Tag

PoC

3 stories

TightVNC Viewer Pre-Auth RCE: PoC Shows Remote Code Execution Risk

A newly disclosed vulnerability in the TightVNC Viewer allows attackers to execute code on Windows machines before a password prompt appears. Research credited to SeongJoon Cho of SSD Labs Korea includes proof-of-concept exploit code targeting TightVNC 2.8.88 x64. The flaw affects the viewer component and can be triggered when a viewer connects to a malicious server or when the viewer is reachable in Listening Mode. How the bug works The…

Saugata DattaNov 2, 20263 min read110

Cybersecurity

Researcher Publishes Windows Defender 0-Day ‘BlueHammer’ LPE Proof‑of‑Concept

A security researcher using the handle Chaotic Eclipse has publicly released a working proof‑of‑concept for a Windows zero‑day local privilege escalation (LPE) exploit called "BlueHammer." The disclosure, accompanied by full source code on GitHub, was confirmed as functional by vulnerability researcher Will Dormann and demonstrates that a low‑privileged local user can escalate to NT AUTHORITYSYSTEM on affected machines. The release has sparked concern across the security community because it is…

Saugata DattaApr 7, 20264 min read516

Cybersecurity

Zombie ZIP: How Malformed Archives Can Hide Malware from Security Scanners

A new archive-manipulation technique called “Zombie ZIP” lets attackers conceal payloads inside ZIP files in a way that can evade many antivirus and endpoint detection solutions. The method was described by security researcher Chris Aziz of Bombadil Systems and has drawn warnings from CERT/CC and the wider security community. This post explains how Zombie ZIP works, what research and evidence exist today, which tools are affected, and pragmatic steps defenders…

Saugata DattaMar 11, 20264 min read690

TightVNC Viewer Pre-Auth RCE: PoC Shows Remote Code Execution Risk

Researcher Publishes Windows Defender 0-Day ‘BlueHammer’ LPE Proof‑of‑Concept

Zombie ZIP: How Malformed Archives Can Hide Malware from Security Scanners

Free Tools: IP, DNS, SSL