TNT Sécurité – Page 3 – TNT Sécurité

Archives de l'Auteur : TNT

Site Web: https://www.tntsecurite.ca
Enregistré: 2013-11-18 23:28:12

Article récent

6 juin 2017 Forcer le débranchement d’un périphérique sur votre réseau: CatégoriesDifférentes attaques; Étiquette :
21 février 2017 Le « Dark Web » vous connaissez ?: CatégoriesDivers, Information; Étiquette :
3 novembre 2016 Comment installer TAILS et accéder le ¨Darknet¨ à l’aide de TOR: CatégoriesDivers, Information; Étiquette :
1 novembre 2016 Comment créer un point d’accès fictif pour capturer la clé WPA/WPA2 d’un routeur.: CatégoriesDifférentes attaques; Étiquette :
11 octobre 2016 Comment se protéger contre Windows 10: CatégoriesInformation, Microsoft; Étiquette :

CVE-2024-31351 17 mai 2024

Critical Severity Description Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6. Read more at https://www.tenable.com/cve/CVE-2024-31351

CVE-2024-33556 17 mai 2024

High Severity Description Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8. Read more at https://www.tenable.com/cve/CVE-2024-33556

CVE-2023-41956 17 mai 2024

High Severity Description Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4. Read more at https://www.tenable.com/cve/CVE-2023-41956

CVE-2023-41957 17 mai 2024

High Severity Description Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.This issue affects Simple Membership: from n/a through 4.3.4. Read more at https://www.tenable.com/cve/CVE-2023-41957

CVE-2023-41665 17 mai 2024

High Severity Description Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0. Read more at https://www.tenable.com/cve/CVE-2023-41665

SEC Consult SA-20240513-0 :: Tolerating Self-Signed Certificates in SAP® Cloud Connector 14 mai 2024

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on May 14SEC Consult Vulnerability Lab Security Advisory < 20240513-0 > ======================================================================= title: Tolerating Self-Signed Certificates product: SAP® Cloud Connector vulnerable version: 2.15.0 - 2.16.1 (Portable and Installer) fixed version: 2.16.2 (Portable and Installer) CVE number: CVE-2024-25642 impact: high homepage:...

TROJANSPY.WIN64.EMOTET.A / Arbitrary Code Execution 14 mai 2024

Posted by malvuln on May 14Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/f917c77f60c3c1ac6dbbadbf366ddd30.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: TrojanSpy.Win64.EMOTET.A Vulnerability: Arbitrary Code Execution Description: The malware looks for and executes a x64-bit "CRYPTBASE.dll" PE file in its current directory. Therefore, we can hijack the DLL and execute […]

BACKDOOR.WIN32.ASYNCRAT / Arbitrary Code Execution 14 mai 2024

Posted by malvuln on May 14Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/2337b9a12ecf50b94fc95e6ac34b3ecc.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Backdoor.Win32.AsyncRat Vulnerability: Arbitrary Code Execution Description: The malware looks for and executes a x32-bit "CRYPTSP.dll" PE file in its current directory. Therefore, we can hijack the DLL and execute […]

Re: Panel.SmokeLoader / Cross Site Request Forgery (CSRF) 14 mai 2024

Posted by malvuln on May 14Updated and fixed a payload typo and added additional info regarding the stored persistent XSS see attached. Thanks, Malvuln Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/4b5fc3a2489985f314b81d35eac3560f_B.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Panel.SmokeLoader Vulnerability: Cross Site Request Forgery (CSRF) - Persistent XSS […]

Panel.SmokeLoader / Cross Site Request Forgery (CSRF) 14 mai 2024

Posted by malvuln on May 14Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/4b5fc3a2489985f314b81d35eac3560f_B.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Panel.SmokeLoader Vulnerability: Cross Site Request Forgery (CSRF) Family: SmokeLoader Type: Web Panel MD5: 4b5fc3a2489985f314b81d35eac3560f (control.php) SHA256: 8d02238577081be74b9ebc1effcfbf3452ffdb51f130398b5ab875b9bfe17743 Vuln...