Sponge Ball Z - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Sponge Ball Z published at the 'play' market has multiple vulnerabilities...

Experiment Z - Zombie Survival - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Experiment Z - Zombie Survival published at the 'play' market has multiple vulnerabilities...

Z Camera - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Z Camera published at the 'play' market has multiple vulnerabilities...

Z Style Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Z Style Weather Widget published at the 'play' market has multiple vulnerabilities...

Theme eXp - Black Z Light - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Theme eXp - Black Z Light published at the 'play' market has multiple vulnerabilities...

Hausarzt A-Z - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Hausarzt A-Z published at the 'play' market has multiple vulnerabilities...

Generic JCL Test for Mainframe Exploits

Provide JCL which can be used to submit a job to JES2 on z/OS which will exit and return 0. This can be used as a template for other JCL based payloads This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This is a prototy...

IBM Capacity Management Analytics Local Information Disclosure Vulnerability (CNVD-2016-01392)

IBM Capacity Management Analytics is a suite of capacity management analytics solutions for managing and predicting the utilization of IBM zEnterprise infrastructure resources. A local security vulnerability exists in IBM Capacity Management Analytics that allows a local attacker to exploit the...

Z-BLOG Blind-XXE造成任意文件读取

No description provided by source...

qemu-kvm security update

0.12.1.2-2.479.el67.3 - kvm-net-pcnet-add-check-to-validate-receive-data-size-CV.patch bz1287950 - kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch bz1287950 - Resolves: bz1287950 CVE-2015-7504 CVE-2015-7512 qemu-kvm: various flaws rhel-6.7.z...

Scientific Linux Security Update : binutils on SL7.x x86_64 (20151119)

Multiple buffer overflow flaws were found in the libbdf library used by various binutils utilities. If a user were tricked into processing a specially crafted file with an application using the libbdf library, it could cause the application to crash or, potentially, execute arbitrary code...

CentOS 7 : binutils (CESA-2015:2079)

Updated binutils packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

Z/OS (MVS) Command Shell, Reverse TCP Inline

Listen for a connection and spawn a command shell. This implementation does not include ebcdic character translation, so a client with translation capabilities is required. MSF handles this automatically. This module requires Metasploit: https://metasploit.com/download Current source:...

RHEL 7 : binutils (RHSA-2015:2079)

Updated binutils packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

foobar2000 1.3.9 - (.pls; .m3u; .m3u8) Local Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: foobar2000 1.3.9 .pls; .m3u; .m3u8 Local Crash PoC Date: 11-15-2015 Exploit Author: Antonio Z. Vendor Homepage: http://www.foobar2000.org/ Software Link:...

nje-node-brute NSE Script

z/OS JES Network Job Entry NJE target node name brute force. NJE node communication is made up of an OHOST and an RHOST. Both fields must be present when conducting the handshake. This script attemtps to determine the target systems NJE node name. To initiate NJE the client sends a 33 byte record...

nss and nspr security update

nspr 4.10.8-2 - Resolves: Bug 1269359 - CVE-2015-7183 - nspr: heap-buffer overflow in PLARENAALLOCATE can lead to crash under ASAN, potential memory corruption rhel-5.11.z nss 3.19.1-2 - Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181...

Mainframe/System Z Bind Shell

Mainframe/System Z Bind Shell. Shellcode exploit for systemz platform TITLE 'sbshellcode.s x Author: Bigendian Smalls' ACONTROL AFPR SBSHELL CSECT SBSHELL AMODE 31 SBSHELL RMODE ANY SYSSTATE ARCHLVL=2 ENTRY MAIN MAIN DS 0F Begin setup and stack management STM 6,4,1213 store all the registers in o...

qemu-kvm security and bug fix update

1.5.3-86.el71.5 - kvm-i8254-fix-out-of-bounds-memory-access-in-pitioport.patch bz1243726 - Resolves: bz1243726 CVE-2015-3214 qemu-kvm: qemu: i8254: out-of-bounds memory access in pitioportread function rhel-7.1.z 1.5.3-86.el71.4 - kvm-ide-Check-array-bounds-before-writing-to-iobuffer-C.patch...

z-wave.ru XSS vulnerability

Vulnerable URL: http://z-wave.ru/shop/prettyPhotormsg0d/2,/ Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1303510 Google Pagerank| 0 VIP website status:|...