FIBARO Home Center Detection

Detection of FIBARO Home Center. The script sends a connection request to the server and attempts to detect FIBARO Home Center and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow (Metasploit)

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus...

SUSE SLES11 Security Update : kernel (SUSE-SU-2017:1301-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Notable new features : - Toleration of newer crypto hardware for z Systems - USB 2.0 Link power management for Haswell-ULT The following security bugs were fixed : - CVE-2017-7308: The packetsetring...

Threat Outbreak Alert RuleID29057: Email Messages Distributing Malicious Software on May 11, 2017

Medium Alert ID: 53794 First Published: 2017 May 11 15:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29057 may contain the following files: Name | Size...

JCL to Escalate Privileges

Elevate privileges for user. Adds SYSTEM SPECIAL and BPX.SUPERUSER to user profile. Does this by using an unsecured/updateable APF authorized library APFLIB and updating the user's ACEE using this program/library. Note: This privesc only works with z/OS systems using RACF, no other ESM is...

openssh security and bug fix update

5.3p1-122 - Allow to use ibmca crypto hardware 1397547 - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1405374 5.3p1-121 - Fix missing hmac-md5-96 from server offer 1373836 5.3p1-120 - Prevent infinite loop when Ctrl+Z pressed at password prompt 1218424 - Remove...

samba4 security and bug fix update

4.2.10-9 - resolves: 1405358 - CVE-2016-2125 CVE-2016-2126 4.2.10-8 - Synchronize patches for Samba 4.2.10 with RHEL 7.2.z - Resolves: 1383685 - Update samba4 to be on par with RHEL 7.2.z...

OracleVM 3.4 : qemu-kvm (OVMSA-2017-0043)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-cirrusvga-fix-division-by-0-for-color-expansion-rop .patch - kvm-cirrusvga-fix-off-by-one-in-blitregionisunsafe.p atch - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.pa tch -...

qemu-kvm security and bug fix update

0.12.1.2-2.491.el68.6 - kvm-cirrusvga-fix-division-by-0-for-color-expansion-rop.patch bz1418230 bz1419416 - kvm-cirrusvga-fix-off-by-one-in-blitregionisunsafe.patch bz1418230 bz1419416 - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch bz1418230 bz1419416 -...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20161103)

Security Fixes : - A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd freeze its execution, preventing further management of system services, system shutdown, or zombie process collection via systemd. CVE-2016-7795 Bug Fix...

nje-pass-brute NSE Script

z/OS JES Network Job Entry NJE 'I record' password brute forcer. After successfully negotiating an OPEN connection request, NJE requires sending, what IBM calls, an 'I record'. This initialization record may sometimes require a password. This script, provided with a valid OHOST/RHOST for the NJE...

tn3270-screen NSE Script

Connects to a tn3270 'server' and returns the screen. Hidden fields will be listed below the screen with row, col coordinates. Script Arguments tn3270-screen.commands a semi-colon separated list of commands you want to issue before printing the screen tn3270-screen.lu specify a logical unit you...

Moderate: Red Hat Security Advisory: systemd security and bug fix update

An update for systemd is now available for Red Hat Enterprise Linux 7.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Moderate: Red Hat Security Advisory: systemd security and bug fix update

An update for systemd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

VOX Music Player 2.8.8 - '.pls' Denial of Service

Exploit Title: VOX Music Player 2.8.8 '.pls' Local Crash PoC Date: 10-12-2016 Exploit Author: Antonio Z. Vendor Homepage: http://coppertino.com/vox/mac/ Software Link: http://dl.devmate.com/com.coppertino.Vox/Vox.dmg Version: 2.8.8 Tested on: OS X 10.10, OS X 10.11, OS X 10.12 import os evil =...

VOX Music Player 2.8.8 - .pls Denial of Service

VOX Music Player 2.8.8 - .pls Denial of Service Exploit Title: VOX Music Player 2.8.8 '.pls' Local Crash PoC Date: 10-12-2016 Exploit Author: Antonio Z. Vendor Homepage: http://coppertino.com/vox/mac/ Software Link: http://dl.devmate.com/com.coppertino.Vox/Vox.dmg Version: 2.8.8 Tested on: OS X...

python-zhmcclient

zhmcclient - A pure Python client library for the IBM Z HMC We...

qemu-kvm security update

1.5.3-105.el72.7 - kvm-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch bz1358996 - Resolves: bz1358996 CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsiaioioctl rhel-7.2.z 1.5.3-105.el72.6 - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch bz1359728 -...

kernel: Fork of large process causes memory corruption

It was reported that on s390x, the fork of a process with four page table levels will cause memory corruption with a variety of symptoms. All processes are created with three level page table and a limit of 4TB for the address space. If the parent process has four page table levels with a limit o...

Last Empire-War Z - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Last Empire-War Z published at the 'play' market has multiple vulnerabilities...