PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cảnh báo hai lỗ hổng 0-day nghiêm trọng ảnh hưởng đến tất cả các phiên bản Windows

blog.viettelcybersecurity.com | vulnerability | #rce | #zero-day | #microsoft | #windows | #font-parsing | #atml
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Microsoft warned of two unpatched zero-days in the Windows Adobe Type Manager Library allowing remote code execution via malicious fonts, exploited in limited attacks across all Windows versions.
Published
Collected

Related coverage

Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
tool · github.com
LogonStealer: Windows Credential Provider DLL for Stealing Plaintext Passwords via CredProvDataModel Hooks
Demonstrates an effective post-exploitation technique targeting the modern Windows 11 WinRT logon architecture to harvest plaintext credentials while bypassing PPL.
vulnerability · blog.viettelcybersecurity.com
CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login
CVE-2026-55040: SharePoint Server Subscription Edition's token handler skips JWT signature validation, letting attackers forge Bearer tokens and log in as arbitrary accounts, including site admins.
vulnerability · blog.viettelcybersecurity.com
CVE-2022-22005 Microsoft Sharepoint RCE
Patch analysis of CVE-2022-22005, an RCE in Microsoft SharePoint (CVSS 8.8): diffing SharePoint 2016 builds pinpoints unsafe deserialization in ChartPreviewImage.loadChartImage().
vulnerability · blog.viettelcybersecurity.com
Phân tích lỗ hổng CVE-2022-22005 Microsoft Sharepoint RCE
A patch-diff analysis of CVE-2022-22005 (CVSS 8.8), a SharePoint RCE, tracing Microsoft's fix to a serialization binder restricting types during ChartPreviewImage.loadChartImage() deserialization.
vulnerability · blog.viettelcybersecurity.com
News | The outstanding achievements of Viettel Cyber Security in Q1 2020
Viettel Cyber Security's Q1 2020 recap: four Joomla CVEs, three VMware and three Microsoft zero-days, five Chrome PDFium flaws, plus awards for its VCS-CyM, VCS-aJiant and Cloudrity products.
Back