Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098732 advisory. In the Linux kernel, the following vulnerability has been resolved: team: avoid NETDEVCHANGEMTU event when unregistering slave syzbot is reporting unregisternetdevic...

CVE-2026-80202 Kimai before 2.56.0 Authorization Bypass via TimesheetVoter

Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute, which maps permissions only to owntimesheet or othertimesheet. As a result, any authenticated user with ROLETEAMLEAD or a role holding editothertimesheet/deleteothertimesheet can read, modify, and...

CVE-2026-80202 Kimai before 2.56.0 Authorization Bypass via TimesheetVoter

Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute, which maps permissions only to owntimesheet or othertimesheet. As a result, any authenticated user with ROLETEAMLEAD or a role holding editothertimesheet/deleteothertimesheet can read, modify, and...

CVE-2026-80202

Kimai before 2.56.0 has an authorization bypass in TimesheetVoter::voteOnAttribute() , which maps permissions only to own_timesheet or other_timesheet without enforcing team-membership checks. Any authenticated user holding ROLE_TEAMLEAD (or a role with edit_other_timesheet/delete_other_timesheet...

CVE-2026-80195 Kimai before 2.63.0 Team Membership Removal via API

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint PATCH /api/teams/id, which removes all existing team members before validating the submitted replacement member list. An authenticated teamlead or other user with permission to edi...

CVE-2026-80195 Kimai before 2.63.0 Team Membership Removal via API

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint PATCH /api/teams/id, which removes all existing team members before validating the submitted replacement member list. An authenticated teamlead or other user with permission to edi...

CVE-2026-80195

Kimai before 2.63.0 has a business logic / improper authorization flaw in the team update API endpoint (PATCH /api/teams/{id} ). The endpoint deletes all existing team membership rows before validating the submitted replacement member list. An authenticated user with team-edit permission can ther...

CVE-2026-75604

creationtimestamp| type| source ---|---|--- 2026-08-25 22:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99693 2026-08-26 00:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99693 2026-08-26 01:58:09+00:00| seen|...

CVE-2025-14124

CVE-2025-14124 WordPress Team Plugin - Nicht authentifizierte SQL-Injection Autor: Hyun Chiya Schwachstelleninformationen...

CVE-2026-26211

creationtimestamp| type| source ---|---|--- 2026-08-25 19:00:04+00:00| seen| https://t.me/GithubRedTeam/99668 2026-08-26 00:00:09+00:00| seen| https://t.me/GithubRedTeam/99668...

Certiception

Certiception Certiception ist ein Honeypot für Active Directory Certificate Services ADCS , entwickelt, um Angreifer mit einem realistischen und attraktiven Köder anzulocken, der hochrelevante Alarme auslöst. Entwickelt vom SRLabs Red Team, erstellt Certiception eine verwundbar wirkende...

Computer-Security-Equifax-2017

Dépôt éducatif démontrant des vulnérabilités logicielles réelles : RCE Apache Struts2 CVE-2017-5638, exfiltration de données, chiffrement faible et stratégies d'atténuation assainissement, surveillance, bonnes pratiques de cryptographie. Démo équipe rouge contre équipe bleue des failles de sécuri...

CVE-2019-0708poc

CVE-2019-0708poc Basierend auf dem von 360Vulcan Team entwickelten CVE-2019-0708 Einzel-IP-Scanner wurde ein Batch-Scan-Skript erstellt. Es wurde nur eine Single-Thread-Version geschrieben.. noch keine Zeit für Multithreading...

ilk-toolkit

IoT Lab KiiT ToolKit ilk-toolkit Un Toolkit progettato per IoT Lab KiiT per convertire qualsiasi distribuzione Linux in una macchina Red Team. Questo progetto è stato reso necessario dall'inaffidabilità del repository 'kali-linux-everything' su alcune installazioni e dalla successiva deprecazione...

The vulnerability of the team_setup_by_port() function in the drivers/net/team/team_core.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the teamsetupbyport function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver module is related to type conversion errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

PT-2026-81908

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint PATCH /api/teams/id, which removes all existing team members before validating the submitted replacement member list. An authenticated teamlead or other user with permission to edi...

PT-2026-81915

Name of the Vulnerable Software and Affected Versions Kimai versions prior to 2.56.0 Description An issue exists where team-membership checks are not enforced in the voteOnAttribute function of TimesheetVoter. This function maps permissions only to own timesheet or other timesheet. Consequently,...

blindsight

blindsight "Não existe isso de sobrevivência do mais forte. Sobrevivência do mais adequado, talvez. Não importa se uma solução é ótima. Tudo o que importa é se ela é melhor que a alternativa." -- Peter Watts, Blindsight 2006 Ferramenta de red team para despejar a memória do LSASS, ignorando...

skewrun

Skewrun skewrun é um kit de ferramentas de descoberta de tempo do Active Directory para red teams. Ele resolve dinamicamente o horário do Controlador de Domínio via protocolos de rede CLDAP, SMB, NTP, Kerberos, NTLM e executa comandos via libfaketime LDPRELOAD, enganando o binário executado para...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Team: Fix null-ptr-deref when the team device type is changed. The null-ptr-deref bug occurs as follows with a reproducer 1. Bug: Kernel NULL pointer dereferencing. Address: 0000000000000228… … RIP:...