SecuObs.com http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18728.shtml http://www.secuobs.com/secumail/btsecumail/msg18728.shtml XSS I found a xss in phpmyadmin 3.3.0 when we create new database in interface! (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18727.shtml http://www.secuobs.com/secumail/btsecumail/msg18727.shtml SECURITY DSA 2014-1 New moin packages fix several vulnerabilities (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18725.shtml http://www.secuobs.com/secumail/btsecumail/msg18725.shtml USN-911-1 MoinMoin vulnerabilities (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18723.shtml http://www.secuobs.com/secumail/btsecumail/msg18723.shtml iDefense Security Advisory 03.11.10: Multiple Vendor WebKit HTML Element Use After Free Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18724.shtml http://www.secuobs.com/secumail/btsecumail/msg18724.shtml SECURITY DSA 2013-1 New egroupware packages fix several vulnerabilities (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18726.shtml http://www.secuobs.com/secumail/btsecumail/msg18726.shtml MDVSA-2010:061 ncpfs (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18722.shtml http://www.secuobs.com/secumail/btsecumail/msg18722.shtml SECURITY DSA 2012-1 New Linux 2.6.26 packages fix several issues (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18729.shtml http://www.secuobs.com/secumail/btsecumail/msg18729.shtml ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18731.shtml http://www.secuobs.com/secumail/btsecumail/msg18731.shtml ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18730.shtml http://www.secuobs.com/secumail/btsecumail/msg18730.shtml USN-909-1 dpkg vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18716.shtml http://www.secuobs.com/secumail/btsecumail/msg18716.shtml Skype URI Handler Input Validation (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18719.shtml http://www.secuobs.com/secumail/btsecumail/msg18719.shtml MDVSA-2010:060 squid (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18720.shtml http://www.secuobs.com/secumail/btsecumail/msg18720.shtml Vulnerabilities in Abton (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18718.shtml http://www.secuobs.com/secumail/btsecumail/msg18718.shtml Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18717.shtml http://www.secuobs.com/secumail/btsecumail/msg18717.shtml SECURITY DSA 2011-1 New dpkg packages fix path traversal (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18721.shtml http://www.secuobs.com/secumail/btsecumail/msg18721.shtml USN-908-1 Apache vulnerabilities (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18710.shtml http://www.secuobs.com/secumail/btsecumail/msg18710.shtml MDVSA-2010:059 virtualbox (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18708.shtml http://www.secuobs.com/secumail/btsecumail/msg18708.shtml SECURITY DSA-2010-1 New kvm packages fix several vulnerabilities (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18713.shtml http://www.secuobs.com/secumail/btsecumail/msg18713.shtml Secunia Research: XnView DICOM Parsing Integer Overflow Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18709.shtml http://www.secuobs.com/secumail/btsecumail/msg18709.shtml Secunia Research: Employee Timeclock Software mysqldump Password Disclosure (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18702.shtml http://www.secuobs.com/secumail/btsecumail/msg18702.shtml Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18696.shtml http://www.secuobs.com/secumail/btsecumail/msg18696.shtml Secunia Research: Employee Timeclock Software Backup Information Disclosure (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18712.shtml http://www.secuobs.com/secumail/btsecumail/msg18712.shtml CVE-2010-0624: Heap-based buffer overflow in GNU Tar and GNU Cpio (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18714.shtml http://www.secuobs.com/secumail/btsecumail/msg18714.shtml VUPEN Security Research - Microsoft Office Excel Record Processing Code Execution Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18700.shtml http://www.secuobs.com/secumail/btsecumail/msg18700.shtml iDefense Security Advisory 03.09.10: Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18706.shtml http://www.secuobs.com/secumail/btsecumail/msg18706.shtml iDefense Security Advisory 03.09.10: Microsoft Excel MDXSET Record Heap Overflow Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18707.shtml http://www.secuobs.com/secumail/btsecumail/msg18707.shtml iDefense Security Advisory 03.09.10: Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18698.shtml http://www.secuobs.com/secumail/btsecumail/msg18698.shtml iDefense Security Advisory 03.09.10: Microsoft Excel Sheet Object Type Confusion Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18705.shtml http://www.secuobs.com/secumail/btsecumail/msg18705.shtml xss a xss on threadid parameter in BBSMAX (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18697.shtml http://www.secuobs.com/secumail/btsecumail/msg18697.shtml Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18715.shtml http://www.secuobs.com/secumail/btsecumail/msg18715.shtml SECURITY DSA 2009-1 New tdiary packages fix cross-site scripting (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18711.shtml http://www.secuobs.com/secumail/btsecumail/msg18711.shtml Vulnerabilities in Hydra Engine (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18704.shtml http://www.secuobs.com/secumail/btsecumail/msg18704.shtml CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18699.shtml http://www.secuobs.com/secumail/btsecumail/msg18699.shtml CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18695.shtml http://www.secuobs.com/secumail/btsecumail/msg18695.shtml MDVSA-2010:058 php (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18701.shtml http://www.secuobs.com/secumail/btsecumail/msg18701.shtml ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18703.shtml http://www.secuobs.com/secumail/btsecumail/msg18703.shtml ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18693.shtml http://www.secuobs.com/secumail/btsecumail/msg18693.shtml SQL injection vulnerability in wILD CMS (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18689.shtml http://www.secuobs.com/secumail/btsecumail/msg18689.shtml IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability (bt)L'ensemble des archives de la mailing bthttp://www.secuobs.com/secumail/btsecumail/msg18692.shtml http://www.secuobs.com/secumail/btsecumail/msg18692.shtml