octobre 2017

Archives du Mois

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20	L'exploit KRACK affecte tous les périphériques Wi-Fi utilisant le protocole WPA2 2017-10-20 12:53:32 TNT Sécurité
21
22
23
24
25
26
27
28
29
30
31

Outils

Swiss Army Suite (SAS) | 9.35 MB

Télécharger

Mango Keywords 3.4.1 | 25.26 MB

Télécharger

Dork Searcher V3 | 64.46 MB

Télécharger

Magic Dork V3.4.5 | 14.59 MB

Télécharger

SQLi Dorks Generator | 1.62 MB

Télécharger

SQLi Dumper 10.5 | 31.46 KB

Télécharger

Scan Now UPnP | 5.91 MB

ScanNowUPnP

CVE-2026-59130 11 août 2026

Medium Severity Description No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. Read more at https://www.tenable.com/cve/CVE-2026-59130

CVE-2026-59131 11 août 2026

Medium Severity Description No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. Read more at https://www.tenable.com/cve/CVE-2026-59131

CVE-2026-59122 11 août 2026

High Severity Description Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally. Read more at https://www.tenable.com/cve/CVE-2026-59122

CVE-2026-59124 11 août 2026

Critical Severity Description Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network. Read more at https://www.tenable.com/cve/CVE-2026-59124

CVE-2026-59126 11 août 2026

High Severity Description Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally. Read more at https://www.tenable.com/cve/CVE-2026-59126

Dangling DNS record for bastion.certb.cdp.bethesda.net 6 août 2026

Posted by shed riot on Aug 06# Summary The hostname resolved to an address within a dynamic cloud IP pool. The address had been released and was no longer controlled by the organisation operating the hostname. This condition is referred to as an "afterlife" issue. Unlike a conventional CNAME-based subdomain takeover, the DNS record pointed […]

CL.0 desync in www.microsoft.com 6 août 2026

Posted by shed riot on Aug 06# Summary I reported the issue to the Microsoft Security Response Center twice: * VULN-165381, MSRC case 102964 * VULN-165876, MSRC case 103259 In both cases, they do not appear to have even looked at the PoCs, and so have failed to adequately investigate before reaching a decision. # […]

CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC) 6 août 2026

Posted by Öner Efe Güngör on Aug 06Hello Full Disclosure, I'd like to share an independent lab Proof-of-Concept for CVE-2026-15013. ### CVE-2026-15013 – miniOrange SAML SSO

[KIS-2026-16] Telenia Software TVox <= 26.5.3 (nice) Local Privilege Escalation Vulnerability 6 août 2026

Posted by Egidio Romano on Aug 06------------------------------------------------------------------------------- Telenia Software TVox

[KIS-2026-15] Telenia Software TVox <= 26.5.3 (action_audio.php) OS Command Injection Vulnerability 6 août 2026

Posted by Egidio Romano on Aug 06------------------------------------------------------------------------------------- Telenia Software TVox