PT-2026-69988

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 7.10.14 Rocket.Chat versions prior to 8.0.8 Rocket.Chat versions prior to 8.1.7 Rocket.Chat versions prior to 8.2.7 Rocket.Chat versions prior to 8.3.7 Rocket.Chat versions prior to 8.4.5 Rocket.Chat versions prio...

CVE-2026-71557

creationtimestamp| type| source ---|---|--- 2026-08-08 03:02:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97106 2026-08-08 10:39:06+00:00| seen| https://gist.github.com/alon710/71d0ff9c71dc1f5ee8e40bba3da46014 2026-08-09 00:29:23+00:00| published-proof-of-concept|...

Rocket.Chat v8.7.0

The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...

CVE-2026-54218 TeamDavid: Weak Cryptography and Insecure Password Storage

Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various files using only obfuscation. Any user with access to the server’s file system, or who can otherwise extract files from the server see...

EUVD-2026-54442

Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClientclose.html” is vulnerable to a buffer overflow vulnerability in multiple form data parameters. By submitting excessively long values in these parameters, an authenticated attacker can trigger a server crash, resulting ...

EUVD-2026-54441

Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are vulnerable to a buffer overflow condition. By specifying an excessively long filename in a file upload request, an unauthenticated attacker can trigger a crash of the server, resulting in ...

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain. "The connection is...

CVE-2026-98198

creationtimestamp| type| source ---|---|--- 2026-08-05 19:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96789 2026-08-06 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96789 2026-08-07 10:17:15+00:00| seen|...

CVE-2026-69083

creationtimestamp| type| source ---|---|--- 2026-08-03 22:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96493 2026-08-04 00:00:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96493 2026-08-04 05:00:05+00:00| published-proof-of-concept|...

An analysis of incidents at Brazilian educational institutions

Introduction Because of the amount of data that can be obtained and the high impact that successful attacks may have, educational institutions are frequent targets of cybercriminals. Both public and private schools and universities rely on software for managing personally identifiable information...

offensive-security-labs

Offensive Security Labs A collection of hands-on offensive cy...

CVE-2026-68503

LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json and core/payloadschema.py and passes them unchanged to lazyc2.py HTTP Basic authentication, allowing any network-reachabl...

SUSE CVE-2026-52815

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs has an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint at internal/route/api/v1/orgteam.go:8 returns all teams for any organization without requiring authentication. The route...

​​​​What’s new in Microsoft Security: July 2026

Every organization needs security that protects end to end with the speed and scale of AI. Microsoft’s vision is simple: security should be ambient and autonomous, just like the AI it protects. As organizations scale AI and expand across environments, security teams need protection that covers...

GHSA-JR9P-4H4J-6C58

creationtimestamp| type| source ---|---|--- 2026-07-30 07:00:03+00:00| seen| https://t.me/GithubRedTeam/95796 2026-07-30 14:00:04+00:00| seen| Telegram/47AGWfAWFIwZKzQclsisfXazYjpo74QYaHVlY-riLjwoTE 2026-07-31 00:00:29+00:00| published-proof-of-concept|...

PT-2026-66609

Name of the Vulnerable Software and Affected Versions LazyOwn RedTeam/APT Framework versions prior to 0.2.154 Description LazyOwn ships with default C2 credentials in payload.json and core/payload schema.py, which are passed unchanged to lazyc2.py for HTTP Basic authentication. This allows a...

Technology-Enhanced Tabletop Exercises for Cybersecurity Education: Lessons Learned

This innovative practice full paper examines the integration of technology-enhanced tabletop exercises TTXs into computing education, focusing on cybersecurity curricula. The motivation is to better prepare students for complex, collaborative problem solving typical of incident response and IT...

CVE-2026-12703

TeamViewer Full Client and Host for macOS before version 15.80 contain a business logic error that can allow an authenticated attacker to bypass a configured 2FA for Connections approval flow via Unattended Access and establish a remote connection to an affected macOS host...

CVE-2026-16475

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:54+00:00| seen| https://t.me/GithubRedTeam/95671 2026-07-29 20:00:03+00:00| seen| Telegram/Ig8EiCACgPrEXQ5i-DIyVp2gol1J9WigCZpGPavBW5BRY 2026-07-29 20:00:04+00:00| seen| Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTVRC7C2rNjBX8 2026-07-30...

CVE-2026-65893

creationtimestamp| type| source ---|---|--- 2026-07-28 14:00:06+00:00| seen| https://t.me/GithubRedTeam/95522 2026-07-28 21:00:05+00:00| seen| https://t.me/GithubRedTeam/95588 2026-07-29 00:00:08+00:00| seen| Telegram/Q1yPTM1HokNzfLpkFc6iUNC00bXozy1Qi57vCkUVkSVfE8 2026-07-29 00:00:12+00:00| seen|...