SOC_287

SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Overview This repository contains a detailed walkthrough of the CVE-2024-24919 vulnerability affecting Check Point Security Gateways. The vulnerability allows arbitrary file read, potentially exposing sensitive system file...

citrixInspector

citrixInspector citrixInspector.py formerly cve20233519inspector.py is a Python-based, passive vulnerability scanner for Citrix ADC / Citrix Gateway / NetScaler ADC / NetScaler Gateway appliances. It fingerprints the exact firmware build of a target without authentication, and reports every known...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282 Command: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET Reference:...

CVE-2026-50751

CVE-2026-50751 Check Point IKEv1 Scanner A multi-threaded vulnerability scanner for CVE-2026-50751 , a critical IKEv1 authentication bypass vulnerability affecting Check Point Quantum Security Gateways. Overview Check Point Remote Access VPN systems with IKEv1 enabled are vulnerable to...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

Eltex SMG bridging gateway Remote Administration Data Compromise

The vulnerability in the WEB interface of the remote administration web interface for the Eltex SMG microprogramming gateways is related to a breach in the data protection mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality and integrity of...

clawdguard

🦞 ClawdGuard Security hardening for Clawdbot/Moltbot installations. Detects and fixes exposed gateways. Detect and fix exposed Clawdbot/Moltbot gateways Problem • Features • Quick Start • Docker • CLI • What Gets Fixed • Development The Problem 900+ Clawdbot/Moltbot instances are currently expose...

CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 is an unauthenticated arbitrary file read vulnerability that can be treated nothing less than a full unauthenticated RCE. An attacker can read any sensitive files located on the affected appliance with superuser access. An attacker can...

CVE-2024-24919

Exploit for CVE-2024-24919 Description This Python script is an exploit for CVE-2024-24919, a CVE that hitted Check Point Products: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versions: R77.20 EOL, R77.30 EOL, R80.10 EOL, R80....

CTT-Sovereign-Vortex

CTT-Sovereign-Vortex CTT-Terrminus-Vortex CVE-2026-2406 🕰️ CTT-Sovereign-Vortex: Terrminus Refraction CVE-2026-2406 "The system is only as secure as the time it occupies." Lead Architect: Americo Simoes @amexsimoes Methodology: Convergent Time Theory CTT v2.0 Target: Terrminus Authentication...

check-point-gateways-rce

Check Point Security Gateways RCE by element.security Tested against R81.10 T335, R80.40 T294 Usage example: python3 checkpointgatewaysrce.py --mode dump https://192.168.0.100 Research blog post: Check Point Security Gateways RCE via CVE-2021-40438...

CVE-2023-35793-CSRF-On-Web-SSH

CVE-2023-35793-CSRF-On-Web-SSH Repository contains description for CVE-2023-35793 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-35793 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2303271039 Vulnerability: Cross Site Request Forgery...

OpenRemote core authorization issue vulnerability

Versions of OpenRemote prior to 1.31.0 contain an authorization issue vulnerability. This vulnerability arises because GatewayService only checks the gateway ID without verifying its associated domain, resulting in authorization bypass. Attackers with WRITE:ADMIN privileges can impersonate gatewa...

Zephyr Project Zephyr encryption issue vulnerability

Versions 1.7.0 through 4.5.0 of Zephyr contain an encryption-related vulnerability. This flaw arises because the DHCPv4 client treats transaction identifiers as predictable counters and reuses them during renewals and rebindings. It fails to validate server identity or source address, which may...

Linux Distros Unpatched Vulnerability : CVE-2026-109941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending...

GatewayBench: Unified Capability and Security Evaluation Platform for MCP Gateways

AI agents have increasingly interacted with external environments by invoking tools, with Model Context Protocol MCP emerging as a standard interface for connecting agents to heterogeneous tools and services. As organizations deploy agents at scale, MCP gateways have become a critical middleware...

SUSE CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

DEBIAN-CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...