CVE-2026-9218: Improper Input Validation

Insufficient input validation vulnerability in time server NTP setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the...

CVE-2026-107917: Improper Input Validation

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...

CVE-2026-107607: Missing Authentication for Critical Function

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...

CVE-2026-107606: Missing Authentication for Critical Function

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication...

CVE-2026-107605: Missing Authentication for Critical Function

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication...

PT-2026-111631

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 affected versions not specified Description Insufficient input validation in the time server NTP setting allows an attacker with administrator credentials and local network access to execute unauthorized commands on the router...

CVE-2026-108901

A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack ca...

CVE-2026-108901

A vulnerability exists in the Display QR Code Rendering component of the Shenzhen HCC Technology MPOS M6 PLUS 1.31-N . By manipulating the argument alignment , an attacker can cause an improper restriction of rendered ui layers . This attack is restricted to the local network . While the vendor h...

CVE-2026-108901 Shenzhen HCC Technology MPOS M6 PLUS Display QR Code Rendering ui layer

A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack ca...

EUVD-2026-97511

A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack ca...

CVE-2026-108901: Improper Restriction of Rendered UI Layers or Frames

A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack ca...

isowall

isowall Este es un mini-cortafuegos que aísla por completo un dispositivo objetivo de la red local. Esto sirve para permitir a máquinas infectadas acceso a Internet, pero sin poner en peligro la red local. Compilación Este proyecto depende de libpcap y, por supuesto, de un compilador de C. En...

kickthemout

KickThemOut KickThemOut - Expulsa dispositivos de tu red Una herramienta para expulsar dispositivos de tu red y disfrutar de todo el ancho de banda para ti. Te permite seleccionar dispositivos específicos o todos y suplantar sus ARP para sacarlos de tu red de área local. Compatible con Python 3+...

singularity

Singularity of Origin Actualizaciones recientes: NUEVO 2025-11-25 : Chrome lanzó la versión 142 con Local Network Access LNA, que impide las técnicas de ataque de DNS rebinding implementadas en Singularity. La rama LNA-from-Non-Secure-Contexts de Singularity of Origin implementa soporte para Tria...

evillimiter

Evil Limiter Una herramienta para monitorear, analizar y limitar el ancho de banda subida/bajada de dispositivos en tu red local sin acceso físico o administrativo. evillimiter emplea ARP spoofing y traffic shaping para limitar el ancho de banda de los hosts en la red. ¿Buscas una versión...

creak

creak Realiza algunos de los ataques MITM más famosos sobre direcciones objetivo ubicadas en una red local. Entre estos, deniega las capacidades de navegación y descarga de un host objetivo en la red local realizando un ataque de envenenamiento ARP y enviando paquetes TCP reset a cada solicitud...

sharesniffer

sharesniffer sharesniffer es una herramienta de análisis de red para encontrar recursos compartidos de archivos abiertos y cerrados en tu red local. Incluye descubrimiento automático de red y montaje automático de cualquier recurso compartido cifs y nfs abierto. Cómo usar Ejemplo para encontrar...

killcast

Manipola dispositivi Chromecast nella tua rete Disponibile in Ispirazione - Migliaia di dispositivi Google Chromecast dirottati per promuovere PewDiePie Questo strumento è un Proof of Concept e ha solo scopi di ricerca, killcast mostra come i dispositivi Chromecast possano essere facilmente...

webscan

webscan webscan es un escáner de IP de red basado en navegador y detector de IP local. Detecta IPs vinculadas al usuario/víctima escuchando en un canal de datos RTP a través de WebRTC y realizando un bucle de retorno al puerto a través de cualquier IP activa, así como descubriendo todas las...

EUVD-2026-94790

A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...