Lock order reversal between page allocation and grant table locks

ISSUE DESCRIPTION The locks pagealloclock and granttable.lock are not always taken in the same order. This opens the possibility of deadlock. IMPACT A malicious guest administrator can deny service to the entire host. VULNERABLE SYSTEMS Xen versions going back to at least Xen 3.2 are vulnerable. ...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on October 30, 2013

Medium Alert ID: 31568 First Published: 2013 October 31 14:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order specification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Purchase Order Attachment Email Messages on October 29, 2013

Medium Alert ID: 31531 First Published: 2013 October 29 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a copy of a purchase order for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Order Delivery Notification Email Messages on October 29, 2013

Medium Alert ID: 31530 First Published: 2013 October 29 15:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order shipping notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Order Notification Email Messages on October 28, 2013

Medium Alert ID: 31517 First Published: 2013 October 29 15:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain product order details for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Order Invoice Documents Email Messages on October 29, 2013

Medium Alert ID: 31526 First Published: 2013 October 29 14:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order invoice document for the recipient. The text in the email message attempts to convince the recipient ...

phpscup enterprise built Station system v1. 8. 2-stored xss vulnerability-vulnerability warning-the black bar safety net

Long time useless computer, recently busy Ah, just from the factory-do come back..... Just before this point of time on the Internet, ^^ looking for a source see directly the analogy recommended and download!!! phpscup enterprise built Station system v1. 8. 2 Analysis ing...... The online search...

Onpub CMS 1.4/1.5 - Multiple SQL Injections

Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...

Onpub CMS 1.4 / 1.5 SQL Injection

Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...

OpenJDK: AccessControlContext check order issue (Libraries, 8001330)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different...

NIST Publishes Preliminary Cybersecurity Framework

Following an Executive Order issued by U.S. President Barack Obama in February of this year, the National Institute of Standards and Technology NIST yesterday made public a provisional copy of the government’s cybersecurity framework and says it will accept public comment on the draft for the nex...

Threat Outbreak Alert: Fake Product Order Quote Attachment Email Messages on October 20, 2013

Medium Alert ID: 31380 First Published: 2013 October 21 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quotation attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Order Request Email Messages on October 20, 2013

Medium Alert ID: 31382 First Published: 2013 October 21 13:56 GMT Last Updated: 2013 October 21 15:24 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order request for the recipient. The text in the email messa...

Threat Outbreak Alert: Fake Product Offering Notice Email Messages on October 18, 2013

Medium Alert ID: 31361 First Published: 2013 October 18 13:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the email message attempts to convince the recipie...

Lavabit Gives Users Chance to Recover Email Archives

Lavabit, the now-shuttered secure email provider that has become something of a rallying point for privacy advocates and security experts in the ongoing NSA surveillance saga, is giving its former users until Thursday night to change their passwords on the service. They will then have a short...

Threat Outbreak Alert: Fake Order Document Attachment Email Messages on October 13, 2013

Medium Alert ID: 31240 First Published: 2013 October 14 19:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order form shipment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Order Shipment Notification Email Messages on October 9, 2013

Medium Alert ID: 31188 First Published: 2013 October 9 16:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain an order shipping notification from FedEx for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Order Shipment Tracking Information Email Messages on October 7, 2013

Medium Alert ID: 31149 First Published: 2013 October 7 14:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain order shipment information for the recipient. The text in the email message attempts to convince the recipient ...

FBI demands SSL Keys from Secure-Email provider Lavabit in Espionage probe

During the summer, The Secure email provider 'Lavabit' and preferred service for PRISM leaker Edward Snowden decided to shut down after 10 years to avoid being complicit in crimes against the American people. The U.S. Government obtained a secret court order demanding private SSL key from Lavabit...

Threat Outbreak Alert: Fake Purchase Order Notification Email Messages on September 30, 2013

Medium Alert ID: 31083 First Published: 2013 October 1 19:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a purchase order notification for the recipient. The text in the email message attempts to...