wardgate

Wardgate - AI代理安全网关 Wardgate 是一个安全网关，位于AI代理与外部世界之间——隔离API调用的凭据，隔离远程命令执行的SSH密钥，并对远程环境（conclaves）中的命令执行进行门控。 让你的AI代理能够访问API、SSH密钥和Shell工具——无需提供凭据，也无需信任它们直接执行。 问题所在 AI代理很强大。它们可以管理你的日历、查看邮件、更新任务、编写代码并自动化你的生活。但要做到这些，它们需要访问你的账户和系统。 它们就像一个天才少年：知道很多，但有自己想法。容易轻信（提示注入）。而且像青少年一样，它们不会真正思考。所以考虑后果绝对超出了它们的能力范围！...

Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection

Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...

CVE-2026-50751

🚨 CVE-2026-50751 - Check Point VPN 中的认证绕过漏洞 IKEv1 📖 概述 CVE-2026-50751 是一个严重的认证绕过漏洞，影响配置了传统 IKEv1 远程访问 VPN 协议的 Check Point Quantum 安全网关 部署。 该漏洞允许未经身份验证的攻击者在没有有效用户密码的情况下建立 VPN 会话，可能获得对内部网络资源的未授权访问。 🎯 影响 攻击者可以： 绕过 VPN 认证 获得未授权的远程访问 建立有效的 VPN 会话 访问内部服务和资源 在网络内进行横向移动 为后续勒索软件或入侵活动提供便利 🔍 漏洞详情 字段| 值...

CVE-2024-24919-POC

PoC de CVE-2024-24919 🚀 🔥 Descripción Este script automatiza la explotación de CVE-2024-24919 Divulgación no autorizada de información de Checkpoint Security Gateway. 📌 Características ✅ Prueba de URLs individuales y en masa ✅ Explotación automatizada ✅ Simple y rápido 🛠️ Uso Clona este repositori...

CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script 描述 CVE-2024-24919 是 Check Point Security Gateway 设备中的一个漏洞，允许攻击者通过路径遍历漏洞未经授权访问敏感文件。此漏洞使攻击者无需身份验证即可读取目标系统中的特定文件内容。 DORK FOFA: title="Check Point SSL Network Extender" 该脚本是一个基于命令行的漏洞利用实现，用于测试目标是否受 CVE-2024-24919 影响。 功能 对受影响的目标进行漏洞利用 从目标获取敏感文件 使用自定义头部的请求 要求...

Check-Point_poc

Check-Pointpoc Check-Point安全网关任意文件读取漏洞CVE-2024-24919 python Check-Pointpoc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage: Check-Pointpoc.py -h -u URL...

Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

此存储库没有 README。...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 Permitiendo potencialmente a un atacante leer cierta información en Check Point Security Gateways una vez conectados a internet y con remote Access VPN o Mobile Access Software Blades habilitadas. Hay disponible un parche de seguridad que mitiga esta vulnerabilidad. PRIMERO: NO SOY...

CVE-2024-24919

CVE-2024-24919 Herramienta de explotación para validar la vulnerabilidad CVE-2024-24919 en firewalls VPN de Checkpoint Esta herramienta crea una carpeta de salida que contiene un archivo "Target-IP.txt". Este archivo incluye el contenido del archivo /etc/passwd del objetivo afectado, determinando...

VulnCheck KEV: CVE-2026-85102

Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

Check Point Multiple Products Improper Certificate Validation Vulnerability

Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

Check Point Quantum Gateway - Information Disclosure

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. id: CVE-2024-24919 info: name: Check Poi...

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only "under specific conditions" that it has not described. One flaw affects Check...

CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

CVE-2026-85102

Check Point Security Gateway and Spark Firewall are vulnerable to a critical issue (CVSS 9.8 ) caused by improper certificate trust validation during VPN negotiation . An unauthenticated remote attacker can bypass authentication checks to execute arbitrary code on the Gateway. The flaw affects Si...

CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

CVE-2026-85102: Improper Certificate Validation

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

PT-2026-88979

Dutch NCSC Warns of Imminent Exploitation Targeting Check Point VPN Flaws Dutch cybersecurity authorities warn of imminent attacks against Check Point VPN flaws CVE-2026-85102 and… Full write-up → link in bio cybersecurity infosec VulnerabilityDisclosure check https://t.co/PIErD4ol3O...

CVE-2026-85103: Heap-based Buffer Overflow

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...

CVE-2026-85103 - ASN.1 decoding heap overflow leading to a remote code execution

Symptoms - Issue: A heap overflow in the VPN certificate ASN.1 decoding flow may allow an attacker to remotely execute arbitrary code on the Security Management Server and Security Gateway. Clarification: All Security Management Server deployments are vulnerable, regardless of configuration, and...