735 matches found
CVE-2026-50751
CVE-2026-50751 Escรกner IKEv1 de Check Point Un escรกner de vulnerabilidades multihilo para CVE-2026-50751 , una vulnerabilidad crรญtica de omisiรณn de autenticaciรณn IKEv1 que afecta a los Check Point Quantum Security Gateways. Resumen Los sistemas VPN de acceso remoto de Check Point con IKEv1...
CVE-2024-24919-Check-Point-Remote-Access-VPN
CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 is an unauthenticated arbitrary file read vulnerability that can be treated nothing less than a full unauthenticated RCE. An attacker can read any sensitive files located on the affected appliance with superuser access. An attacker can...
CVE-2025-22457
PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...
citrixInspector
CVE-2023-3519 Inspector The cve20233519inspector.py is a Python-based vulnerability scanner for detecting the CVE-2023-3519 vulnerability in Citrix Gateways. It performs a passive analysis and fingerprinting of target websites to assess their vulnerability based on a series of checks. Recent...
SOC_287
SOC287 - Lectura Arbitraria de Archivos en Checkpoint Security Gateway CVE-2024-24919 Resumen Este repositorio contiene un recorrido detallado de la vulnerabilidad CVE-2024-24919 que afecta a Check Point Security Gateways. La vulnerabilidad permite la lectura arbitraria de archivos, exponiendo...
CVE-2025-0282
CVE-2025-0282 Ivanti Connect Secure, Policy Secure y Puertas de enlace ZTA - CVE-2025-0282 Comando: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET Referencia:...
check-point-gateways-rce
Check Point Security Gateways RCE by element.security Tested against R81.10 T335, R80.40 T294 Usage example: python3 checkpointgatewaysrce.py --mode dump https://192.168.0.100 Research blog post: Check Point Security Gateways RCE via CVE-2021-40438...
CVE-2024-24919
Exploit para CVE-2024-24919 Descripciรณn Este script de Python es un exploit para CVE-2024-24919, un CVE que afectรณ a productos Check Point: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versiones: R77.20 EOL, R77.30 EOL, R80.10...
CVE-2023-35793-CSRF-On-Web-SSH
CVE-2023-35793-CSRF-On-Web-SSH Repository contains description for CVE-2023-35793 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-35793 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2303271039 Vulnerability: Cross Site Request Forgery...
clawdguard
๐ฆ ClawdGuard Security hardening for Clawdbot/Moltbot installations. Detects and fixes exposed gateways. Detect and fix exposed Clawdbot/Moltbot gateways Problem โข Features โข Quick Start โข Docker โข CLI โข What Gets Fixed โข Development The Problem 900+ Clawdbot/Moltbot instances are currently expose...
CTT-Sovereign-Vortex
CTT-Sovereign-Vortex CTT-Terrminus-Vortex CVE-2026-2406 ๐ฐ๏ธ CTT-Sovereign-Vortex: Refracciรณn Terrminus CVE-2026-2406 "El sistema solo es tan seguro como el tiempo que ocupa." Arquitecto Principal: Americo Simoes @amexsimoes Metodologรญa: Teorรญa del Tiempo Convergente CTT v2.0 Objetivo: Pasarelas de...
EUVD-2026-63545
A vulnerability exists in the Dynamic DNS DDNS functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and th...
EUVD-2026-63544
A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...
CVE-2026-19586 Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways
A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...
GHSA-9HGC-G3W5-67CM ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
Summary The /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...
CVE-2026-16038 MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways
The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on several of its payment-completion endpoints, allowing an unauthenticated attacker to mark an arbitrary order fully paid without paying and obtain goods or services...
Timing Attack
Overview Affected versions of this package are vulnerable to Timing Attack in the pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime functions. An attacker can obtain sensitive information about the outcome of RSA decryption operations by submitting crafted EnvelopedData and analyzing error...
CVE-2026-14317
The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, which allows unauthenticated users to complete donations through a payment gateway the administrator has disabled...
CVE-2026-14317
The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, which allows unauthenticated users to complete donations through a payment gateway the administrator has disabled...
CVE-2026-14317 GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass
The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, which allows unauthenticated users to complete donations through a payment gateway the administrator has disabled...