DirectAdmin 1.34.4 - Multiple Cross-Site Request Forgerys

============================================================================= Title : Multi CSRF vulnerability in DirectAdmin 1.34.4 Date : 20-3-2010 Version : 1.34.4 Author : K053 K053.Dev0te3 AT gmail Tested on : Ubuntu Vendor : http://www.directadmin.com/ Download :...

Multi CSRF vulnerability in DirectAdmin (1.34.4)

Exploit for unknown platform in category web applications ================================================ Multi CSRF vulnerability in DirectAdmin 1.34.4 ================================================ ============================================================================= Title : Multi CS...

DirectAdmin 1.34.4 - Multiple Cross-Site Request Forgerys

DirectAdmin 1.34.4 - Multiple Cross-Site Request Forgerys ============================================================================= Title : Multi CSRF vulnerability in DirectAdmin 1.34.4 Date : 20-3-2010 Version : 1.34.4 Author : K053 K053.Dev0te3 AT gmail Tested on : Ubuntu Vendor :...

Facebook, MySpace Fix Subdomain Errors

Facebook and MySpace have fixed errors that could have allowed data to be given out from its subdomains. A Dutch developer, Yvo Schaap, discovered the flaw and wrote on his blog: “A “more invasive and hidden exploit could harvest all the user’s personal photos, data and messages to a central serv...

SLES9: Security update for subdomain-parser

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: subdomain-utils yast2-subdomain subdomain-parser-common subdomain-profiles subdomain-parser More details may also be found by searching for keyword 5010007...

SLES9: Security update for subdomain-parser

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-subdomain subdomain-utils subdomain-parser subdomain-profiles subdomain-parser-common More details may also be found by searching for keyword 5014564...

SLES9: Security update for subdomain-parser

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-subdomain subdomain-utils subdomain-parser subdomain-profiles subdomain-parser-common More details may also be found by searching for keyword 5014564...

SLES9: Security update for subdomain-parser

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: subdomain-utils yast2-subdomain subdomain-parser-common subdomain-profiles subdomain-parser More details may also be found by searching for keyword 5010007...

CVE-2009-3350

Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors...

Code injection

Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors...

CVE-2009-3350

Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors...

CVE-2009-3350

Technical details are not publicly available in the provided documents. Monitor for updates for specifics on affected Drupal Subdomain Manager versions, vulnerabilities, and remedies.

SuSE9 Security Update : subdomain-parser (YOU Patch Number 11787)

The following patch supports new language features in AppArmor which have been added to improve the confinement provided to applications executing other applications will confined by AppArmor. Two new execute modifiers: 'P' and 'U' are provided and are flavors of the exisiting 'p' and 'u' modifie...

SA-CONTRIB-2009-056 - Node2Node, Node Browser, Subdomain Manager, Quota by role, Rest API with vulnerabilities, now abandoned

Multiple vulnerabilities have been found in the following modules which have been abandoned. Their releases have been unpublished and it is recommended that they be disabled and un-installed if in use. Modules Node2Node Node Browser Subdomain Manager Quota by role Rest API Drupal core is not...

Debian Security Advisory DSA 1831-1 (djbdns)

The remote host is missing an update to djbdns announced via advisory DSA 1831-1. OpenVAS Vulnerability Test $Id: deb18311.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1831-1 djbdns Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

DSA-1831-1 djbdns - privilege escalation

Bulletin has no description...

CVE-2009-0858

The responseaddname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary record...

DEBIAN-CVE-2009-0858

The responseaddname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary record...

Design/Logic Flaw

The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...

Unfixed XSS vulnerability at www.webb.se

Security researcher Uber0n, has submitted on 20/05/2008 a cross-site-scripting XSS vulnerability affecting www.webb.se, which at the time of submission ranked 93580 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. It is currently...