PT SWARM
الذهاب إلى القناة على Telegram
Positive Technologies Offensive Team: twitter.com/ptswarm This is the channel where we share articles/vulnerabilities/scripts/etc, not necessarily authored by us, that we find interesting
إظهار المزيد6 782
المشتركون
لا توجد بيانات24 ساعات
-47 أيام
-430 أيام
جاري تحميل البيانات...
القنوات المماثلة
سحابة العلامات
لا توجد بيانات
هل تواجه مشاكل؟ يرجى تحديث الصفحة أو الاتصال بمدير الدعم الخاص بنا.
الإشارات الواردة والصادرة
---
---
---
---
---
---
جذب المشتركين
أكتوبر '25
أكتوبر '25
+45
في 2 قنوات
سبتمبر '25
+82
في 1 قنوات
Get PRO
أغسطس '25
+121
في 1 قنوات
Get PRO
يوليو '25
+175
في 9 قنوات
Get PRO
يونيو '25
+197
في 7 قنوات
Get PRO
مايو '25
+75
في 0 قنوات
Get PRO
أبريل '25
+75
في 1 قنوات
Get PRO
مارس '25
+96
في 2 قنوات
Get PRO
فبراير '25
+104
في 1 قنوات
Get PRO
يناير '25
+70
في 1 قنوات
Get PRO
ديسمبر '24
+152
في 4 قنوات
Get PRO
نوفمبر '24
+448
في 5 قنوات
Get PRO
أكتوبر '24
+251
في 1 قنوات
Get PRO
سبتمبر '24
+308
في 5 قنوات
Get PRO
أغسطس '24
+267
في 6 قنوات
Get PRO
يوليو '24
+168
في 0 قنوات
Get PRO
يونيو '24
+304
في 3 قنوات
Get PRO
مايو '24
+313
في 4 قنوات
Get PRO
أبريل '24
+444
في 10 قنوات
Get PRO
مارس '24
+370
في 10 قنوات
Get PRO
فبراير '24
+99
في 3 قنوات
Get PRO
يناير '24
+239
في 6 قنوات
Get PRO
ديسمبر '23
+122
في 1 قنوات
Get PRO
نوفمبر '23
+103
في 0 قنوات
Get PRO
أكتوبر '23
+258
في 2 قنوات
Get PRO
سبتمبر '23
+144
في 0 قنوات
Get PRO
أغسطس '23
+90
في 0 قنوات
Get PRO
يوليو '23
+72
في 0 قنوات
Get PRO
يونيو '23
+87
في 0 قنوات
Get PRO
مايو '23
+197
في 0 قنوات
Get PRO
أبريل '23
+377
في 0 قنوات
Get PRO
مارس '23
+202
في 0 قنوات
Get PRO
فبراير '23
+91
في 0 قنوات
Get PRO
يناير '23
+41
في 0 قنوات
Get PRO
ديسمبر '22
+18
في 0 قنوات
Get PRO
نوفمبر '22
+33
في 0 قنوات
Get PRO
أكتوبر '22
+31
في 0 قنوات
Get PRO
سبتمبر '22
+43
في 0 قنوات
Get PRO
أغسطس '22
+84
في 0 قنوات
Get PRO
يوليو '22
+87
في 0 قنوات
Get PRO
يونيو '22
+166
في 0 قنوات
Get PRO
مايو '22
+212
في 0 قنوات
Get PRO
أبريل '22
+61
في 0 قنوات
Get PRO
مارس '22
+64
في 0 قنوات
Get PRO
فبراير '22
+84
في 0 قنوات
Get PRO
يناير '22
+32
في 0 قنوات
Get PRO
ديسمبر '21
+43
في 0 قنوات
Get PRO
نوفمبر '21
+67
في 0 قنوات
Get PRO
أكتوبر '21
+117
في 0 قنوات
Get PRO
سبتمبر '21
+120
في 0 قنوات
Get PRO
أغسطس '21
+142
في 0 قنوات
Get PRO
يوليو '21
+146
في 0 قنوات
Get PRO
يونيو '21
+92
في 0 قنوات
Get PRO
مايو '21
+76
في 0 قنوات
Get PRO
أبريل '21
+655
في 0 قنوات
| التاريخ | نمو المشتركين | الإشارات | القنوات | |
| 22 أكتوبر | +4 | |||
| 21 أكتوبر | +2 | |||
| 20 أكتوبر | 0 | |||
| 19 أكتوبر | +1 | |||
| 18 أكتوبر | +2 | |||
| 17 أكتوبر | +1 | |||
| 16 أكتوبر | +4 | |||
| 15 أكتوبر | 0 | |||
| 14 أكتوبر | +5 | |||
| 13 أكتوبر | +2 | |||
| 12 أكتوبر | +2 | |||
| 11 أكتوبر | +5 | |||
| 10 أكتوبر | +1 | |||
| 09 أكتوبر | +4 | |||
| 08 أكتوبر | +2 | |||
| 07 أكتوبر | 0 | |||
| 06 أكتوبر | +2 | |||
| 05 أكتوبر | +1 | |||
| 04 أكتوبر | +1 | |||
| 03 أكتوبر | 0 | |||
| 02 أكتوبر | +3 | |||
| 01 أكتوبر | +3 |
منشورات القناة
🚨 We've launched dbugs.ptsecurity.com, a new home for vulnerabilities. More than CVEs. More than MITRE.
