263 matches found
EUVD-2026-51308
LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json and core/payloadschema.py and passes them unchanged to lazyc2.py HTTP Basic authentication, allowing any network-reachabl...
CVE-2026-68502: Missing Authentication for Critical Function
LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get'value' to LazyOwnShell.onecmd, reaching LazyOwnShell.docmd and subprocess.callcommand,...
CVE-2026-68503: Use of Default Credentials
LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json and core/payloadschema.py and passes them unchanged to lazyc2.py HTTP Basic authentication, allowing any network-reachabl...
CVE-2026-25194
creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:07+00:00| seen| https://t.me/GithubRedTeam/92513 2026-07-14 00:00:17+00:00| seen| https://t.me/GithubRedTeam/92513 2026-07-15 00:00:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92513...
GHSA-C2H5-PPV9-7VRQ
creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:03+00:00| seen| https://t.me/GithubRedTeam/93198 2026-07-14 01:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93198 2026-07-16 19:00:08+00:00| seen| Telegram/iICdo6JkqLQcGiJzEUOva0XUBnrNpqjKkG8FagtyyTeeKdc 2026-07-1...
WordPress Slider Revolution plugin 7.0-7.0.10 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Luc Huynh from Noventiq RedTeam - Noventiq Vietnam in WordPress Plugin Slider Revolution versions 7.0-7.0.10...
Malicious code in redteam-qxz7-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 855b67c0cf1aaed6f5e0ce3a67478a20cd4244c56424002feeeb0dea1a875848 During installation, the package exfiltrates cloud tokens from the environment. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
MAL-2026-5120 Malicious code in redteam-qxz7-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 855b67c0cf1aaed6f5e0ce3a67478a20cd4244c56424002feeeb0dea1a875848 During installation, the package exfiltrates cloud tokens from the environment. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
CVE-2026-45616
creationtimestamp| type| source ---|---|--- 2026-05-13 14:00:05+00:00| seen| https://t.me/GithubRedTeam/84084 2026-05-13 21:00:04+00:00| published-proof-of-concept| Telegram/O41s4ZacceniC-zmRdA20LKtlUfLN8dJaI2Rmc1hsAXigiA...
Malicious code in cicd-ppe-redteam-test02 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 14adb6733ca8f958770b9766a7f255fbd8562886dce3b42cee772eac50e52d0f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-1064 Malicious code in cicd-ppe-redteam-test02 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 14adb6733ca8f958770b9766a7f255fbd8562886dce3b42cee772eac50e52d0f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in cicd-ppe-redteam-test01 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5ff0b643e9e96817244b6499fdbcfd26b6c26cf366980909a6461e4c15b389fd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-1063 Malicious code in cicd-ppe-redteam-test01 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5ff0b643e9e96817244b6499fdbcfd26b6c26cf366980909a6461e4c15b389fd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2025-43960
creationtimestamp| type| source ---|---|--- 2025-08-23 15:08:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/48792...
Exploit for Deserialization of Untrusted Data in Microsoft
🔐 Bluefire Redteam – SharePoint CVE-2025-53770 Detection & Rem...
Shopware Vulnerable to Blind SQL-injection in DAL aggregations
Impact The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the parameters in the “aggregations” object. The ‘name’ field in this...
GHSA-8G35-7RMW-7F59 Shopware Vulnerable to Blind SQL-injection in DAL aggregations
Impact The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the parameters in the “aggregations” object. The ‘name’ field in this...
CVE-2024-2026
creationtimestamp| type| source ---|---|--- 2024-07-19 09:15:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8024 2026-09-01 14:00:04+00:00| seen| https://t.me/AtomicSec/43 2026-09-02 01:05:06+00:00| published-proof-of-concept| https://t.me/AtomicSec/43 2026-09-02 06:00:15+00:00|...