:: Deepquest ::

Sitecom N300/N600 Devices – Multiple Vulnerabilities

Adobe ColdFusion 9 Administrative Login Bypass

Oracle Java BytePackedRaster.verify() Signed Integer Overflow

Samsung DVR Firmware 1.10 – Authentication Bypass

Graphite Web Unsafe Pickle Handling

Bitbot C2 Panel gate2.php – Multiple Vulnerabilities

Win32-Worm:VBS/Jenxcus.A Malware Report

freeFTPd 1.0.10 (PASS Command) – SEH Buffer Overflow

The BytePackedRaster.verify() method in Oracle Java versions prior to 7u25 is vulnerable to a signed integer overflow that allows bypassing of “dataBitOffset” boundary checks. This vulnerability allows for remote code execution. User interaction is required for this exploit in that the target must visit a malicious page or open a malicious file

The BytePackedRaster.verify() method in Oracle Java versions prior to 7u25 is vulnerable to a signed integer overflow that allows bypassing of “dataBitOffset” boundary checks. This exploit code demonstrates remote code execution by popping calc.exe