129 matches found
nightHawkResponse
nightHawk Response Elasticsearchバックエンド上での非同期フォレンジックデータ表示のために構築されたカスタムアプリケーション。 このアプリケーションは、Mandiant Redlineの"collections"ファイルを取り込み、検索/スタックおよびタグ付けにおいて柔軟性を提供するように設計されています。 このアプリケーションは、複数の調査（または数百のエンドポイント）を単一のペインで制御できないことから生まれました。...
ThreatResearch
설정 추출기 팀에서 분석한 일부 샘플에서 설정을 추출하기 위해 사용하는 스크립트입니다. PlugX Remcos templateX RedLine Stealer...
CVE-2026-6274
CVE-2026-6274: Redline WR3200 認証バイパス English | Turkish このリポジトリには、CVE-2026-6274 の技術的詳細と概念実証（PoC）が含まれています。この脆弱性は Redline WR3200 ルーター（ファームウェア v7.1.8 より前のバージョン）に存在し、攻撃者が現在の認証情報を知らなくても認証をバイパスして管理パスワードを変更できるようになります。 技術的分析 この脆弱性は、主に2つのセキュリティ上の欠陥に起因します。 1. 静的クッキー認証:...
RedLine-Stealer-C2-Defender-Bypass-Payload-Analysis
1. C2接続 – IP 198.46.86.63 ネットワーク解析により、RedLine StealerがリモートIPアドレス198.46.86.63への接続を確立することが判明しました。このIPは、データの外部送信とコマンド配信に使用される、マルウェアのC2（コマンド＆コントロール）サーバーである可能性が高いです。 主な観察結果: IPアドレス: 198.46.86.63 プロトコル: おそらくHTTP/HTTPS（一般的なRedLineの動作に基づく）。 目的: 窃取したデータ（認証情報、Cookie、暗号通貨ウォレット）のC2通信。 重要である理由: C2インフラ:...
CVE-2026-6274
Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...
CVE-2026-6274
Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...
EUVD-2026-34793
Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...
CVE-2026-6274
Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...
CVE-2026-6274 Authentication Bypass in DTS Electronics' Redline WR3200
Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...
CVE-2026-6274 Authentication Bypass in DTS Electronics' Redline WR3200
Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...
CVE-2026-6274
CVE-2026-6274 concerns an authentication weakness in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200, where improper/missing authentication for a critical function allows accessing functionality not properly constrained by ACLs. Affected firmware ranges are 7.1.3 through before 7.1.8. ...
Redline WR3200 安全漏洞
The Redline WR3200 is a Wi-Fi 4 router from the Turkish company Redline, capable of supporting 300Mbps wireless transmission. The Redline WR3200 versions from 7.1.3 to 7.1.8 have security vulnerabilities. These vulnerabilities stem from improper authentication, lack of authentication for critical...
PT-2026-46912
Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...
CVE-2026-6274: Improper Authentication
Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...
Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure
Four distinct threat activity clusters have been observed leveraging a malware loader known as CastleLoader , strengthening the previous assessment that the tool is offered to other threat actors under a malware-as-a-service MaaS model. The threat actor behind CastleLoader has been assigned the...
EUVD-2011-3820
Malware in sbrugna...
EUVD-2023-24005
Malicious code in bioql PyPI...
EUVD-2023-24035
Malicious code in bioql PyPI...
