Memory corruption

The GNTTABOPswapgrantref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service host crash and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hyperviso...

CVE-2012-4539

Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service infinite loop and hang or crash via invalid arguments to GNTTABOPgetstatusframes, aka "Grant table hypercall infinite loop DoS vulnerability."...

DEBIAN-CVE-2012-4539

Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service infinite loop and hang or crash via invalid arguments to GNTTABOPgetstatusframes, aka "Grant table hypercall infinite loop DoS vulnerability."...

OpenStack-Keystone: role revocation token issues

OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles...

DEBIAN-CVE-2012-4413

OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles...

grant table entry swaps have inadequate bounds checking

ISSUE DESCRIPTION The grant table hypercall's GNTTABOPswapgrantref sub-operation does not perform adequate checks on the input grant references. IMPACT A malicious guest kernel or administrator can crash the host. It may be possible for an attacker to swap a valid grant reference, which they...

Hugh Grant's Turns Snitch

Hugh Grant went all mafia informant when he concealed a microphone on his persons in order to out former News of the World journalists that had been involved in a rather shady phone-hacking scandal. Evidently, News of the World has, for some time, been implicated in a phone-hacking scandal whereb...

Google Announces HITB2011AMS Conference Grant for Women Hackers !

As part of Google's ongoing commitment to encouraging women to excel in computing and technology, Google is pleased to announce the HITB2011AMS Conference Grant. This grant is set up to enable more female computer scientists to attend and participate in HITB2011AMS. The grant includes a pass to t...

Mozilla recursive eval call causes confirm dialog to evaluate to true (MFSA 2011-02)

Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain recursive eval calls, which makes it easier for remote attackers to force a user to respond positively to a dialog question, as demonstrated by a question about granting privileges...

DHS: $40m To Research Next Big Thing in Cyber Security

The U.S. Department of Homeland Security issued a call for proposals this week in a $40m program to encourage research and development in a wide range of topics related to cyber security: from designing more resilient software, to alternatives to passwords and CAPTCHA technology to prevent...

National Science Foundation Funds Purdue Data-Anonymization Project

A group of researchers from Purdue University has been awarded $1.5 million from the National Science Foundation to help fund an ongoing project that’s investigating how well current techniques for anonymizing data are working and whether there’s a need for better methods. The grant will help the...

DB2 Suspicious Command Detection (grant connect)

Binary data 5377.prm...

DB2 Suspicious Command Detection (grant alter)

Binary data 5380.prm...

Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit

No description provided by source. EDB-ID: 10264 CVE-ID: Title: Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit...

Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit

No description provided by source. EDB-ID: 10268 CVE-ID: Title: Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit...

Oracle ctxsys.drvxtabc.create_tables Exploit

No description provided by source. EDB-ID: 10267 CVE-ID: Title: Oracle ctxsys.drvxtabc.createtables Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- ctxsys.drvxtabc.createtables -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g --...

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor -- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF:...

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor

-- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.COMPRESSWORKSPACETREE -- -- AUTHOR: Andrea "bunker"...

Oracle ctxsys.drvxtabc.create_tables Evil Cursor Exploit

Exploit for unknown platform in category local exploits ======================================================== Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit ======================================================== Title: Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit CVE-ID:...

Oracle ctxsys.drvxtabc.create_tables Exploit

Exploit for unknown platform in category local exploits ============================================ Oracle ctxsys.drvxtabc.createtables Exploit ============================================ Title: Oracle ctxsys.drvxtabc.createtables Exploit CVE-ID: OSVDB-ID: Author: Andrea Purificato Published:...