deepcore - :: Deepquest ::

>> Backdoor.Win32.NinjaSpy.c Remote Stack Buffer Overflow

USER: deepcore // 2021-01-09 // 0 CMT

Backdoor.Win32.NinjaSpy.c suffers from a remote stack buffer overflow vulnerability. The specimen drops a DLL named “cmd.dll” under C:WINDOWS which listens on both TCP ports 2003 and 2004. By sending consecutive…

[EXPLOIT]

>> PaperStream IP (TWAIN) 1.42.0.5685 Local Privilege Escalation

USER: deepcore // 2021-01-08 // 0 CMT

PaperStream IP (TWAIN) version 1.42.0.5685 suffers from a local privilege escalation vulnerability.

[EXPLOIT]

>> Gitea 1.7.5 Remote Code Execution

USER: deepcore // 2021-01-08 // 0 CMT

Gitea version 1.7.5 suffers from a remote code execution vulnerability.

[EXPLOIT]

>> H2 Database 1.4.199 JNI Code Execution

USER: deepcore // 2021-01-08 // 0 CMT

H2 Database version 1.4.199 JNI code execution exploit. This exploit utilizes the Java Native Interface to load a a Java class without needing to use the Java Compiler.