✅ Trends & Insights
✅ AI-generated, multi-source vulnerability descriptions
✅ Researcher credits
Explore now: https://dbugs.ptsecurity.com
| 2 |  👑 Our researcher has discovered LPE in VMWare Tools (CVE-2025-22230 & CVE-2025-22247) via VGAuth!
Write-up by the one who broke it: Sergey Bliznyuk
https://swarm.ptsecurity.com/the-guest-who-could-exploiting-lpe-in-vmware-tools/ | 10 469 |
| 3 | 😈 Read the new article "Daemon Ex Plist: LPE via MacOS Daemons" by our researcher Egor Filatov.
This research reveals a vulnerability affecting popular apps like Mozilla VPN, Tunnelblick & more.
https://swarm.ptsecurity.com/daemon-ex-plist-lpe-via-macos-daemons/ | 3 720 |
| 4 |  🧠 Our researcher Sergey Tarasov discovered a vulnerability (CVE-2025-49689) in NTFS on MS Windows.
The article dives into the exploitation path, file system internals, VHD format, and more.
🔗 Read the article: https://swarm.ptsecurity.com/buried-in-the-log-exploiting-a-20-years-old-ntfs-vulnerability/ | 4 655 |
| 5 |  🦊 Mozilla Foundation fixed CVE-2025-6430, discovered by our researcher Daniil Satyaev!
This vulnerability allows the Content-Disposition: attachment header to be ignored if the page is opened using <embed> or <object>, resulting in files being displayed instead of downloaded. | 5 396 |
| 6 |  ⚠️ We've reproduced CVE-2025-49113 in Roundcube.
This vulnerability allows authenticated users to execute arbitrary commands via PHP object deserialization.
If you're running Roundcube — update immediately! | 10 410 |
| 7 |  Don't Call That "Protected" Method: Dissecting an N-Day vBulletin RCE
👤 by Egidio Romano
The article analyzes a critical Unauthenticated Remote Code Execution vulnerability (CVE-2025-48827) in vBulletin, which becomes exploitable when running on PHP 8.1 or newer.
The vulnerability stems from vBulletin’s misuse of ReflectionMethod::invoke(), which in PHP 8.1+ no longer blocks access to protected methods by default. As a result, attackers can remotely trigger sensitive internal functions originally meant to be inaccessible and achieve code execution on the server.
📝 Contents:
● The Vulnerability
● The vBulletin Vulnerability
● Exploiting vBulletin: Path to Pre-Auth RCE
● Conclusion
https://karmainsecurity.com/dont-call-that-protected-method-vbulletin-rce | 3 961 |
| 8 |  Next.js and the corrupt middleware: the authorizing artifact
👤 by Rachid Allam & Yasser Allam
Researchers have discovered a critical vulnerability in Next.js, a popular framework for building web applications. The flaw allows attackers to bypass middleware responsible for request processing, including authentication and path rewrites.
By adding the x-middleware-subrequest header with a specific value, an attacker can completely ignore middleware execution, gaining unauthorized access to protected resources. Additionally, the vulnerability can be exploited for denial-of-service (DoS) attacks by poisoning the cache, leading to service disruption.
Many versions of Next.js are affected, making this a widespread security concern.
📝 Contents:
● The Next.js middleware
● The authorizing artifact artifact: old code, 0ld treasure
• Execution order and middlewareInfo.name
● The authorizing artifact: nostalgia has its charm, but living in the moment is better
• /src directory
• Max recursion depth
● Exploits
• Authorization/Rewrite bypass
• CSP bypass
• DoS via Cache-Poisoning (what?)
• Clarification
● Security Advisory - CVE-2025-29927
● Disclaimer
● Conclusion
https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware | 2 176 |
| 9 |  🔥 The "impossible" XXE in PHP? Not so impossible anymore.
Our researcher Aleksandr Zhurnakov discovered an interesting combination of PHP wrappers and a feature of XML parsing in libxml2 to exploit it.
Read: https://swarm.ptsecurity.com/impossible-xxe-in-php/ | 3 668 |
| 10 |  📟 Our researcher a1exdandy has uncovered vulnerabilities in GD32 microcontrollers (GigaDevice) that bypass protection mechanisms, allowing memory extraction.
