Lucene search
+L

1579 matches found

Kitploit
Kitploit
•added 2026/10/22 6:06 a.m.•22 views

Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation

Incident Analysis: Check Point Security Gateway CVE-2024-24919 Exploitation Attempt 📌 Executive Summary On June 6, 2024, at 03:12 PM, security monitoring systems triggered an alert for a high-severity exploit attempt targeting a Check Point Security Gateway CP-Spark-Gateway-01, IP: 172.16.20.146...

8.6CVSS8.3AI score0.99978EPSS
SaveExploits54
Nuclei
Nuclei
•added 2026/10/22 2:06 a.m.•64 views

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

9.3CVSS8.5AI score0.85338EPSS
SaveExploits7References3
Kitploit
Kitploit
•added 2026/10/21 9:19 p.m.•32 views

Project-CVE-2026-50751

CVE-2026-50751 IKEv1 Security Testing Description This Python script is an offensive security-testing framework designed to target CVE-2026-50751, a Check Point IKEv1 VPN authentication-bypass vulnerability. Features Scans IP addresses for IKEv1 VPN services on UDP port 500 Attempts to identify...

9.3CVSS8.3AI score0.85338EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/10/19 9:51 p.m.•22 views

CVE-2024-24919

CVE-2024-24919 Exploit tool to validate CVE-2024-24919 vulnerability on Checkpoint Firewall VPNs This tool creates an output folder containing a "Target-IP.txt" file. This file includes the contents of the /etc/passwd file from the affected target, thereby determining if the system is vulnerable ...

8.6CVSS8.2AI score0.99978EPSS
SaveExploits54
Information Security Automation
Information Security Automation
•added 2026/10/12 5:00 p.m.•4 views

About Remote Code Execution - Check Point Quantum Security Gateway (CVE-2026-85102) vulnerability

About Remote Code Execution - Check Point Quantum Security Gateway CVE-2026-85102 vulnerability. Check Point Quantum Security Gateway is an enterprise security gateway and next-generation firewall NGFW designed to protect network infrastructure from cyberattacks and unauthorized access. It provid...

9.8CVSS9.2AI score0.5423EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2026/10/07 7:51 a.m.•36 views

Exploit for Improper Certificate Validation in Checkpoint Gaia_Embedded

CVE-2026-85102 — Check Point Unauthenticated VPN Tunnel Establ...

9.8CVSS8.7AI score0.5423EPSS
SaveExploits2
KittySploit
KittySploit
•added 2026/10/05 2:20 p.m.•5 views

Check Point Management Path Traversal RCE (CVE-2026-93616)

Exploits CVE-2026-93616 on Check Point Quantum Security Management: pre-authentication path traversal on TCP/19009 allows writing attacker-controlled content to reachable paths, enabling remote code execution on the SMS/Gaia host. !/usr/bin/env python3 -- coding: utf-8 -- """Check Point Quantum...

9.8CVSS9AI score0.75872EPSS
SaveExploits5References3
GithubExploit
GithubExploit
•added 2026/10/01 2:32 p.m.•41 views

Exploit for Path Traversal in Checkpoint Multi-Domain_Security_Management

Check Point Security Management Unauthenticated RCE — Vulnerab...

9.8CVSS8.8AI score0.75872EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•28 views

Check Point Gaia Operating System (sk1000171)

The remote host is missing a hotfix for the Gaia Operating System. It is, therefore, affected by a vulnerability as referenced in the sk1000171 advisory. - A path traversal and arbitrary file upload vulnerability in Check Point Security Management Server, Multi-Domain Security Management Server,...

9.8CVSS8.8AI score0.75872EPSS
SaveExploits5References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•19 views

Check Point Gaia Operating System (sk1000117)

The remote host is missing a hotfix for the Gaia Operating System. It is, therefore, affected by a vulnerability as referenced in the sk1000117 advisory. - An improper certificate validation vulnerability in Check Point Security Gateway and Check Point Spark Firewall when configured for Site to...

9.8CVSS9.3AI score0.5423EPSS
SaveExploits2References3
KittySploit
KittySploit
•added 2026/09/29 10:07 a.m.•6 views

Check Point CVE-2026-93616 Management Detect

Detects exposure to CVE-2026-93616 on Check Point Quantum Security Management SmartConsole/SMS before R82.20 / JHF takes listed in sk1000171. Fingerprints the management web service on TCP/19009 and reachable HTTPS management panels without sending exploit upload payloads. !/usr/bin/env python3 -...

9.8CVSS8.6AI score0.75872EPSS
SaveExploits5References4
KittySploit
KittySploit
•added 2026/09/29 10:07 a.m.•6 views

Check Point CVE-2026-85102 VPN Detect

Detects Check Point Security Gateway / Spark firewall exposure to CVE-2026-85102: improper certificate validation during Site-to-Site or Remote Access VPN negotiation sk1000117. Fingerprints SSL VPN / Mobile Access login surfaces and flags builds before fixed JHF takes. !/usr/bin/env python3 --...

9.8CVSS8.8AI score0.5423EPSS
SaveExploits2References3
NCSC
NCSC
•added 2026/09/23 8:28 a.m.•70 views

Vulnerabilities found in Check Point VPN products

Check Point has addressed 2 critical vulnerabilities. The vulnerability with the identifier CVE-2026-85102 has a CVSS score of 9.8. This vulnerability resides in the VPN negotiation process of the Quantum Security Gateway and is caused by incorrect validation of certificate trust. As a result, an...

9.8CVSS9.6AI score0.5423EPSS
SaveExploits2References3
NCSC
NCSC
•added 2026/09/23 7:06 a.m.•18 views

Lack of vulnerability management in Check Point Security Management and Log Servers

Check Point has identified a vulnerability in Security Management and Log Servers. This vulnerability involves a pre-authentication directory-traversal vulnerability within the Check Point Management Web Service, which allows unauthorized attackers to execute scripts from any source. This...

9.8CVSS8.9AI score0.75872EPSS
SaveExploits5References2
BDU FSTEC
BDU FSTEC
•added 2026/09/23 12:00 a.m.•21 views

Check Point Security Management Server Path Traversal

The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in incorrect path name restrictions for accessing the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.7AI score0.75872EPSS
SaveExploits5References5
The Hacker News
The Hacker News
•added 2026/09/22 6:29 p.m.•18 views

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23, the company said. The flaw,CVE-2026-93616 , allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point releas...

9.8CVSS8.1AI score0.75872EPSS
SaveExploits5
NVD
NVD
•added 2026/09/22 1:17 p.m.•53 views

CVE-2026-93616

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

9.8CVSS0.75872EPSS
SaveExploits5References3
EUVD
EUVD
•added 2026/09/22 12:59 p.m.•24 views

EUVD-2026-84375

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

9.8CVSS8.9AI score0.75872EPSS
SaveExploits5References1
Vulnrichment
Vulnrichment
•added 2026/09/22 12:59 p.m.•30 views

CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

9.8CVSS8.9AI score0.75872EPSS
SaveExploits5References1
Cvelist
Cvelist
•added 2026/09/22 12:59 p.m.•98 views

CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

9.8CVSS0.75872EPSS
SaveExploits5References1
Rows per page
Query Builder