CTT-Sovereign-Vortex

CTT-Sovereign-Vortex CTT-Terrminus-Vortex CVE-2026-2406 🕰️ CTT-Sovereign-Vortex: Terrminus 折射（CVE-2026-2406） "系统的安全性，取决于它所占据的时间。" 首席架构师： Americo Simoes @amexsimoes 方法论： 收敛时间理论（CTT）v2.0 目标： Terrminus 认证网关（Builds "我们不破坏锁。我们振动门，直到锁不再存在。" 📜 使用方法 python cttterrminusvortex.py --target --alpha 0.0302011...

CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-远程访问VPN CVE-2024-24919 是一个未经验证的任意文件读取漏洞，其严重程度不亚于完全未经验证的远程代码执行（RCE）。攻击者可以以 超级用户 权限读取受影响设备上的任何敏感文件。攻击者可以获取 ntds.dit 或 /etc/password 文件的内容，并利用它们登录系统；如果安全网关仅允许密码认证，攻击者还可以使用破解后的密码进行身份验证。 受影响的产品和版本 ：CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Securi...

citrixInspector

citrixInspector citrixInspector.py（原名 cve20233519inspector.py）是一个基于 Python 的被动漏洞扫描器，适用于 Citrix ADC / Citrix Gateway / NetScaler ADC / NetScaler Gateway 设备。它可以在无需认证的情况下对目标设备的固件版本进行精确指纹识别，并报告该版本所存在的所有已知 CVE 漏洞。 ⚠️ Beta 版： 针对较新的 2025/2026 年 CVE（CitrixBleed...

clawdguard

🦞 ClawdGuard 针对 Clawdbot/Moltbot 安装实例的安全加固工具，可检测并修复暴露的网关。 检测并修复暴露的 Clawdbot/Moltbot 网关 问题 • 功能 • 快速开始 • Docker • 命令行 • 修复内容 • 开发 问题现状 目前有 900 多个 Clawdbot/Moltbot 实例暴露在互联网上 （可在 Shodan 上看到，端口 18789），且没有任何身份验证。这使得任何人都可以： 风险| 影响 ---|--- 获取 API 密钥| 窃取 OpenAI、Anthropic 等凭据 执行命令| 在您的机器上运行任意 shell 命令...

SOC_287

SOC287 - Checkpoint Security Gateway 上的任意文件读取漏洞 CVE-2024-24919 概述 本仓库包含针对影响 Check Point Security Gateways 的 CVE-2024-24919 漏洞的详细演练。该漏洞允许任意文件读取，可能暴露敏感的系统文件，如 /etc/passwd。本文深入分析了攻击场景、检测方法和缓解策略。 实验室演练 有关此 Let's Defend SOC 实验室的详细演练，请参阅： SOC287 实验室演练 概述 CVE ID：CVE-2024-24919 漏洞类型：任意文件读取 受影响系统：Check...

CVE-2026-50751

CVE-2026-50751 Check Point IKEv1 扫描器 一个针对 CVE-2026-50751 的多线程漏洞扫描器，这是一个影响 Check Point Quantum 安全网关的严重 IKEv1 认证绕过漏洞。 概述 启用 IKEv1 的 Check Point 远程访问 VPN 系统容易受到认证绕过攻击。此工具用于检测目标系统是否启用了 IKEv1。 CVE-2026-50751 详情： CVSS 评分 ：9.8（严重） 漏洞类型 ：Check Point 网关中的 IKEv1 认证绕过 攻击向量 ：网络 所需认证 ：无 功能特性 ✅ 并行扫描多个目标 ✅ 支持单个...

CVE-2025-22457

CVE-2025-22457 的 PoC 一个影响 Ivanti Connect Secure、Pulse Connect Secure、Ivanti Policy Secure 和 ZTA Gateways 的远程未经身份验证的基于栈的缓冲区溢出漏洞 概述 这是一个概念验证（PoC）漏洞利用程序，用于演示 CVE-2025-22457 的利用过程。有关该漏洞及利用策略的完整技术分析，请参阅我们的 Rapid7 分析： https://attackerkb.com/topics/0ybGQIkHzR/cve-2025-22457/rapid7-analysis 使用方法...

check-point-gateways-rce

Check Point 安全网关 RCE 工具 - element.security 已在 R81.10 T335, R80.40 T294 上测试 使用示例： python3 checkpointgatewaysrce.py --mode dump https://192.168.0.100 研究博客文章： 通过 CVE-2021-40438 实现的 Check Point 安全网关 RCE...

CVE-2024-24919

Exploit para CVE-2024-24919 Descripción Este script de Python es un exploit para CVE-2024-24919, un CVE que afectó a productos Check Point: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versiones: R77.20 EOL, R77.30 EOL, R80.10...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure, Policy Secure y Puertas de enlace ZTA - CVE-2025-0282 Comando: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET Referencia:...

CVE-2023-35793-CSRF-On-Web-SSH

CVE-2023-35793-CSRF-On-Web-SSH El repositorio contiene la descripción de CVE-2023-35793 descubierta por el equipo industrial de Dodge para la plataforma Dodge OPTIFY. ID de CVE: CVE-2023-35793 Vendedor: Cassia Networks Producto: Access Controller Versión: Cassia-AC-2.1.1.2303271039 Vulnerabilidad...

HPESBNW05137 rev.1 - Multiple Vulnerabilities in HPE Networking Analytics and Location Engine (ALE)

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. ArubaOS Wi-Fi Controllers and Gateways ALE 5.0.0.0 and below CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-76708 |...

CVE-2026-76700

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

CVE-2026-76695

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the...

CVE-2026-76690

A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could...

CVE-2026-76674

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying...

CVE-2026-76676

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attack...

CVE-2026-76707 Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

CVE-2026-76703 Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service

A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administrative access to cause a denial of service. Successful exploitation could allow an attacker to disrupt system...

CVE-2026-76702

HPE Networking EdgeConnect SD-WAN Gateways contain a denial-of-service vulnerability in the operating system. An authenticated local attacker with low privileges can disrupt system operations, potentially leaving the device in an unstable state. The attack requires local access and has high compl...