TNT Sécurité – Page 3 – TNT Sécurité

Archives de l'Auteur : TNT

Site Web: https://www.tntsecurite.ca
Enregistré: 2013-11-18 23:28:12

Article récent

3 novembre 2016 Comment installer TAILS et accéder le ¨Darknet¨ à l’aide de TOR: CatégoriesDivers, Information, Protection; Étiquette :
1 novembre 2016 Comment créer un point d’accès fictif pour capturer la clé WPA/WPA2 d’un routeur.: CatégoriesDifférentes attaques; Étiquette :
11 octobre 2016 Comment se protéger contre Windows 10: CatégoriesInformation, Microsoft; Étiquette :
14 octobre 2015 Microsoft Office 2016: CatégoriesMicrosoft; Étiquette :
3 août 2015 Comment télécharger l’ISO de Windows 10 en version finale: CatégoriesMicrosoft; Étiquette :
2 octobre 2014 Comment nettoyer vos ordinateurs.: CatégoriesFailles de sécurités, Information; Étiquette :
1 octobre 2014 Windows 9 ? non Windows 10 !: CatégoriesMicrosoft; Étiquette :
17 septembre 2014 Windows 9 vidéo: CatégoriesMicrosoft; Étiquette :
16 septembre 2014 Hacker une caméra web avec Kali (linux): CatégoriesDifférentes attaques; Étiquette :
3 septembre 2014 Windows 8.1: CatégoriesMicrosoft; Étiquette :

Outils

Swiss Army Suite (SAS) | 9.35 MB

Télécharger

Mango Keywords 3.4.1 | 25.26 MB

Télécharger

Dork Searcher V3 | 64.46 MB

Télécharger

Magic Dork V3.4.5 | 14.59 MB

Télécharger

SQLi Dorks Generator | 1.62 MB

Télécharger

SQLi Dumper 10.5 | 31.46 KB

Télécharger

Scan Now UPnP | 5.91 MB

ScanNowUPnP

CVE-2025-48044 17 octobre 2025

High Severity Description Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/policy.ex and program routines 'Elixir.Ash.Policy.Policy':expression/2. This issue affects ash: from pkg:hex/ash@3.6.3 before pkg:hex/ash@3.7.1, from 3.6.3 before 3.7.1, from 79749c2685ea031ebb2de8cf60cc5edced6a8dd0 before 8b83efa225f657bfc3656ad8ee8485f9b2de923d. Read more at https://www.tenable.com/cve/CVE-2025-48044

CVE-2023-28815 17 octobre 2025

Critical Severity Description Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release. Read more at https://www.tenable.com/cve/CVE-2023-28815

CVE-2023-28814 17 octobre 2025

Critical Severity Description Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China's domestic market only, with no overseas release. Read more at https://www.tenable.com/cve/CVE-2023-28814

CVE-2025-11895 17 octobre 2025

Medium Severity Description The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 3.0. This is due to the bmp_user_payout_detail_of_current_user() function selecting payout records solely by id without verifying ownership. This makes it possible for authenticated attackers with the bmp_user role (often subscribers) to view […]

CVE-2025-55099 17 octobre 2025

Low Severity Description In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-controlled frequency fields. Read more at https://www.tenable.com/cve/CVE-2025-55099

Re: Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS) 16 octobre 2025

Posted by Gynvael Coldwind on Oct 15Vendor Response Pattern Hi Christopher, Vendor is correct with this one. The problem isn't the vendor's site – it's that the browser is already pwned with the malicious browser extension (this is site-agnostic). You've mentioned "No user interaction required beyond normal application usage.", but having "Malicious browser extension" installed […]

Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS) 14 octobre 2025

Posted by Christopher Dickinson via Fulldisclosure on Oct 13Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com CVE Identifiers * CVE-2025-[PENDING] - Excessive Data Exposure / JWT Token Leakage * CVE-2025-[PENDING] - Broken Object Level Authorization (IDOR) * CVE-2025-[PENDING] - Unrestricted Resource Consumption (DoS) Executive Summary This security advisory details three significant vulnerabilities discovered in the Suno.com […]

[SBA-ADV-20250730-01] CVE-2025-39664: Checkmk Path Traversal 14 octobre 2025

Posted by SBA Research Security Advisory via Fulldisclosure on Oct 13# Checkmk Path Traversal # Link: https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250730-01_Checkmk_Path_Traversal ## Vulnerability Overview ## Checkmk in versions before 2.4.0p13, 2.3.0p38 and 2.2.0p46, as well as since version 2.1.0b1 is prone to a path traversal vulnerability in the report scheduler. Due to an insufficient validation of a file name […]

[SBA-ADV-20250724-01] CVE-2025-32919: Checkmk Agent Privilege Escalation via Insecure Temporary Files 14 octobre 2025

Posted by SBA Research Security Advisory via Fulldisclosure on Oct 13# Checkmk Agent Privilege Escalation via Insecure Temporary Files # Link: https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250724-01_Checkmk_Agent_Privilege_Escalation_via_Insecure_Temporary_Files ## Vulnerability Overview ## The `win_license` plugin as included in Checkmk agent for Windows versions before 2.4.0p13, 2.3.0p38 and 2.2.0p46, as well as since version 2.1.0b2 and 2.0.0p28 allows low privileged users to […]

CVE-2025-59397 - Open Web Analytics SQL Injection 9 octobre 2025

Posted by Seralys Research Team via Fulldisclosure on Oct 08 Seralys Security Advisory | https://www.seralys.com/research ====================================================================== Title: SQL Injection Vulnerability Product: Open Web Analytics (OWA) Affected: Confirmed on 1.8.0 (older versions likely affected) Fixed in: 1.8.1 Vendor: Open Web Analytics (open-source) Discovered: August 2025 Severity: HIGH CWE: CWE-89: SQL Injection CVE: CVE-2025-59397...