152 matches found
CVE-2024-24919
كشف معلومات بوابات أمان Check Point - CVE-2024-24919 قد يسمح للمهاجم بقراءة معلومات معينة على بوابات أمان Check Point عند اتصالها بالإنترنت وتمكين شفرات Remote Access VPN أو Mobile Access Software. يتوفر إصلاح أمني يخفف من هذه الثغرة. اقرأ عنه — CVE-2024-24919 إخلاء مسؤولية : هذا الدليل الإثباتي...
CVE-2024-24919-CHECKPOINT
CVE-2024-24919 ربما يسمح لمهاجم بقراءة معلومات معينة على بوابات الأمان من Check Point عند الاتصال بالإنترنت وتفعيل شفرات Remote Access VPN أو Mobile Access Software. يتوفر إصلاح أمني يخفف من هذه الثغرة. أولاً: لست مسؤولاً عما تفعله به. ثانيًا: apt-get install parallel curl -y chmod +x...
Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-
تحليل تنبيه SOC: قراءة ملف عشوائي على بوابة Check Point الأمنية CVE-2024-24919 مقدمة CVE-2024-24919 هي ثغرة يوم-الصفر حرجة في بوابات Check Point الأمنية تسمح للمهاجمين عن بُعد دون مصادقة بقراءة ملفات عشوائية من الأنظمة المتأثرة. تم اكتشافها في مايو 2024 وتستغل بنشاط في البرية، وتستهدف الثغرة...
watchTowr-vs-Check-Point-CVE-2026-50751
CVE-2026-50751 مولّد أدلة اكتشاف Detection Artefact Generator لتجاوز التحقق من الشهادة في بروتوكول IKEv1 لخدمة Check Point للوصول عن بُعد Remote Access VPN. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e انظر مقالة مدونتنا للتفاصيل التقنية. الاكتشاف في العمل $...
Cisco ASA Improper Input Validation (CVE-2022-20745)
A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to...
Cisco ASA Missing Release of Resource after Effective Lifetime (CVE-2024-20481)
A vulnerability in the Remote Access VPN RAVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of the RAVPN service. This vulnerability is due to resource...
Cisco ASA Missing Authorization (CVE-2024-20355)
A vulnerability in the implementation of SAML 2.0 single sign-on SSO for remote access VPN services in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to successfully establish a VPN session on an affecte...
Cisco ASA URL Redirection to Untrusted Site (CVE-2023-20264)
A vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 single sign-on SSO for remote access VPN in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to intercept the SAML...
CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit
CVE-2026-50751 - استغلال تجاوز المصادقة لـ Check Point IKEv1 ⚠️ تحذير مهم هذا الكود مخصص للأغراض التعليمية واختبارات الأمان المصرح بها فقط. الاستخدام غير المصرح به ضد أنظمة دون إذن صريح هو غير قانوني. المؤلف غير مسؤول عن إساءة استخدام هذه الأداة. 📋 وصف CVE-2026-50751 هي ثغرة خطيرة لتجاوز المصادقة...
CVE-2026-50751
🚨 CVE-2026-50751 - تجاوز المصادقة في Check Point VPN IKEv1 📖 نظرة عامة CVE-2026-50751 هي ثغرة أمنية حرجة لتجاوز المصادقة تؤثر على عمليات نشر Check Point Quantum Security Gateway التي تم تكوينها باستخدام بروتوكول IKEv1 للوصول عن بُعد عبر VPN القديم. تسمح الثغرة لمهاجم غير موثوق بإنشاء جلسة VPN دون...
Cisco ASA Missing Release of Resource after Effective Lifetime (CVE-2023-20095)
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to imprope...
Check Point Gaia Operating System (sk1000117)
The remote host is missing a hotfix for the Gaia Operating System. It is, therefore, affected by a vulnerability as referenced in the sk1000117 advisory. - An improper certificate validation vulnerability in Check Point Security Gateway and Check Point Spark Firewall when configured for Site to...
Check Point Multiple Products Improper Certificate Validation Vulnerability
Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...
CVE-2024-24919-Check-Point-Remote-Access-VPN
CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 è una vulnerabilità di lettura arbitraria di file non autenticata che può essere considerata niente di meno che una RCE completa non autenticata. Un attaccante può leggere qualsiasi file sensibile situato sull'appliance interessata con...
Cisco ASA/FTD Authentication Bypass Using an Alternate Path or Channel (CVE-2023-20269)
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...
EUVD-2026-42708
An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...
CVE-2026-57021
An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...
PT-2026-56975
Name of the Vulnerable Software and Affected Versions Junos OS on SRX Series versions prior to 23.2R2-S7 Junos OS on SRX Series versions prior to 23.4R2-S8 Junos OS on SRX Series versions prior to 24.2R2-S4 Junos OS on SRX Series versions prior to 24.4R2-S4 Junos OS on SRX Series versions prior t...
CVE-2026-57021: Out-of-bounds Write
An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...
