Téléchargez le ISO de Windows 11

Depuis un certain temps il est possible de télécharger Windows 11 gratuitement. Il y a trois options pour installer ou créer un média Windows 11

1- Assistant d’installation de Windows 11

C’est la meilleure option pour installer Windows 11 sur l’appareil que vous utilisez actuellement.

Assistant d'installation Win 11

2- Créer un support d’installation pour Windows 11

Si vous souhaitez effectuer une réinstallation ou une nouvelle installation de Windows 11 sur un PC neuf ou usagé, utilisez cette option pour télécharger l’outil de création de support afin de créer une clé USB ou un DVD amorçable.

support d’installation

3- Télécharger l’image disque (ISO) de Windows 11

Cette option est destinée aux utilisateurs qui souhaitent créer un support d’installation amorçable (clé USB, DVD) ou créer une machine virtuelle (fichier .ISO) pour installer Windows 11. Ce téléchargement est un ISO multi-édition qui utilise votre clé de produit pour déverrouiller l’édition appropriée.

Windows 11 ISO

Il est aussi possible de télécharger le Iso de Windows 11 dans la section privée, Il y a aussi un logiciel d’activation. Seulement m’envoyer un courriel demandant le mot de passe.

tnt@tntsecurite.ca

Home

📂 Différentes attaques

CVE-2024-3177 22 avril 2024

Low Severity Description A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference […]

CVE-2024-32653 22 avril 2024

Medium Severity Description jadx is a Dex to Java decompiler. Prior to version 1.5.0, the package name is not filtered before concatenation. This can be exploited to inject arbitrary code into the package name. The vulnerability allows an attacker to execute commands with shell privileges. Version 1.5.0 contains a patch for the vulnerability. Read more […]

CVE-2024-32656 22 avril 2024

High Severity Description Ant Media Server is live streaming engine software. A local privilege escalation vulnerability in present in versions 2.6.0 through 2.8.2 allows any unprivileged operating system user account to escalate privileges to the root user account on the system. This vulnerability arises from Ant Media Server running with Java Management Extensions (JMX) enabled […]

CVE-2024-32480 22 avril 2024

High Severity Description LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Versions prior to 24.4.0 are vulnerable to SQL injection. The `order` parameter is obtained from `$request`. After performing a string check, the value is directly incorporated into an SQL statement and concatenated, resulting in a SQL injection vulnerability. An attacker may extract a whole […]

CVE-2024-32657 22 avril 2024

Medium Severity Description Hydra is a Continuous Integration service for Nix based projects. Attackers can execute arbitrary code in the browser context of Hydra and execute authenticated HTTP requests. The abused feature allows Nix builds to specify files that Hydra serves to clients. One use of this functionality is serving NixOS `.iso` files. The issue […]

BACKDOOR.WIN32.DUMADOR.C / Remote Stack Buffer Overflow (SEH) 19 avril 2024

Posted by malvuln on Apr 19Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/6cc630843cabf23621375830df474bc5.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Backdoor.Win32.Dumador.c Vulnerability: Remote Stack Buffer Overflow (SEH) Description: The malware runs an FTP server on TCP port 10000. Third-party adversaries who can reach the server can send a specially […]

SEC Consult SA-20240418-0 :: Broken authorization in Dreamehome app 19 avril 2024

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 19SEC Consult Vulnerability Lab Security Advisory < 20240418-0 > ======================================================================= title: Broken authorization product: Dreamehome app vulnerable version:

MindManager 23 - full disclosure 19 avril 2024

Posted by Pawel Karwowski via Fulldisclosure on Apr 19Resending! Thank you for your efforts. GitHub - pawlokk/mindmanager-poc: public disclosure Affected application: MindManager23_setup.exe Platform: Windows Issue: Local Privilege Escalation via MSI installer Repair Mode (EXE hijacking race condition) Discovered and reported by: Pawel Karwowski and Julian Horoszkiewicz (Eviden Red Team) Proposed mitigation:...

CVE-2024-31705 14 avril 2024

Posted by V3locidad on Apr 14CVE ID: CVE-2024-31705 Title : RCE to Shell Commands" Plugin / GLPI Shell Command Management Interface Affected Product : GLPI - 10.X.X and last version Description: An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input. […]

SEC Consult SA-20240411-0 :: Database Passwords in Server Response in Amazon AWS Glue 14 avril 2024

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 14SEC Consult Vulnerability Lab Security Advisory < 20240411-0 > ======================================================================= title: Database Passwords in Server Response product: Amazon AWS Glue vulnerable version: until 2024-02-23 fixed version: as of 2024-02-23 CVE number: - impact: medium homepage: https://aws.amazon.com/glue/ found:...