Advisories · Technology
grisuno LazyOwn.
Every CVE that names grisuno LazyOwn among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboard
- grisuno LazyOwn
- CWE-1392
- CVSS 9.8 CriticalCritical · CVSS 9+
LazyOwn: Unauthenticated Socket.IO `input` Event Reaches LazyOwn Command Dispatcher — Unauthenticated RCE
- grisuno LazyOwn
- Authentication bypass