq.Dynamic.Core Latest version v.1.4.6 allows remote access to properties on reflection types and static properties/fields. Read more at https://www.tenable.com/cve/CVE-2024-51417

CVE-2025-24460 21 janvier 2025

Medium Severity Description In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool Read more at https://www.tenable.com/cve/CVE-2025-24460

CVE-2025-24461 21 janvier 2025

Medium Severity Description In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint Read more at https://www.tenable.com/cve/CVE-2025-24461

CVE-2024-48463 16 janvier 2025

Posted by Rodolfo Tavares via Fulldisclosure on Jan 15=====[ Tempest Security Intelligence - ADV-10/2024 ]========================== Bruno IDE Desktop prior to 1.29.0 Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil =====[ Table of Contents ]================================================== Overview Detailed Description Timeline of Disclosure Thanks & Acknowledgements References =====[ Vulnerability Information...

CyberDanube Security Research 20250107-0 | Multiple Vulnerabilities in ABB AC500v3 16 janvier 2025

Posted by Thomas Weber | CyberDanube via Fulldisclosure on Jan 15CyberDanube Security Research 20250107-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities in ABB AC500v3 product| ABB AC500v3 vulnerable version|

Certified Asterisk Security Release certified-20.7-cert4 16 janvier 2025

Posted by Asterisk Development Team via Fulldisclosure on Jan 15The Asterisk Development Team would like to announce security release Certified Asterisk 20.7-cert4. The release artifacts are available for immediate download at https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert4 and https://downloads.asterisk.org/pub/telephony/certified-asterisk Repository: https://github.com/asterisk/asterisk Tag: certified-20.7-cert4 ## Change Log for Release asterisk-certified-20.7-cert4 ###...

Certified Asterisk Security Release certified-18.9-cert13 16 janvier 2025

Posted by Asterisk Development Team via Fulldisclosure on Jan 15The Asterisk Development Team would like to announce security release Certified Asterisk 18.9-cert13. The release artifacts are available for immediate download at https://github.com/asterisk/asterisk/releases/tag/certified-18.9-cert13 and https://downloads.asterisk.org/pub/telephony/certified-asterisk Repository: https://github.com/asterisk/asterisk Tag: certified-18.9-cert13 ## Change Log for Release asterisk-certified-18.9-cert13 ###...

Asterisk Security Release 22.1.1 16 janvier 2025

Posted by Asterisk Development Team via Fulldisclosure on Jan 15The Asterisk Development Team would like to announce security release Asterisk 22.1.1. The release artifacts are available for immediate download at https://github.com/asterisk/asterisk/releases/tag/22.1.1 and https://downloads.asterisk.org/pub/telephony/asterisk Repository: https://github.com/asterisk/asterisk Tag: 22.1.1 ## Change Log for Release asterisk-22.1.1 ### Links: - [Full ChangeLog](...