Symantec/Norton AntiVirus - ASPack Remote Heap/Pool Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=820 When parsing executables packed by an early version of aspack, a buffer overflow can occur in the core Symantec Antivirus Engine used in most Symantec and Norton branded Antivirus products. The problem occurs when section data ...

DNS reconnaissance tool: Fierce

Fierce is a DNS reconnaissance tool for locating non-contiguous IP space Fierce is a semi-lightweight scanner that helps locate non-contiguous IP space and hostnames against specified domains. It’s really meant as a pre-cursor to nmap, unicornscan, nessus, nikto, etc, since all of those require...

McAfee VirusScan Enterprise Console Security Bypass Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software.McAfee VirusScan Console is one of the consoles. A security vulnerability in the McAfee VirusScan Console mcconsol.exe of McAfee VirusScan Enterprise allows a local attacker to bypass restricted self-protection rules by turning off...

AppCan vulnerability spree(AppCan weak password\XSS\SQL injection\sensitive files leaked\weak password\file upload vulnerability collection)-vulnerability warning-the black bar safety net

Test yourself to write the discuz scan tool robustness of the time to find a backup file http://bbs. appcan. cn//config/configucenter. php. bak Use uckey getshell failure,the test has changed uckey. To continue testing,found a suspected injection point http://edu. appcan. cn/traindetailnew. html?...

SAP NetWeaver 7.5 Information disclosure + port scan in SLD test application

Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver SLD Vendor URL: SAP Bugs: Information disclosure Reported: 22.04.2016 Vendor response: 23.04.2016 Date of Public Advisory: 08.11.2016 Reference: SAP Security Note 2342940 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION...

AlReader -any text book reader - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application AlReader -any text book reader published at the 'play' market has multiple vulnerabilities...

Rhapsody Music Application Detection

Binary data 9224.prm...

Addressing False Positives from CBC and MAC Vulnerability Scans of NetScaler SSHD

BUG0217580 addressed an SSH vulnerability CVE-2008-5161 involving CBC algorithms used in SSH connections CBC Mode Plaintext Recovery Vulnerability. The bug was reported when NetScaler 10.0 was still the newest version as NetScaler shipped with an affected version of OpenSSH. The NetScaler bug fix...

뽀로로 자동차 학습놀이 (Lite) - Corrupted files, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application 뽀로로 자동차 학습놀이 Lite published at the 'play' market has multiple vulnerabilities...

Equestria Girls - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Equestria Girls published at the 'play' market has multiple vulnerabilities...

Golden Empire Casino - Slots - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Golden Empire Casino - Slots published at the 'play' market has multiple vulnerabilities...

NiederschlagsRadar.de - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application NiederschlagsRadar.de published at the 'play' market has multiple vulnerabilities...

CarSys Scan - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application CarSys Scan published at the 'play' market has multiple vulnerabilities...

Brother iPrint&Scan - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Brother iPrint&Scan published at the 'play' market has multiple vulnerabilities...

PLAYMOBIL Scan - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PLAYMOBIL Scan published at the 'play' market has multiple vulnerabilities...

Nichtraucher Ersparnisse - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Nichtraucher Ersparnisse published at the 'play' market has multiple vulnerabilities...

Genius Scan - PDF Scanner - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Genius Scan - PDF Scanner published at the 'play' market has multiple vulnerabilities...

Fast Scanner : Free PDF Scan - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fast Scanner : Free PDF Scan published at the 'play' market has multiple vulnerabilities...

Comodo AntiVirus - Heap Overflow in LZX Decompression

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=737 LzxDecoder::init initializes the vector LzxDecoder-window to a fixed size of 2^method bytes, which is then used during LzxDecoder::Extract. It's possible for LZX compressed...

Comodo - Integer Overflow Leading to Heap Overflow in Win32 Emulation

Comodo - Integer Overflow Leading to Heap Overflow in Win32 Emulation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=738 A major component of Comodo Antivirus is the x86 emulator, which includes a number of shims for win32 API routines so that common API calls work in emulated...