TNT Sécurité – TNT Sécurité

Archives de l'Auteur : TNT

Site Web: https://www.tntsecurite.ca
Enregistré: 2013-11-18 23:28:12

Article récent

27 mai 2024 Evil Portal pour envoyer un payload à un client.: CatégoriesDifférentes attaques; Étiquette :
23 mai 2024 Comment contourner Microsoft Defender et établir une session Meterpreter avec persistence.: CatégoriesDifférentes attaques; Étiquette :
23 janvier 2023 Téléchargez le ISO de Windows 11: CatégoriesDifférentes attaques; Étiquette :
17 janvier 2023 Office 2021 Pro LTSC: CatégoriesDifférentes attaques; Étiquette :
14 janvier 2023 Hacking — Crypto monnaies — Forum underground — Informations: CatégoriesDivers, Information; Étiquette :

CVE-2024-41689 26 juillet 2024

Medium Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WPA/ WPS credentials on the vulnerable system. Successful exploitation of […]

CVE-2024-41688 26 juillet 2024

Medium Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames and passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext credentials on the vulnerable system. Successful exploitation of […]

CVE-2024-41687 26 juillet 2024

Critical Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system. Read more […]

CVE-2024-41686 26 juillet 2024

Medium Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security […]

CVE-2024-41685 26 juillet 2024

High Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to […]

CyberDanube Security Research 20240722-0 | Multiple Vulnerabilities in Perten/PerkinElmer ProcessPlus 23 juillet 2024

Posted by Thomas Weber via Fulldisclosure on Jul 22CyberDanube Security Research 20240722-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Perten Instruments Process Plus Software vulnerable version|

[KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability 16 juillet 2024

Posted by Egidio Romano on Jul 16----------------------------------------------------------------------- XenForo

[KIS-2024-05] XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability 16 juillet 2024

Posted by Egidio Romano on Jul 16------------------------------------------------------------------------------- XenForo

CVE-2024-33326 11 juillet 2024

Posted by Rodolfo Tavares via Fulldisclosure on Jul 10=====[ Tempest Security Intelligence - ADV-6/2024 ]========================== LumisXP v15.0.x to v16.1.x Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil =====[ Table of Contents]================================================== * Overview * Detailed description * Timeline of disclosure * Thanks & Acknowledgements * References =====[ Vulnerability...

CVE-2024-33327 11 juillet 2024