janvier 2023

Archives du Mois

1
2
3	Comment accéder sécuritairement votre réseau local à l'aide de PiVPN 2023-01-03 12:54:58 TNT Sécurité
4
5
6
7
8
9
10
11
12
13
14	Hacking -- Crypto monnaies -- Forum underground -- Informations 2023-01-14 21:29:28 TNT Sécurité
15
16
17	Office 2021 Pro LTSC 2023-01-17 16:49:18 TNT Sécurité
18
19
20
21
22
23	Téléchargez le ISO de Windows 11 2023-01-23 13:41:33 TNT Sécurité
24
25
26
27
28
29
30
31

Outils

Swiss Army Suite (SAS) | 9.35 MB

Télécharger

Mango Keywords 3.4.1 | 25.26 MB

Télécharger

Dork Searcher V3 | 64.46 MB

Télécharger

Magic Dork V3.4.5 | 14.59 MB

Télécharger

SQLi Dorks Generator | 1.62 MB

Télécharger

SQLi Dumper 10.5 | 31.46 KB

Télécharger

Scan Now UPnP | 5.91 MB

ScanNowUPnP

CVE-2026-8206 1 juin 2026

Severity Not Scored Description The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This is due to the plugin accepting an arbitrary email address when a username is used in the password reset request. This makes it […]

CVE-2026-10249 1 juin 2026

Medium Severity Description A vulnerability was identified in itsourcecode Online Blood Bank Management System 1.0. Impacted... Read more at https://www.tenable.com/cve/CVE-2026-10249

CVE-2026-10245 1 juin 2026

Medium Severity Description A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is the function create_supplier of the file /ShowForm/create_supplier/main. Executing a manipulation of the argument company_name can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be […]

CVE-2026-10246 1 juin 2026

Medium Severity Description A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function create_medicine_presentation of the file /ShowForm/create_medicine_presentation/main. The manipulation of the argument medicine_presentation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Read […]

CVE-2026-49361 1 juin 2026

High Severity Description Apache Fluss versions prior to 0.9.1 configure the Netty LengthFieldBasedFrameDecoder with... Read more at https://www.tenable.com/cve/CVE-2026-49361

CyberDanube Security Research 20260528-0 | Multiple Vulnerabilities in Multiple Vulnerabilities in Mennekes Amtron Series 1 juin 2026

bmcweb (OpenBMC web server): four vulnerabilities — two unfixed, GHSA without a CVE 1 juin 2026

Posted by binreaper via Fulldisclosure on May 31Hi all, Posting a brief summary of a four-finding disclosure on bmcweb (the OpenBMC HTTP/Redfish web server), which ships in BMC firmware on most modern enterprise servers — Intel, IBM, HPE, NVIDIA, and various ODMs. Full timeline and analysis on the blog: https://binreaper.pages.dev/posts/2026-05-27-bmcweb-disclosure/ ## Why bmcweb matters A […]

Re: Dovecot Security Advisory OXDC-2026-0002 26 mai 2026

Posted by Noel Butler via Fulldisclosure on May 25So when is the fix for dovecot 2.3 source code due to be released? Since by your wording by not including the first detected versions, it must be assumed 2.3 is affected, and as no EOL has been published or announced for 2.3.x, and as 2.3 is […]

SSRF in Anthropic mcp-server-fetch and Microsoft playwright-mcp — publicly disclosed via GitHub issues 26 mai 2026

Posted by outreach on May 25-----BEGIN SECURITY ADVISORY----- Title: Server-Side Request Forgery (SSRF) in Anthropic mcp-server-fetch and Microsoft playwright-mcp Author: Syed Anas Mohiuddin Date: May 25, 2026 CVSS: 7.5 (HIGH) — AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N References: Already public via GitHub issues (see below) == AFFECTED PRODUCTS == 1. Anthropic mcp-server-fetch (modelcontextprotocol/servers) All versions as of May...

[SECURITY ADVISORY] CVE-2021-21735 - ZTE ZXHN H168N V3.5 Unauthenticated Admin Credential Leak 26 mai 2026

Posted by m.nageh on May 25-----BEGIN SECURITY ADVISORY----- Advisory ID: MONX-2021-001 CVE ID: CVE-2021-21735 Title: ZTE ZXHN H168N V3.5 - Unauthenticated Wizard Credential Disclosure to Full Admin Compromise Affected: ZTE ZXHN H168N V3.5 Date: 2026-05-20 Author: Mina Nageh Salalma (Monx Research) Contact: minanageh379 () gmail com Public URL:...