Penetration Tester at Positive Technologies, likes to share what I learn with others | @ptswarm
- Tweets 288
- Following 253
- Followers 4,031
- Likes 1,049
🍏 Fresh LPE in macOS: Repair Permissions - Get Root!
CVE-2026-43783 found by our researcher Ilya Andr (@andrd3v) has been recently fixed by Apple. A single XPC request to DesktopServicesHelper lets you chown any path on disk - straight to root.
👇👇👇
ptswarm.com/blog/cve-2026-43…
5
27
148
14,770
⚡ IPAHound has received an important update!
Now we support BloodHound CE. You can use the "-O" collector flag to output in OpenGraph format.
We have prepared neo4j queries directly in the object descriptions for easy analysis of the FreeIPA graph.
github.com/IPAHound/IPAHound
6
15
2,133
👨🏻💻 Did you know that it’s possible to perform RCE in Internet Explorer via clickjacking? Igor Sak-Sakovsky's (@Psych0tr1a) new article will explain how!
swarm.ptsecurity.com/the-cli…
17
36
6,992
🧑🚒 Our researcher Mikhail Sukhov shares his knowledge and experience in analyzing FreeIPA environments.
He also introduces his new tool, IPAHound 💪
Go ’n see the details ➡️ swarm.ptsecurity.com/thinkin…
1
43
142
9,609
🔥 Read the new article by our researcher Timofey Duditsky.
The write-up dives into the AMD Platform Configuration Blobs mechanism, shows how it works, and reveals the vulnerability CVE-2025-54502.
swarm.ptsecurity.com/slowbur…
12
31
3,842
Two bugs. One chain. Full RCE.
New research by Aleksandr Zhurnakov on Dell Wyse Management Suite shows how business logic flaws can be chained into complete system compromise.
Read the full writeup!
swarm.ptsecurity.com/busines…
79
341
25,583
🐘 Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service.
Our researcher Aleksey Solovev discovered the vulnerability CVE-2025-12818, which may cause a product using the libpq PostgreSQL library to crash.
swarm.ptsecurity.com/attack-…
11
28
3,944
🚨 Our researcher Alexander Zhurnakov identified two vulnerabilities in Dell Wyse Management Suite prior to version 5.5.
In certain configurations, they can be chained to achieve unauthenticated remote code execution.
Upgrade now → dell.com/support/kbdoc/en-us…
1
32
91
10,000
📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk @justbronzebee
Read the write-up: swarm.ptsecurity.com/whos-on…
4
112
383
34,631
Arseniy Sharoglazov retweeted
📑 A new article from our researchers Aleksey Solovev, Nikita Sveshnikov and Vladimir Razov — "Blind trust: what is hidden behind the process of creating your PDF file?".
swarm.ptsecurity.com/blind-t…
27
103
11,968
Arseniy Sharoglazov retweeted
📱 New article by our researcher @Fi5t: Injection for an athlete.
Read about a vulnerability discovered in the Garmin Connect mobile application:
swarm.ptsecurity.com/injecti…
11
24
3,472
Arseniy Sharoglazov retweeted
🌎 Positive Hack Talks lands in Brazil 🇧🇷!
📍 São Paulo
🗓️ Dec 10, 2025
REMINDER: PHT is a fun and free cybersec event, see last pics: phtalks.ptsecurity.com/saopa…
⬆️ Register to attend or speak. Vamos!
4
10
2,979
Arseniy Sharoglazov retweeted
New article by @a13xp0p0v: "Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel."
Alexander used his pet project kernel-hack-drill to exploit a hard race condition that received the Pwnie Award 2025.
swarm.ptsecurity.com/kernel-…
2
22
44
6,931
Arseniy Sharoglazov retweeted
🚨 We've launched dbugs.ptsecurity.com, a new home for vulnerabilities. More than CVEs. More than MITRE.
✅ Trends & Insights
✅ AI-generated, multi-source vulnerability descriptions
✅ Researcher credits
✅ [drop your own tip in the comments]
Follow the project: @ptdbugs
10
27
5,418
Arseniy Sharoglazov retweeted
👑 Our researcher has discovered LPE in VMWare Tools (CVE-2025-22230 & CVE-2025-22247) via VGAuth!
Write-up by the one who broke it: Sergey Bliznyuk (@justbronzebee)
swarm.ptsecurity.com/the-gue…
1
42
110
10,062
Arseniy Sharoglazov retweeted
😈 Read the new article "Daemon Ex Plist: LPE via MacOS Daemons" by our researcher Egor Filatov.
This research reveals a vulnerability affecting popular apps like Mozilla VPN, Tunnelblick & more.
swarm.ptsecurity.com/daemon-…
31
61
7,925
Arseniy Sharoglazov retweeted
🧠 Our researcher Sergey Tarasov discovered a vulnerability (CVE-2025-49689) in NTFS on MS Windows.
The article dives into the exploitation path, file system internals, VHD format, and more.
🔗 Read the article: swarm.ptsecurity.com/buried-…
20
55
4,484
Arseniy Sharoglazov retweeted
🦊 Mozilla Foundation fixed CVE-2025-6430, discovered by our researcher Daniil Satyaev!
This vulnerability allows the Content-Disposition: attachment header to be ignored if the page is opened using <embed> or <object>, resulting in files being displayed instead of downloaded.
3
43
239
21,493
Arseniy Sharoglazov retweeted
⚡️ FreeIPA fixed critical CVE-2025-4404, discovered by our researcher Mikhail Sukhov!
This vulnerability allows an authenticated attacker to escalate privileges from host to domain admin.
🔗 Advisory: freeipa.org/release-notes/4-…
31
79
7,218
Arseniy Sharoglazov retweeted
📢 Positive Hack Talks is heading to Indonesia 🇮🇩!
📍 Jakarta
🗓 July 23, 2025
Join us for a free in-person hacker event — everyone’s welcome!
CFP & attendee registration now open ⬇️
phtalks.ptsecurity.com/jakar…
phtalks.ptsecurity.com/jakar…
7
18
3,060