TNT Sécurité – TNT Sécurité

Archives de l'Auteur : TNT

Site Web: https://www.tntsecurite.ca
Enregistré: 2013-11-18 23:28:12

Article récent

27 mai 2024 Evil Portal pour envoyer un payload à un client.: CatégoriesDifférentes attaques; Étiquette :
23 mai 2024 Comment contourner Microsoft Defender et établir une session Meterpreter avec persistence.: CatégoriesDifférentes attaques; Étiquette :
23 janvier 2023 Téléchargez le ISO de Windows 11: CatégoriesDifférentes attaques; Étiquette :
17 janvier 2023 Office 2021 Pro LTSC: CatégoriesDifférentes attaques; Étiquette :
14 janvier 2023 Hacking — Crypto monnaies — Forum underground — Informations: CatégoriesDivers, Information; Étiquette :

CVE-2024-48007 13 décembre 2024

Medium Severity Description Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to gaining access to unauthorized data. Read more at https://www.tenable.com/cve/CVE-2024-48007

CVE-2024-48008 13 décembre 2024

Medium Severity Description Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information Read more at https://www.tenable.com/cve/CVE-2024-48008

CVE-2024-55889 13 décembre 2024

Medium Severity Description phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an element without user interaction or explicit consent. Version 3.2.10 fixes the […]

CVE-2024-22461 13 décembre 2024

High Severity Description Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system. Read more at https://www.tenable.com/cve/CVE-2024-22461

CVE-2024-11986 13 décembre 2024

Critical Severity Description Improper input handling in the 'Host Header' allows an unauthenticated attacker to store a payload in web application logs. When an Administrator views the logs using the application's standard functionality, it enables the execution of the payload, resulting in Stored XSS or 'Cross-Site Scripting'. Read more at https://www.tenable.com/cve/CVE-2024-11986

APPLE-SA-12-11-2024-9 Safari 18.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-9 Safari 18.2 Safari 18.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121846. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Safari Available for: macOS Ventura and macOS Sonoma Impact: On a […]

APPLE-SA-12-11-2024-8 visionOS 2.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-8 visionOS 2.2 visionOS 2.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121845. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Crash Reporter Available for: Apple Vision Pro Impact: An app may […]

APPLE-SA-12-11-2024-7 tvOS 18.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-7 tvOS 18.2 tvOS 18.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121844. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: Apple TV HD and Apple TV 4K (all […]

APPLE-SA-12-11-2024-6 watchOS 11.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-6 watchOS 11.2 watchOS 11.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121843. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: Apple Watch Series 6 and later Impact: A […]

APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 macOS Ventura 13.7.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121842. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Apple Software Restore Available for: macOS Ventura Impact: An […]