Telegram-канал "PT SWARM" — @ptswarm

PT SWARM

24 Aug, 16:45

⚡️ IPAHound has received an important update!

Now we support BloodHound CE. You can use the -O collector flag to output in OpenGraph format.

We have prepared neo4j queries directly in the object descriptions for easy analysis of the FreeIPA graph.

https://github.com/IPAHound/IPAHound

1.2k 0 40 24

PT SWARM

6 Jul, 14:49

🐘 PHP PDO layer exposed! Aleksey Solovev & Nikita Sveshnikov uncovered 2 flaws: SQL Injection in pdo_firebird (CVE-2025-14179) and DoS in PDO via pdo_pgsql (CVE-2025-14180).

https://swarm.ptsecurity.com/hack-the-elephant-one-bite-at-a-time-nul-byte-sql-injection-in-pdo_firebird-and-null-pointer-dereference-in-pdo-pgsql/

2.4k 1 34 27

PT SWARM

5 Jun, 14:23

👨🏻‍💻 Did you know that it’s possible to perform RCE in Internet Explorer via clickjacking? Igor Sak-Sakovsky's new article will explain how!

https://swarm.ptsecurity.com/the-click-that-shouldnt-have-worked-rce-via-clickjacking-in-internet-explorer/

2.3k 0 29 27

PT SWARM

15 May, 12:13

🐘 PHP JPEG bugs: how image parsing leads to memory corruption.

Our researcher Nikita Sveshnikov discovered two JPEG-related memory-safety bugs in PHP’s ext/standard: CVE-2025-14177 in getimagesize and a heap buffer overflow in iptcembed.

https://swarm.ptsecurity.com/hack-the-elephant-one-bite-at-a-time-jpeg-related-memory-safety-bugs-in-php/

3.6k 1 37 28

PT SWARM

30 Apr, 12:05

🧑‍🚒 Our researcher Mikhail Sukhov shares his knowledge and experience in analyzing FreeIPA environments.

He also introduces his new tool, IPAHound 💪

Go ’n see the details ➡️ https://swarm.ptsecurity.com/thinking-in-graphs-with-ipahound/

20.2k 7 359 43

PT SWARM

15 Apr, 17:35

🔥 Read the new article by our researcher Timofey Duditsky.

The write-up dives into the AMD Platform Configuration Blobs mechanism, shows how it works, and reveals the vulnerability CVE-2025-54502.

https://swarm.ptsecurity.com/slowburn-looking-through-amd-platform-configuration-blobs-infrastructure/

3.9k 0 22 21

PT SWARM

23 Mar, 16:46

Two bugs. One chain. Full RCE.

New research by Aleksandr Zhurnakov on Dell Wyse Management Suite shows how business logic flaws can be chained into complete system compromise.

Read the full writeup!

https://swarm.ptsecurity.com/business-logic-and-chains-unauthenticated-rce-in-dell-wyse-management-suite/

Business, logic, and chains: unauthenticated RCE in Dell Wyse Management Suite

A high impact bug sometimes needs just one small additional detail before it turns into a practical attack vector. For that reason, when doing vulnerability research, I flag even errors or odd behaviors that look irrelevant at first. In some cases, those findings become the missing puzzle piece of a...

3.6k 0 39 26

PT SWARM

10 Mar, 17:03

🐘 Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service.

Our researcher Aleksey Solovev discovered the vulnerability CVE-2025-12818, which may cause a product using the libpq PostgreSQL library to crash.

https://swarm.ptsecurity.com/attack-arithmetic-how-an-integer-overflow-in-postgresql-libpq-leads-to-denial-of-service/

Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service

Databases serve as the foundation of the digital world, organizing and storing critical information: from financial transactions and medical records to website content. However, like any complex software product, they are not immune to flaws, and discovered vulnerabilities can turn this repository i...

3.3k 0 23 20

PT SWARM

2 Mar, 16:45

00:23

Видео недоступно для предпросмотра

Смотреть в Telegram

🚨 Our researcher Alexander Zhurnakov identified two vulnerabilities in Dell Wyse Management Suite prior to version 5.5.

In certain configurations, they can be chained to achieve unauthenticated remote code execution.

Upgrade now → https://www.dell.com/support/kbdoc/en-us/000429141/dsa-2026-103

3.9k 0 23 39

PT SWARM

21 Jan, 14:39

🏆 Two of our research articles are nominated for PortSwigger's Top 10 Web Hacking Techniques of 2025!

1️⃣ Impossible XXE in PHP
2️⃣ Blind trust: what is hidden behind the process of creating your PDF file?

Last day to vote if you found them useful!

https://portswigger.net/polls/top-10-web-hacking-techniques-2025

Top 10 web hacking techniques of 2025

Welcome to the community vote for the Top 10 Web Hacking Techniques of 2025.

2.4k 0 41 50

PT SWARM

19 Jan, 16:04

00:10

Видео недоступно для предпросмотра

Смотреть в Telegram

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk.

