TNT Sécurité – Page 6 – TNT Sécurité

Archives de l'Auteur : TNT

Site Web: https://www.tntsecurite.ca
Enregistré: 2013-11-18 23:28:12

Article récent

27 août 2014 Empoisonnement du cache DNS: CatégoriesFailles de sécurités; Étiquette :
18 décembre 2013 Attaque sur une clé WPA2 à l’aide de Reaver: CatégoriesEncryption routeur; Étiquette :
30 novembre 2013 Est-ce que votre navigateur est sécuritaire ?: CatégoriesFailles de sécurités; Étiquette :
29 novembre 2013 Vulnérablité UPnP: CatégoriesFailles de sécurités; Étiquette :
18 novembre 2013 Hacker Facebook: CatégoriesDifférentes attaques; Étiquette :

CVE-2025-24024 21 janvier 2025

Critical Severity Description Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's functions, including server administration components if enabled. Version 1.9.1 reverts the feature that introduced the bug, and […]

CVE-2025-23369 21 janvier 2025

Medium Severity Description An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed signature spoofing for unauthorized internal users. Instances not utilizing SAML single sign-on or where the attacker is not already an existing user were not impacted. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12.14, […]

CVE-2024-51417 21 janvier 2025

High Severity Description An issue in System.Linq.Dynamic.Core Latest version v.1.4.6 allows remote access to properties on reflection types and static properties/fields. Read more at https://www.tenable.com/cve/CVE-2024-51417

CVE-2025-24460 21 janvier 2025

Medium Severity Description In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool Read more at https://www.tenable.com/cve/CVE-2025-24460

CVE-2025-24461 21 janvier 2025

Medium Severity Description In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint Read more at https://www.tenable.com/cve/CVE-2025-24461

CVE-2024-48463 16 janvier 2025

Posted by Rodolfo Tavares via Fulldisclosure on Jan 15=====[ Tempest Security Intelligence - ADV-10/2024 ]========================== Bruno IDE Desktop prior to 1.29.0 Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil =====[ Table of Contents ]================================================== Overview Detailed Description Timeline of Disclosure Thanks & Acknowledgements References =====[ Vulnerability Information...

CyberDanube Security Research 20250107-0 | Multiple Vulnerabilities in ABB AC500v3 16 janvier 2025

Posted by Thomas Weber | CyberDanube via Fulldisclosure on Jan 15CyberDanube Security Research 20250107-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities in ABB AC500v3 product| ABB AC500v3 vulnerable version|

Certified Asterisk Security Release certified-20.7-cert4 16 janvier 2025

Posted by Asterisk Development Team via Fulldisclosure on Jan 15The Asterisk Development Team would like to announce security release Certified Asterisk 20.7-cert4. The release artifacts are available for immediate download at https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert4 and https://downloads.asterisk.org/pub/telephony/certified-asterisk Repository: https://github.com/asterisk/asterisk Tag: certified-20.7-cert4 ## Change Log for Release asterisk-certified-20.7-cert4 ###...

Certified Asterisk Security Release certified-18.9-cert13 16 janvier 2025

Posted by Asterisk Development Team via Fulldisclosure on Jan 15The Asterisk Development Team would like to announce security release Certified Asterisk 18.9-cert13. The release artifacts are available for immediate download at https://github.com/asterisk/asterisk/releases/tag/certified-18.9-cert13 and https://downloads.asterisk.org/pub/telephony/certified-asterisk Repository: https://github.com/asterisk/asterisk Tag: certified-18.9-cert13 ## Change Log for Release asterisk-certified-18.9-cert13 ###...

Asterisk Security Release 22.1.1 16 janvier 2025

Posted by Asterisk Development Team via Fulldisclosure on Jan 15The Asterisk Development Team would like to announce security release Asterisk 22.1.1. The release artifacts are available for immediate download at https://github.com/asterisk/asterisk/releases/tag/22.1.1 and https://downloads.asterisk.org/pub/telephony/asterisk Repository: https://github.com/asterisk/asterisk Tag: 22.1.1 ## Change Log for Release asterisk-22.1.1 ### Links: - [Full ChangeLog](...