TNT Sécurité – TNT Sécurité

Archives de l'Auteur : TNT

Site Web: https://www.tntsecurite.ca
Enregistré: 2013-11-18 23:28:12

Article récent

23 janvier 2023 Téléchargez le ISO de Windows 11: CatégoriesDifférentes attaques; Étiquette :
17 janvier 2023 Office 2021 Pro LTSC: CatégoriesDifférentes attaques; Étiquette :
14 janvier 2023 Hacking — Crypto monnaies — Forum underground — Informations: CatégoriesDivers, Information; Étiquette :
3 janvier 2023 Comment accéder sécuritairement votre réseau local à l’aide de PiVPN: CatégoriesProtection; Étiquette :
22 janvier 2019 Comment exploiter une faille de sécurité à l’aide de Metasploit.: CatégoriesDifférentes attaques, Failles de sécurités, Metasploit; Étiquette :

CVE-2015-10132 21 avril 2024

Low Severity Description A vulnerability classified as problematic was found in Thimo Grauerholz WP-Spreadplugin up to 3.8.6.1 on WordPress. This vulnerability affects unknown code of the file spreadplugin.php. The manipulation of the argument Spreadplugin leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 3.8.6.6 is able to address this issue. […]

CVE-2024-29733 21 avril 2024

High Severity Description Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTP_TLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.create_default_context() during FTP_TLS instantiation is used as mitigation to validate the certificates properly. This issue affects Apache Airflow FTP Provider: before 3.7.0. […]

CVE-2024-29217 21 avril 2024

Medium Severity Description Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer.This issue affects Apache Answer: before 1.3.0. XSS attack when user changes personal website. A logged-in user, when modifying their personal website, can input malicious code in the website to create such an attack. Users are recommended to upgrade […]

CVE-2024-4022 21 avril 2024

Medium Severity Description A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /version.js of the component Version Data Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The […]

CVE-2024-4021 21 avril 2024

Medium Severity Description A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /ndmComponents.js of the component Configuration Setting Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The […]

BACKDOOR.WIN32.DUMADOR.C / Remote Stack Buffer Overflow (SEH) 19 avril 2024

Posted by malvuln on Apr 19Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/6cc630843cabf23621375830df474bc5.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Backdoor.Win32.Dumador.c Vulnerability: Remote Stack Buffer Overflow (SEH) Description: The malware runs an FTP server on TCP port 10000. Third-party adversaries who can reach the server can send a specially […]

SEC Consult SA-20240418-0 :: Broken authorization in Dreamehome app 19 avril 2024

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 19SEC Consult Vulnerability Lab Security Advisory < 20240418-0 > ======================================================================= title: Broken authorization product: Dreamehome app vulnerable version:

MindManager 23 - full disclosure 19 avril 2024

Posted by Pawel Karwowski via Fulldisclosure on Apr 19Resending! Thank you for your efforts. GitHub - pawlokk/mindmanager-poc: public disclosure Affected application: MindManager23_setup.exe Platform: Windows Issue: Local Privilege Escalation via MSI installer Repair Mode (EXE hijacking race condition) Discovered and reported by: Pawel Karwowski and Julian Horoszkiewicz (Eviden Red Team) Proposed mitigation:...

CVE-2024-31705 14 avril 2024

Posted by V3locidad on Apr 14CVE ID: CVE-2024-31705 Title : RCE to Shell Commands" Plugin / GLPI Shell Command Management Interface Affected Product : GLPI - 10.X.X and last version Description: An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input. […]

SEC Consult SA-20240411-0 :: Database Passwords in Server Response in Amazon AWS Glue 14 avril 2024

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 14SEC Consult Vulnerability Lab Security Advisory < 20240411-0 > ======================================================================= title: Database Passwords in Server Response product: Amazon AWS Glue vulnerable version: until 2024-02-23 fixed version: as of 2024-02-23 CVE number: - impact: medium homepage: https://aws.amazon.com/glue/ found:...