KTO

KTO - Kick Them Out https://github.com/user-attachments/assets/0ebf61af-c306-4825-b836-95df59052c27 Point it at an SSID and it disconnects the devices on that network, including ones that reconnect. You give it the network name; it finds the access point, finds the clients, and picks a...

evillimiter-windows

Evil Limiter for Windows A tool to limit the bandwidth upload/download of devices connected to your network without physical or administrative access. evillimiter employs ARP spoofing and traffic shaping to throttle the bandwidth of hosts on the network. This is explained in detail below. This to...

twiga

Twiga Una herramienta que enumera dispositivos Android para obtener información útil para comprender su funcionamiento interno y para el desarrollo de exploits. Soporta android 4.2 a android 7.1.1 Requisitos La versión más actual de ADB debe estar en tu PATH y completamente funcional El nombre de...

proxychains

README de ProxyChains ver. 4.3.0 ProxyChains es un programa UNIX que engancha las funciones de libc relacionadas con la red en programas enlazados dinámicamente mediante una DLL precargada y redirige las conexiones a través de proxies SOCKS4a/5 o HTTP. ADVERTENCIA: este programa solo funciona con...

CVE-2026-34926

⚠️ Aviso de Investigación de Seguridad y Responsabilidad Legal 📌 Propósito de este Repositorio Este repositorio se proporciona estrictamente para fines educativos, académicos y de investigación de ciberseguridad autorizada. Está destinado a apoyar la comprensión de: Vulnerabilidades de seguridad y...

CVE-2026-9082

⚠️ Investigación de Seguridad y Aviso Legal 📌 Propósito de Este Repositorio Este repositorio se proporciona estrictamente solo con fines educativos, académicos y de investigación autorizada en ciberseguridad. Está destinado a apoyar la comprensión de: Vulnerabilidades de seguridad y conceptos de...

CVE-2026-45091

CVE-2026-45091 ⚠️ Aviso Legal e Investigación de Seguridad 📌 Propósito de Este Repositorio Este repositorio se proporciona estrictamente solo con fines educativos, académicos y de investigación autorizada en ciberseguridad. Está destinado a apoyar la comprensión de: Vulnerabilidades de seguridad y...

CVE-2026-41901

CVE-2026-41901 ⚠️ Aviso Legal de Seguridad e Investigación 📌 Propósito de Este Repositorio Este repositorio se proporciona estrictamente con fines educativos, académicos y de investigación autorizada en ciberseguridad únicamente. Está destinado a apoyar la comprensión de: Conceptos de...

CVE-2026-3102

⚠️ Aviso de Investigación de Seguridad y Exención de Responsabilidad Legal 📌 Propósito de Este Repositorio Este repositorio se proporciona estrictamente solo con fines educativos, académicos e investigación de ciberseguridad autorizada. Está destinado a apoyar la comprensión de: Conceptos de...

CVE-2026-84086 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

The vulnerability of the upload_attachment function in the MPC-server for Atlassian’s Model Context Protocol (MCP) products allows a perpetrator to disclose protected information.

The vulnerability of the uploadattachment function in MPC-servers for Atlassian Model Context Protocol MCP products is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

EUVD-2026-81115

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-76409 Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Limitation of a Pathname

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-76409

Cisco Nexus Dashboard is affected by an improper limitation of a pathname vulnerability (CWE-22), discovered during an internal security review and addressed in a software hardening release published in September 2026. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) , with a vector of AV:N/AC:L/P...

libsafe-CVE-2005-1125

Libsafe solo funciona en arquitecturas de 32 bits 1. make build: Construye Libsafe, compila el exploit de prueba de concepto 'thread', y compila el código de interposición de bibliotecas 'interpose.so'. make random MAXDELAY=x: Aleatoriza los retardos interpuestos en 'interpose.so' con un retardo...

CVE-2026-44338

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...

Apache OFBiz Directory Traversal - Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...

ROS-20260910-73-0012

The vulnerability of the DarkMode component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the RDPDR IRP RDP-client FreeRDP module allows a hacker to gain access to read, write, and delete arbitrary files.

The vulnerability of the RDPDR IRP RDP-client FreeRDP module is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to read, write, and delete arbitrary files...