PT SWARM's banner

PT SWARM

@ptswarm • 18,774 subscribers

Positive Technologies Offensive Team

Shorts

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:

34,631 Aufrufe

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

⚠️ We've confirmed critical CVE-2024-45519 in Zimbra! SMTP-based vulnerability in postjournal service allows unauthenticated attackers to inject commands under zimbra user. ✅ Update your software ASAP to avoid exploitation!

⚠️ We've confirmed critical CVE-2024-45519 in Zimbra! SMTP-based vulnerability in postjournal service allows unauthenticated attackers to inject commands under zimbra user. ✅ Update your software ASAP to avoid exploitation!

84,472 Aufrufe • vor 2 Jahren

⚠️ We’ve reproduced CVE-2025-49113 in Roundcube. This vulnerability allows authenticated users to execute arbitrary commands via PHP object deserialization. If you're running Roundcube — update immediately!

⚠️ We’ve reproduced CVE-2025-49113 in Roundcube. This vulnerability allows authenticated users to execute arbitrary commands via PHP object deserialization. If you're running Roundcube — update immediately!

50,141 Aufrufe • vor 1 Jahr

⚠️ We have reproduced CVE-2023-22515 in Atlassian Confluence. Broken access control allows unauthenticated users to gain administrative access to the web application! Update your software ASAP!

⚠️ We have reproduced CVE-2023-22515 in Atlassian Confluence. Broken access control allows unauthenticated users to gain administrative access to the web application! Update your software ASAP!

83,620 Aufrufe • vor 3 Jahren

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!

🔥 We have reproduced the fresh CVE-2023-42793 in JetBrains TeamCity. Authentication bypass allows an external attacker to gain administrative access to the server and execute any commands on it. Update your software ASAP!

80,696 Aufrufe • vor 3 Jahren

💥 We have reproduced both CVE-2023–29357 and CVE-2023–24955 in Microsoft SharePoint. The chain allows unauthenticated users to execute arbitrary commands on the server. Update your software ASAP!

💥 We have reproduced both CVE-2023–29357 and CVE-2023–24955 in Microsoft SharePoint. The chain allows unauthenticated users to execute arbitrary commands on the server. Update your software ASAP!

58,178 Aufrufe • vor 3 Jahren

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:

13,379 Aufrufe • vor 1 Jahr

$🔥 ESET fixed CVE-2024-7400 found by our researcher Dmitriy Zuzlov! This is an LPE that affects 13 ESET solutions and allows a low-privileged attacker to delete arbitrary files, which can be used to obtain NT AUTHORITY\SYSTEM privileges! The advisory 👉$

🔥 ESET fixed CVE-2024-7400 found by our researcher Dmitriy Zuzlov! This is an LPE that affects 13 ESET solutions and allows a low-privileged attacker to delete arbitrary files, which can be used to obtain NT AUTHORITY\SYSTEM privileges! The advisory 👉

15,381 Aufrufe • vor 2 Jahren

Keine weiteren Inhalte verfügbar