PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PrintNightmare: What You Need to Know

bugcrowd.com | vulnerability | #rce | #microsoft | #ransomware | #windows | #printnightmare | #cve-2021-34527 | #cve-2021-1675 | #print-spooler | #mimikatz | #patch
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

PrintNightmare (CVE-2021-34527, tied to CVE-2021-1675) is a Windows Print Spooler RCE flaw enabling SYSTEM-level code execution; Microsoft shipped out-of-band patches after PoC spread via GitHub.
Published
Collected

Related coverage

vulnerability · semperis.com
What You Need to Know about PrintNightmare, the Critical Windows Print Spooler Vulnerability
PrintNightmare explained: CVE-2021-1675 and CVE-2021-34527 enable remote code execution and privilege escalation via the Windows Print Spooler; covers the July patch and the key mitigation—disable the spooler on domain controllers.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
tool · github.com
LogonStealer: Windows Credential Provider DLL for Stealing Plaintext Passwords via CredProvDataModel Hooks
Demonstrates an effective post-exploitation technique targeting the modern Windows 11 WinRT logon architecture to harvest plaintext credentials while bypassing PPL.
Critical · vulnerability · aikido.dev
Node2Shell Evolves to HTTP2Shell: Google Brotli Flaw (CVE-2026-111497) Affects HTTP Ecosystem
Brotli is ubiquitous across the modern HTTP ecosystem for web asset compression. Because the flaw allows unauthenticated remote code execution in both directions, any service or client automatically decompressing untrusted Brotli payloads is at critical risk until patched.
vulnerability · aikido.dev
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
Node.js shipped a security update on Wednesday for a flaw in how it decompresses Brotli data, a bug people are already calling Node2Shell (CVE-2026-111497). If an attacker can get a malicious payload in front of your app, the flaw can crash the process, leak part of its memory, or potentially let them run their own code.
vulnerability · pwn.ai
CVE-2026-106378: Chrome GPU Sandbox Escape to RCE
How an allowed WindowServer connection and inherited macOS event-posting permission let Chrome’s sandboxed GPU process inject keystrokes and launch apps outside the sandbox.
Back