The Curious Engineer

All blogs / Security

PT SWARM

ptswarm.com/blog

Positive Technologies Offensive Team

SecurityReverse engineeringWindows internalsLinux / Unix

’20’21’22’23’24’25’26
Posts
60 from 8 Jul 2020 to 15 Sep 2026
Posting
monthly (11 in the last year)
Kind
company blog
Feed
https://ptswarm.com/blog/feed/

2026 9

  1. CVE-2026-43783: Repair Permissions – Get Root: LPE via DesktopServicesHelper in macOS 26.5
  2. Hack the Elephant One Bite at a Time: NUL byte SQL Injection in pdo_firebird and NULL Pointer Dereference in PDO via pdo_pgsql
  3. The Click that shouldn’t have worked: RCE via clickjacking in Internet Explorer
  4. Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP
  5. Thinking in Graphs with IPAHound
  6. Slowburn: Looking through AMD Platform Configuration Blobs infrastructure
  7. Business, logic, and chains: unauthenticated RCE in Dell Wyse Management Suite
  8. Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service
  9. Who’s on the Line? Exploiting RCE in Windows Telephony Service

2025 10

  1. Blind trust: what is hidden behind the process of creating your PDF file?
  2. Injection for an athlete
  3. Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel
  4. The Guest Who Could: Exploiting LPE in VMWare Tools
  5. Daemon Ex Plist: LPE via MacOS Daemons
  6. Buried in the Log. Exploiting a 20 years old NTFS Vulnerability
  7. Last barrier destroyed, or compromise of Fuse Encryption Key for Intel Security Fuses
  8. Impossible XXE in PHP
  9. GigaVulnerability: readout protection bypass on GigaDevice GD32 MCUs
  10. Xbox 360 security in details: the long way to RGH3

2024 9

  1. New dog, old tricks: DaMAgeCard attack targets memory directly thru SD card reader
  2. Android Jetpack Navigation: Go Even Deeper
  3. From opcode to code: how AI chatbots can help with decompilation
  4. Inside Xerox WorkCentre: Two Unauthenticated RCEs
  5. Getting XXE in Web Browsers using ChatGPT
  6. Android Jetpack Navigation: Deep Links Handling Exploitation
  7. Source Code Disclosure in ASP.NET apps
  8. Bypassing browser tracking protection for CORS misconfiguration abuse
  9. Python ❤️ SSPI: Teaching Impacket to Respect Windows SSO

2023 2

  1. Binance Smart Chain Token Bridge Hack
  2. MyBB <= 1.8.31: Remote Code Execution Chain

2022 8

  1. Jetty Features for Hacking Web Apps
  2. Fork Bomb for Flutter
  3. Discovering Domains via a Time-Correlation Attack on Certificate Transparency
  4. Researching Open Source apps for XSS to RCE flaws
  5. Exploiting Arbitrary Object Instantiations in PHP without Custom Classes
  6. A Kernel Hacker Meets Fuchsia OS
  7. Catching bugs in VMware: Carbon Black Cloud Workload Appliance and vRealize Operations Manager
  8. Hunting for bugs in VMware: View Planner and vRealize Business for Cloud

2021 10

  1. Fuzzing for XSS via nested parsers condition
  2. WinRAR’s vulnerable trialware: when free software isn’t free
  3. Cisco Hyperflex: How We Got RCE Through Login Form and Other Findings
  4. Guide to P-code Injection: Changing the intermediate representation of code on the fly in Ghidra
  5. Creating a Ghidra processor module in SLEIGH using V8 bytecode as an example
  6. Decompiling Node.js in Ghidra
  7. How we bypassed bytenode and decompiled Node.js bytecode in Ghidra
  8. From 0 to RCE: Cockpit CMS
  9. Unauthorized RCE in VMware vCenter
  10. Swarm of Palo Alto PAN-OS vulnerabilities

2020 12

  1. Vulnerabilities in McAfee ePolicy Orchestrator
  2. Vulnerabilities in Checkpoint ICA Management Tool
  3. Path Traversal on Citrix XenMobile Server
  4. Advanced MSSQL Injection Tricks
  5. Remote Desktop Services Shadowing – Beyond the Shadowed Session
  6. IDA Pro Tips to Add to Your Bag of Tricks
  7. Grafana 6.4.3 Arbitrary File Read
  8. Kerberoasting without SPNs
  9. Vulnerabilities in the Openfire Admin Console
  10. Attacking MS Exchange Web Interfaces
  11. Remote Code Execution in F5 Big‑IP
  12. Remote Code Execution in Citrix ADC