Liens web

Plusieurs liens intéressants

Les compagnies de routeur

Pour mettre à jour le micro logiciel de votre routeur visitez le site web du manufacturier.

Linksys et Cisco

Linux

Différente version de Linux.

Finalement un lien ou vous pouvez télécharger plusieurs version de Linux

Linux Download

Sites divers

différents sites discutant de sécurité.

Home

Commentaires fermés.

CVE-2023-20248 24 avril 2024

Medium Severity Description A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability […]

CVE-2023-20249 24 avril 2024

CVE-2024-20313 24 avril 2024

High Severity Description A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. […]

CVE-2024-4126 24 avril 2024

High Severity Description A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument manualTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The […]

CVE-2024-4127 24 avril 2024

High Severity Description A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. Affected is the function guestWifiRuleRefresh. The manipulation of the argument qosGuestDownstream leads to stack-based buffer overflow. It is possible to launch the attack remotely. VDB-261870 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early […]

Defense in depth -- the Microsoft way (part 87): shipping more rotten software to billions of unsuspecting customers 24 avril 2024

Posted by Stefan Kanthak on Apr 24Hi @ll, this post is a continuation of and With the release of .NET Framework 4.8 in April 2019, Microsoft updated the following paragraph of the MSDN article "What's new in .NET Framework" | Starting with .NET Framework 4.5, the clrcompression.dll assembly...

Response to CVE-2023-26756 - Revive Adserver 24 avril 2024

Posted by Matteo Beccati on Apr 24CVE-2023-26756 has been recently filed against the Revive Adserver project. The action was taken without first contacting us, and it did not follow the security process that is thoroughly documented on our website. The project team has been given no notice before or after the disclosure. Our team has […]

BACKDOOR.WIN32.DUMADOR.C / Remote Stack Buffer Overflow (SEH) 19 avril 2024

Posted by malvuln on Apr 19Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/6cc630843cabf23621375830df474bc5.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Backdoor.Win32.Dumador.c Vulnerability: Remote Stack Buffer Overflow (SEH) Description: The malware runs an FTP server on TCP port 10000. Third-party adversaries who can reach the server can send a specially […]

SEC Consult SA-20240418-0 :: Broken authorization in Dreamehome app 19 avril 2024

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 19SEC Consult Vulnerability Lab Security Advisory < 20240418-0 > ======================================================================= title: Broken authorization product: Dreamehome app vulnerable version:

MindManager 23 - full disclosure 19 avril 2024

Posted by Pawel Karwowski via Fulldisclosure on Apr 19Resending! Thank you for your efforts. GitHub - pawlokk/mindmanager-poc: public disclosure Affected application: MindManager23_setup.exe Platform: Windows Issue: Local Privilege Escalation via MSI installer Repair Mode (EXE hijacking race condition) Discovered and reported by: Pawel Karwowski and Julian Horoszkiewicz (Eviden Red Team) Proposed mitigation:...

Liens web

Plusieurs liens intéressants

Les compagnies de routeur

Linux

Différente version de Linux.

Sites divers

Related Posts

Hacker une caméra web avec Kali (linux)

Hacker à l’aide de Metasploit et le module Shodan.