Skip to content
OpenAdvisories

Vendor

Alfredredbird

1 known vulnerabilities.

Products

tookie-osint 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.7
    CVE-2026-42866

    Tookie: Arbitrary file write via path traversal in -u username / -U userfile output filename

    Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py's write_txt, write_csv, write_json, and (commented-but-shipping) scan_file helpers open their output as open(f"{user}.<ext>"), where user comes unsanitized from the -u …

    Alfredredbird tookie-osint