CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282 Command: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET Reference:...

CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 is an unauthenticated arbitrary file read vulnerability that can be treated nothing less than a full unauthenticated RCE. An attacker can read any sensitive files located on the affected appliance with superuser access. An attacker can...

SOC_287

SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Overview This repository contains a detailed walkthrough of the CVE-2024-24919 vulnerability affecting Check Point Security Gateways. The vulnerability allows arbitrary file read, potentially exposing sensitive system file...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

clawdguard

🦞 ClawdGuard Security hardening for Clawdbot/Moltbot installations. Detects and fixes exposed gateways. Detect and fix exposed Clawdbot/Moltbot gateways Problem • Features • Quick Start • Docker • CLI • What Gets Fixed • Development The Problem 900+ Clawdbot/Moltbot instances are currently expose...

check-point-gateways-rce

Check Point Security Gateways RCE by element.security Tested against R81.10 T335, R80.40 T294 Usage example: python3 checkpointgatewaysrce.py --mode dump https://192.168.0.100 Research blog post: Check Point Security Gateways RCE via CVE-2021-40438...

CTT-Sovereign-Vortex

CTT-Sovereign-Vortex CTT-Terrminus-Vortex CVE-2026-2406 🕰️ CTT-Sovereign-Vortex: Terrminus Refraction CVE-2026-2406 "The system is only as secure as the time it occupies." Lead Architect: Americo Simoes @amexsimoes Methodology: Convergent Time Theory CTT v2.0 Target: Terrminus Authentication...

CVE-2024-24919

Exploit for CVE-2024-24919 Description This Python script is an exploit for CVE-2024-24919, a CVE that hitted Check Point Products: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versions: R77.20 EOL, R77.30 EOL, R80.10 EOL, R80....

CVE-2026-50751

CVE-2026-50751 Check Point IKEv1 Scanner A multi-threaded vulnerability scanner for CVE-2026-50751 , a critical IKEv1 authentication bypass vulnerability affecting Check Point Quantum Security Gateways. Overview Check Point Remote Access VPN systems with IKEv1 enabled are vulnerable to...

citrixInspector

citrixInspector citrixInspector.py formerly cve20233519inspector.py is a Python-based, passive vulnerability scanner for Citrix ADC / Citrix Gateway / NetScaler ADC / NetScaler Gateway appliances. It fingerprints the exact firmware build of a target without authentication, and reports every known...

CVE-2023-35793-CSRF-On-Web-SSH

CVE-2023-35793-CSRF-On-Web-SSH Repository contains description for CVE-2023-35793 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-35793 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2303271039 Vulnerability: Cross Site Request Forgery...

DEBIAN-CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

EUVD-2026-98706

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941: Loop with Unreachable Exit Condition

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

PT-2026-111536

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.3.0 through 3.31.0 Description An infinite loop exists in the http chuncked read function. A malicious RD Gateway can cause clients to hang by sending incomplete chunked responses, such as a partial chunk-size line or footer...

PT-2026-106737

🚨 Hacktober Alert: Critical Citrix NetScaler pre-auth memory corruption flaw CVE-2024-88779 lets remote attackers crash enterprise ADC gateways. Read Blog: https://t.co/IPA85M7mwu sh3llc0d3 shellcode Hacktober NetScaler Vulnerabilities...

CVE-2026-86326

An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provi...