nje-pass-brute NSE Script

z/OS JES Network Job Entry NJE 'I record' password brute forcer. After successfully negotiating an OPEN connection request, NJE requires sending, what IBM calls, an 'I record'. This initialization record may sometimes require a password. This script, provided with a valid OHOST/RHOST for the NJE...

tn3270-screen NSE Script

Connects to a tn3270 'server' and returns the screen. Hidden fields will be listed below the screen with row, col coordinates. Script Arguments tn3270-screen.commands a semi-colon separated list of commands you want to issue before printing the screen tn3270-screen.lu specify a logical unit you...

Moderate: Red Hat Security Advisory: systemd security and bug fix update

An update for systemd is now available for Red Hat Enterprise Linux 7.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Moderate: Red Hat Security Advisory: systemd security and bug fix update

An update for systemd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

VOX Music Player 2.8.8 - '.pls' Denial of Service

Exploit Title: VOX Music Player 2.8.8 '.pls' Local Crash PoC Date: 10-12-2016 Exploit Author: Antonio Z. Vendor Homepage: http://coppertino.com/vox/mac/ Software Link: http://dl.devmate.com/com.coppertino.Vox/Vox.dmg Version: 2.8.8 Tested on: OS X 10.10, OS X 10.11, OS X 10.12 import os evil =...

VOX Music Player 2.8.8 - .pls Denial of Service

VOX Music Player 2.8.8 - .pls Denial of Service Exploit Title: VOX Music Player 2.8.8 '.pls' Local Crash PoC Date: 10-12-2016 Exploit Author: Antonio Z. Vendor Homepage: http://coppertino.com/vox/mac/ Software Link: http://dl.devmate.com/com.coppertino.Vox/Vox.dmg Version: 2.8.8 Tested on: OS X...

python-zhmcclient

zhmcclient - A pure Python client library for the IBM Z HMC We...

qemu-kvm security update

1.5.3-105.el72.7 - kvm-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch bz1358996 - Resolves: bz1358996 CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsiaioioctl rhel-7.2.z 1.5.3-105.el72.6 - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch bz1359728 -...

kernel: Fork of large process causes memory corruption

It was reported that on s390x, the fork of a process with four page table levels will cause memory corruption with a variety of symptoms. All processes are created with three level page table and a limit of 4TB for the address space. If the parent process has four page table levels with a limit o...

Last Empire-War Z - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Last Empire-War Z published at the 'play' market has multiple vulnerabilities...

Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability

Document Title: =============== Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1864 Release Date: ============= 2016-06-29 Vulnerability Laboratory ID VL-ID: ====================================...

Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability

Document Title: =============== Z Web Solutions CMS v5.1 - Auth Bypass Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1864 Release Date: ============= 2016-06-28 Vulnerability Laboratory ID VL-ID: ====================================...

accounts.learninga-z.com XSS vulnerability

Vulnerable URL: https://accounts.learninga-z.com/accountsweb/account/login.do Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

CPU-Z - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application CPU-Z published at the 'play' market has multiple vulnerabilities...

FTP JCL Execution

require 'msf/core' require 'msf/core/exploit/tcp' class MetasploitModule 'FTP JCL Execution', 'Description' = %qSubmit JCL to z/OS via FTP and SITE FILE=JES. This exploit requires valid credentials on the target system, 'Author' = 'Bigendian Smalls', 'mainframed a.k.a. soldier of fortran',...

DEBIAN-CVE-2016-2143

The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service system crash or possibly have unspecified other impact via a crafted application, related to...

nss, nss-util, and nspr security, bug fix, and enhancement update

nspr 4.11.0-0.1 - Rebase to NSPR 4.11 nss 3.21.0-0.3.0.1 - Added nss-vendor.patch to change vendor 3.21.0-0.3 - Ensure all ssl.sh tests are executed 3.21.0-0.2 - Ensure abi compatibility 3.21.0-0.1 - Rebase to NSS-3.21 nss-util 3.21.0-0.3 - Rebase RHEL 6.7.z to NSS-util 3.21 in preparation for...

Empire Z - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Empire Z published at the 'play' market has multiple vulnerabilities...

Z War - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Z War published at the 'play' market has multiple vulnerabilities...

Fantasy Adventure Z - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fantasy Adventure Z published at the 'play' market has multiple vulnerabilities...