15766 matches found
SentinelOne-ATTACK-Queries
Consultas de SentinelOne mapeadas con ATT&CK Consultas mapeadas con MITRE ATT&CK para SentinelOne Deep Visiblity DISCONTINUADO Este proyecto ha sido reemplazado por el repositorioSentinelOne-Queries que avanza hacia firmas compartibles y para uso en herramientas. El nuevo repositorio se basa en e...
msi-search
MSI Search Windows almacena en caché los archivos MSI en C:\Windows\Installer\ con nombres de archivo aleatorios compuestos por letras y números seguidos de la extensión ".msi". Esta herramienta simplifica la tarea de los operadores de red team y los equipos de seguridad para identificar qué...
CVE-2026-81861
creationtimestamp| type| source ---|---|--- 2026-09-11 04:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101985 2026-09-12 00:00:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101985 2026-09-14 03:00:15+00:00| seen|...
CVE-2026-72815
creationtimestamp| type| source ---|---|--- 2026-09-10 04:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101882 2026-09-10 05:00:05+00:00| published-proof-of-concept| Telegram/gOw7ciMZOTUWYNYtqA2ln1nEEiajeumMwU7KLhL3ORvBRlQ 2026-09-11 00:00:52+00:00| published-proof-of-concep...
Empire v7.0.2
Empire Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers. The Empire server is written in Python 3 and is modular to allow operator flexibility. Empire comes built-in with a client that can be used remotely to access the server...
CVE-2026-62201
creationtimestamp| type| source ---|---|--- 2026-09-09 10:00:06+00:00| seen| https://t.me/GithubRedTeam/101779 2026-09-09 16:00:06+00:00| seen| Telegram/6CB9q72mBhsjQjI1J7xmJKbYDVj36uzEd2SQzSzeH690k 2026-09-10 00:00:34+00:00| published-proof-of-concept|...
CVE-2026-13184
creationtimestamp| type| source ---|---|--- 2026-09-09 05:00:07+00:00| seen| https://t.me/GithubRedTeam/101482 2026-09-10 00:00:49+00:00| seen| https://t.me/GithubRedTeam/101482...
CVE-2026-84806
Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated users with team edit permissions and read-only access to grant team access to customers, projects, or activities. Attackers can exploit insufficient permission checks by sending...
CVE-2026-84808
Kimai versions before 2.65.0 contain an authorization bypass vulnerability in the REST API timesheet collection endpoint that fails to enforce activity-team access controls. Users with viewothertimesheet permission can list timesheets using activities restricted to teams they do not belong to,...
CVE-2026-84804
Kimai before 2.65.0 fails to properly validate permissions when removing team access to activities, projects, and customers via API endpoints. Authenticated users with editteam permission can revoke team access without the required permissionsactivity check, bypassing authorization controls...
CVE-2026-84808
Kimai (a self-hosted time-tracking application) versions before 2.65.0 are affected by an authorization bypass in the REST API timesheet collection endpoint. The vulnerability stems from a failure to enforce activity-team access controls : a user holding the view_other_timesheet permission can li...
EUVD-2026-69920
Kimai versions before 2.65.0 contain an authorization bypass vulnerability in the REST API timesheet collection endpoint that fails to enforce activity-team access controls. Users with viewothertimesheet permission can list timesheets using activities restricted to teams they do not belong to,...
CVE-2026-84808 Kimai before 2.65.0 Authorization Bypass via API Timesheet
Kimai versions before 2.65.0 contain an authorization bypass vulnerability in the REST API timesheet collection endpoint that fails to enforce activity-team access controls. Users with viewothertimesheet permission can list timesheets using activities restricted to teams they do not belong to,...
CVE-2026-84808 Kimai before 2.65.0 Authorization Bypass via API Timesheet
Kimai versions before 2.65.0 contain an authorization bypass vulnerability in the REST API timesheet collection endpoint that fails to enforce activity-team access controls. Users with viewothertimesheet permission can list timesheets using activities restricted to teams they do not belong to,...
CVE-2026-84806 Kimai before 2.63.0 Authorization Bypass via Team Access Endpoints
Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated users with team edit permissions and read-only access to grant team access to customers, projects, or activities. Attackers can exploit insufficient permission checks by sending...
EUVD-2026-69919
Kimai kimai/kimai through 2.65.0 contains a business logic / improper authorization vulnerability in the default team creation endpoints. An authenticated user with project permission-management privileges can create or use a customer, project, or activity whose name matches an existing team;...
CVE-2026-84807 Kimai before 2.65.0 Authentication Bypass via Team Creation
Kimai kimai/kimai through 2.65.0 contains a business logic / improper authorization vulnerability in the default team creation endpoints. An authenticated user with project permission-management privileges can create or use a customer, project, or activity whose name matches an existing team;...
CVE-2026-84806 Kimai before 2.63.0 Authorization Bypass via Team Access Endpoints
Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated users with team edit permissions and read-only access to grant team access to customers, projects, or activities. Attackers can exploit insufficient permission checks by sending...
EUVD-2026-69918
Kimai before 2.63.0 contains an improper authorization vulnerability in team access endpoints that allows authenticated users with team edit permissions and read-only access to grant team access to customers, projects, or activities. Attackers can exploit insufficient permission checks by sending...
CVE-2026-84807
Kimai (kimai/kimai) versions prior to 2.65.0 contain an improper authorization flaw in its default team-creation endpoints (POST /api/customers/{id}/team, POST /api/projects/{id}/team, POST /api/activities/{id}/team). An authenticated user holding project permission-management privileges can crea...