The article 👉 https://swarm.ptsecurity.com/gigavulnerability-readout-protection-bypass-on-gigadevice-gd32-mcus/ | 4 309 |
| 11 |  🎮 Xbox 360 security in details: the long way to RGH3. Read the exclusive story about the chipless and reliable Xbox 360 modding method by 15432h
🔗https://swarm.ptsecurity.com/xbox-360-security-in-details-the-long-way-to-rgh3/ | 2 333 |
| 12 |  Exploiting SSTI in a Modern Spring Boot Application (3.3.4)
👤 by parzel
The article explores exploiting a Server-Side Template Injection (SSTI) vulnerability in a Spring Boot 3.3.4 application using Thymeleaf, leading to Remote Code Execution (RCE). It highlights the process of injecting malicious input to trigger Java reflection and bypass security defenses in modern framework.
The post provides a detailed walkthrough of achieving RCE despite the robust safeguards present, emphasizing the complexity of exploiting such vulnerabilities in contemporary applications.
📝 Contents:
● Identifying the Bug
● Facing Problems
● Bypassing the Defenses
● Developing the Exploit
https://modzero.com/en/blog/spring_boot_ssti/ | 3 886 |
| 13 |  🇻🇳 At the Positive Hack Talks in Hanoi, our blue team member naumovax shared valuable insights:
1️⃣ Architecture of an automation tool for detecting malware in the network
2️⃣ Key features you should add to your tool
3️⃣ Our refined Suricata rules
Link 👉 https://static.ptsecurity.com/events/stratocaster-how-we-automated-the-routine-search-for-unknown-malware-in-the-network-traffic.pdf
Link to our Suricata rules: https://rules.ptsecurity.com/ | 5 298 |
| 14 |  🇻🇳 The Positive Hack Talks in Vietnam has finished!
Slides from our researcher Arseniy Sharoglazov: https://static.ptsecurity.com/events/exch-vietnam.pdf
Wordlist: https://github.com/mohemiv/dodgypass
🎁 Includes a PoC for MyQ Unauthenticated RCE! (CVE-2024-28059) | 6 719 |
| 15 | 💾 Check out our latest publication on DMA attacks via SD cards!
The article was written by our researcher Gesser.
➡️ https://swarm.ptsecurity.com/new-dog-old-tr | 3 847 |
| 16 |  🎤✨ Our security researcher, Konstantin Polishin, presented “Red Team Social Engineering 2024: Initial Access TTP and Project Experience of Our Team” at #ROOTCON18 🚀
Recording: https://youtube.com/watch?v=6nnZJiL0Tgk | 4 630 |
| 17 |  Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409)
👤 by Harsh Jaiswal & Rahul Maini
In this blog post, authors will analyze CVE-2024-45409, a critical vulnerability impacting Ruby-SAML, OmniAuth-SAML libraries, which effectively affects GitLab.
This vulnerability allows an attacker to bypass SAML authentication mechanisms and gain unauthorized access by exploiting a flaw in how SAML responses are handled. The issue arises due to weaknesses in the verification of the digital signature used to protect SAML assertions, allowing attackers to manipulate the SAML response and bypass critical security checks.
📝 Contents:
● Introduction
● SAML Message Verification
• How SAML Signatures Work?
• How digest and signature ensure integrity?
● Ruby-SAML Bypass
• Bypassing Signature Validation
● Conclusion
https://blog.projectdiscovery.io/ruby-saml-gitlab-auth-bypass/ | 2 690 |
| 18 |  🤠 A notorious RCE in Zimbra, CVE-2024-45519 – here’s our expert breakdown!
High resolution | 3 506 |
| 19 |  ATTACKING UNIX SYSTEMS VIA CUPS, PART I
👤 by Simone Margaritelli
A remote unauthenticated attacker can silently replace existing printers’ (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print job is started (from that computer).
Entry Points
• WAN / public internet: a remote attacker sends an UDP packet to port 631. No authentication whatsoever.
• LAN: a local attacker can spoof zeroconf / mDNS / DNS-SD advertisements and achieve the same code path leading to RCE.
RCE chain
• Force the target machine to connect back to our malicious IPP server.
• Return an IPP attribute string that will inject controlled PPD directives to the temporary file.
• Wait for a print job to be sent to our fake printer for the PPD directives, and therefore the command, to be executed.
📝 Contents:
● Summary
● Intro
● What is cups-browsed?
● Stack Buffer Overflows and Race Conditions
● Back to found_cups_printer
● Internet Printing Protocol
● PostScript Printer Description
● The problematic child: foomatic-rip
● Remote Command Execution chain
● Personal Considerations
● One More Thing
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/ | 7 611 |
| 20 |  🔥 ESET fixed CVE-2024-7400 found by our researcher Dmitriy Zuzlov!
This is an LPE that affects 13 ESET solutions and allows a low-privileged attacker to delete arbitrary files, which can be used to obtain NT AUTHORITY\SYSTEM privileges!
The advisory 👉 https://support.eset.com/en/ca8726-local-privilege-escalation-fixed-for-vulnerability-during-detected-file-removal-in-eset-products-for-windows | 3 433 |
