CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN

CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN Инструмент эксплуатации для эксплуатации уязвимости CVE-2024-24919 в VPN Checkpoint Firewall Установка: root@kitploit: git clone https://github.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN Требования: root@kitploit: pip install -...

WindowsFirewallHookDriverEnumeration

विंडोज़ फ़ायरवॉल हुक ड्राइवर एन्यूमरेशन Windows 2000, XP और 2003 पर Windows Firewall Hook ड्राइवरों को सूचीबद्ध करने के उपकरण। हमने एक दुर्भावनापूर्ण कोड नमूना देखा है जो इस तकनीक का उपयोग करता है। हुकिंग तकनीक XP/2003 तकनीक में Windows Firewall Hook कार्यक्षमता 12345 \Device\Ip को भेजे गए...

FencePost

FencePost मल्टी-होस्ट UFW फ़ायरवॉल डैशबोर्ड। Linux होस्ट से SSH के माध्यम से जुड़ता है, फ़ायरवॉल नियमों और सुनने वाले पोर्ट को पार्स करता है, सब कुछ सरल भाषा में समझाता है, और सुरक्षा अंतराल को चिह्नित करता है। विशेषताएँ मल्टी-होस्ट अवलोकन -- एक नज़र में सभी होस्ट पर UFW स्थिति, डिफ़ॉल्ट नीतियाँ...

UniversalDVC

Conector Universal de Canal Virtual Dinâmico para Serviços de Área de Trabalho Remota UDVC Os Serviços de Terminal ou Serviços de Área de Trabalho Remota oferecem muitos recursos ocultos para quem deseja se aprofundar. Um desses serviços é o Canal Virtual Dinâmico, que permite comunicar através d...

gibson

Gibson नेटवर्क मॉनिटरिंग टूल जो प्रोसेस-से-नेटवर्क कनेक्शन का मानचित्रण करता है, क्लाउड प्रदाताओं की पहचान करता है, और फ़ायरवॉल नियम उत्पन्न करता है। संग्रह के लिए हल्का एजेंट, एकत्रीकरण के लिए सर्वर, विश्लेषण के लिए पार्सर। स्क्रीनशॉट क्रॉस-मशीन अवलोकन — OS संस्करण तुलना, साझा IP पहचान, सभी...

kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nftinner module. This vulnerability arises from an incorrect handling of IPv6 inner packet processing, where the transport header offset innerthoff becomes desynchronized from the Layer 4 protocol l4proto. A remot...

kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nftinner module. This vulnerability arises from an incorrect handling of IPv6 inner packet processing, where the transport header offset innerthoff becomes desynchronized from the Layer 4 protocol l4proto. A remot...

kernel: netfilter: nft_inner: Fix IPv6 inner_thoff desync

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nftinner module. This vulnerability arises from an incorrect handling of IPv6 inner packet processing, where the transport header offset innerthoff becomes desynchronized from the Layer 4 protocol l4proto. A remot...

CVE-2026-19982

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...

CVE-2026-19982

CVE-2026-19982 affects GL.iNet BE9300 and MT6000 devices running 4.8.x, in the firewall-management RPC component. The issue arises from input manipulation of dest_port/dest_ip, leading to an OS command injection. A remote attacker could trigger this without user interaction. Upgrading to version ...

CVE-2026-19982 GL.iNet BE9300/MT6000 Firewall-management RPC os command injection

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...

EUVD-2026-60042

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...

CVE-2026-19982

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)

Last week, there were 294 vulnerabilities disclosed in 233 WordPress Plugins and 14 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 149 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

Sophos Firewall <= 19.0 MR1 - Remote Code Execution

Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...

CVE-2026-73669

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in...

EUVD-2026-58240

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

CVE-2026-48931

A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure. Mitigation Limit outbound HTTP/1.1 from Node.js clients to...

PT-2026-71799

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

CVE-2026-7366

IBM DataPower Gateway is affected by a race condition in the XML-Firewall’s handling of the built-in X‑Client‑IP header, causing improper isolation of request state across concurrent requests. This can enable IP spoofing and disclosure of other clients’ IP addresses. Affected versions include 11....