Read the write-up: https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/

3.4k 2 60 55

PT SWARM

29 Dec 2025, 15:17

📑 A new article from our researchers Aleksey Solovev, Nikita Sveshnikov and Vladimir Razov — "Blind trust: what is hidden behind the process of creating your PDF file?".

https://swarm.ptsecurity.com/blind-trust-what-is-hidden-behind-the-process-of-creating-your-pdf-file/

Blind trust: what is hidden behind the process of creating your PDF file?

Every day, thousands of web services generate PDF (Portable Document Format) files—bills, contracts, reports. This step is often treated as a technical routine, “just convert the HTML,” but in practice it’s exactly where a trust boundary is crossed. The renderer parses HTML, downloads external resou...

5.5k 1 73 30

PT SWARM

14 Nov 2025, 17:15

📱 New article by our researcher Artem Kulakov: Injection for an athlete.

Read about a vulnerability discovered in the Garmin Connect mobile application:

https://swarm.ptsecurity.com/injection-for-an-athlete/

Injection for an athlete

After yet another workout where my sports watch completely lost GPS, I’d had enough. I decided to dig into its firmware and pinpoint the problem. I couldn’t find it published anywhere. No download section, no public archive, nothing. So, I changed tactics and went in through the Android app instead,...

2.6k 0 35 24

PT SWARM

24 Jul 2025, 19:31

🚨 We've launched dbugs.ptsecurity.com, a new home for vulnerabilities. More than CVEs. More than MITRE.

✅ Trends & Insights
✅ AI-generated, multi-source vulnerability descriptions
✅ Researcher credits

Explore now: https://dbugs.ptsecurity.com

8.5k 4 118 71

PT SWARM

22 Jul 2025, 16:39

👑 Our researcher has discovered LPE in VMWare Tools (CVE-2025-22230 & CVE-2025-22247) via VGAuth!

Write-up by the one who broke it: Sergey Bliznyuk

https://swarm.ptsecurity.com/the-guest-who-could-exploiting-lpe-in-vmware-tools/

17.6k 2 147 41

PT SWARM

17 Jul 2025, 18:15

😈 Read the new article "Daemon Ex Plist: LPE via MacOS Daemons" by our researcher Egor Filatov.

This research reveals a vulnerability affecting popular apps like Mozilla VPN, Tunnelblick & more.

https://swarm.ptsecurity.com/daemon-ex-plist-lpe-via-macos-daemons/

Daemon Ex Plist: LPE via MacOS Daemons

Introduction Today, we will try to figure out one mechanism for which there is not much information available on the internet and attempt to use the defect of this mechanism to exploit an LPE vulnerability. The mechanism we are going to look into is Mac-specific startup process for specialized servi...

3.7k 0 28 22

PT SWARM

9 Jul 2025, 17:08

🧠 Our researcher Sergey Tarasov discovered a vulnerability (CVE-2025-49689) in NTFS on MS Windows.

The article dives into the exploitation path, file system internals, VHD format, and more.

🔗 Read the article: https://swarm.ptsecurity.com/buried-in-the-log-exploiting-a-20-years-old-ntfs-vulnerability/

4.7k 0 52 29

PT SWARM

27 Jun 2025, 16:40

🦊 Mozilla Foundation fixed CVE-2025-6430, discovered by our researcher Daniil Satyaev!

This vulnerability allows the Content-Disposition: attachment header to be ignored if the page is opened using or , resulting in files being displayed instead of downloaded.

5.4k 4 64 69

PT SWARM

3 Jun 2025, 19:46

00:29

Видео недоступно для предпросмотра

Смотреть в Telegram

⚠️ We've reproduced CVE-2025-49113 in Roundcube.

This vulnerability allows authenticated users to execute arbitrary commands via PHP object deserialization.

If you're running Roundcube — update immediately!

10.4k 9 257 65

PT SWARM

27 May 2025, 11:10

Don't Call That "Protected" Method: Dissecting an N-Day vBulletin RCE

👤 by Egidio Romano

The article analyzes a critical Unauthenticated Remote Code Execution vulnerability (CVE-2025-48827) in vBulletin, which becomes exploitable when running on PHP 8.1 or newer.

The vulnerability stems from vBulletin’s misuse of ReflectionMethod::invoke(), which in PHP 8.1+ no longer blocks access to protected methods by default. As a result, attackers can remotely trigger sensitive internal functions originally meant to be inaccessible and achieve code execution on the server.

📝 Contents:
● The Vulnerability
● The vBulletin Vulnerability
● Exploiting vBulletin: Path to Pre-Auth RCE
● Conclusion

https://karmainsecurity.com/dont-call-that-protected-method-vbulletin-rce

4k 0 46 17

Купить живых подписчиков

Лиды из Телеграм по 600 рублей

ИИ-агент сам находит вам клиентов

PT SWARM

Гео и язык канала

Категория

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

PT SWARM

7 457

Популярное в канале

Язык сайта

Купить живых подписчиков

Лиды из Телеграм по 600 рублей

ИИ-агент сам находит вам клиентов

PT SWARM

Гео и язык канала

Категория

7 457

Популярное в канале