Protection – TNT Sécurité

Comment accéder sécuritairement votre réseau local à l’aide de PiVPN

Home

Dans cette article, je vais vous montrer comment créer un serveur VPN sur une Raspberry Pi3 pour accéder sécuritairement votre réseau à la maison. Je vais procéder à l’installation de PiVPN pour la création du VPN et je vais utiliser le service NoIP car la majorité des fournisseurs internet change notre adresse IP. NoIP est un service de DNS dynamique pointant un nom d’hôte facile à retenir vers votre adresse IP dynamique.

Veuillez noter qu’il n’est pas nécessaire d’utiliser une Raspberry Pi3 il est possible d’utiliser les versions précédentes.

Lire la suite → Post ID 1617

CVE-2024-48007 13 décembre 2024

Medium Severity Description Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to gaining access to unauthorized data. Read more at https://www.tenable.com/cve/CVE-2024-48007

CVE-2024-48008 13 décembre 2024

Medium Severity Description Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information Read more at https://www.tenable.com/cve/CVE-2024-48008

CVE-2024-55889 13 décembre 2024

Medium Severity Description phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an element without user interaction or explicit consent. Version 3.2.10 fixes the […]

CVE-2024-22461 13 décembre 2024

High Severity Description Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system. Read more at https://www.tenable.com/cve/CVE-2024-22461

CVE-2024-11986 13 décembre 2024

Critical Severity Description Improper input handling in the 'Host Header' allows an unauthenticated attacker to store a payload in web application logs. When an Administrator views the logs using the application's standard functionality, it enables the execution of the payload, resulting in Stored XSS or 'Cross-Site Scripting'. Read more at https://www.tenable.com/cve/CVE-2024-11986

APPLE-SA-12-11-2024-9 Safari 18.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-9 Safari 18.2 Safari 18.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121846. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Safari Available for: macOS Ventura and macOS Sonoma Impact: On a […]

APPLE-SA-12-11-2024-8 visionOS 2.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-8 visionOS 2.2 visionOS 2.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121845. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Crash Reporter Available for: Apple Vision Pro Impact: An app may […]

APPLE-SA-12-11-2024-7 tvOS 18.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-7 tvOS 18.2 tvOS 18.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121844. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: Apple TV HD and Apple TV 4K (all […]

APPLE-SA-12-11-2024-6 watchOS 11.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-6 watchOS 11.2 watchOS 11.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121843. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: Apple Watch Series 6 and later Impact: A […]

APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 macOS Ventura 13.7.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121842. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Apple Software Restore Available for: macOS Ventura Impact: An […]