CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script 설명 CVE-2024-24919은 Check Point Security Gateway 장치에서 경로 탐색path traversal을 악용하여 민감한 파일에 무단 액세스를 허용하는 취약점입니다. 이 취약점을 통해 공격자는 대상 시스템 내 특정 파일의 내용을 인증 없이 읽을 수 있습니다. DORK FOFA: title="Check Point SSL Network Extender" 이 스크립트는 대상이 CVE-2024-24919에 취약한지 테스트하기 위한 명령줄CMD 기반...

CVE-2024-24919

CVE-2024-24919 Nmap-скрипт для проверки уязвимости CVE-2024-24919 Ссылки на уязвимость: https://www.cvedetails.com/cve/CVE-2024-24919/ https://support.checkpoint.com/results/sk/sk182336 Dorks Hunter Hunter: /product.name="Check Point SSL Network Extender" Shodan SHODAN: http.title:"Check Point SS...

CVE-2024-24919

CVE-2024-24919 저는 어떤 것에 대해서도 책임을 지지 않습니다 : 설치 git clone https://github.com/LucasKatashi/CVE-2024-24919 && cd CVE-2024-24919 python3 -m pip install -r requirements.txt && chmod +x CVE-2024-24919.py ./CVE-2024-24919 FOFA 쿼리 root@kitploit: title="Check Point SSL Network Extender"...

CVE-2024-24919

CVE-2024-24919 점검 도구 CVE-2024-24919 취약점을 점검하는 간단한 bash 스크립트입니다. 설치 저장소를 클론하세요: root@kitploit: git clone https://github.com/satriarizka/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919-scan.sh 사용법 ./CVE-2024-24919-scan.sh -l ips.txt HUNTER 검색어 root@kitploit: product.name="Check Point S...

CVE-2024-24919

CVE-2024-24919 Эксплойт для CVE-2024-24919. Shodan: "Server: Check Point SVN" "X-UA-Compatible: IE=EmulateIE7" FOFA: title="Check Point SSL Network Extender" Я не несу ответственности за любое неправомерное использование или ущерб, причинённый этим скриптом...

AMFDSer-ngng

AMFDSer-ngng Burp Extenderプラグインです。Xtreamライブラリを使用して、逆シリアル化されたAMFオブジェクトをXMLにエンコードします。Khai Tran氏のオリジナル作品に基づいています。敬意を表して https://blog.netspi.com/ AMFDSer-ngngはまた、カスタムAMF逆シリアル化のためにKenneth Hill氏のJmeterソースコードの一部を利用しています https://github.com/steeltomato/jmeter-amf。そしてXtreamライブラリ http://xstream.codehaus.org...

JDSer-ngng

JDSer-ngng Java 객체를 역직렬화하고 Xtream 라이브러리를 사용하여 XML로 인코딩하는 Burp Extender 플러그인입니다. 왜? 이 릴리스는 실제로 요청 수정을 허용하지 않았던 JDSer-ng의 다른 구현에 있던 버그를 수정합니다. 또한 역직렬화된 Java 객체에 대해 Intruder/Scanner 모듈을 제대로 사용할 수 있도록 확장합니다. SQLMap과 함께 사용하는 기능도 추가했습니다. "send deserialized to intruder"의 출력을 파일에 복사하여 붙여넣고, sqlmap.py -r...

WCFDSer-ngng

WCFDSer-ngng バイナリ SOAP オブジェクトを読み取り可能かつ変更可能にする Burp Extender プラグインです。Brian Holyfield のオリジナル成果に基づいています。Brian に敬礼。http://blog.gdssecurity.com/labs/2009/11/19/wcf-binary-soap-plug-in-for-burp.html なぜ？ このリリースでは、シリアライゼーションが正しく実行されないバグを修正しています。また、WCF と組み合わせてスキャナ/イントルーダを（正しく）使用する機能が追加されています。さらに、右クリック...

Security Bulletin: IBM Transformation Extender Advanced is affected by IBM WebSphere Application Server Liberty vulnerabilities

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine uses WebSphere Application Server Liberty which is affected by a denial of service, HTTP Response and Request Smuggling vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM Transformation Extender Advanced is affected by multiple Java vulnerabilities.

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is affected by multiple vulnerabilities because it is dependent on Java. Vulnerability Details CVEID:CVE-2026-34282 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with netwo...

Security Bulletin: IBM Transformation Extender Advanced is affected by a IBM WebSphere Application Server Liberty vulnerability

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is vulnerable to IBM WebSphere Application Server Liberty's HTTP request smuggling vulnerability CVE-2026-11541 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

Security Bulletin: IBM Transformation Extender Advanced is affected by IBM WebSphere Application Server Liberty vulnerabilities

Summary IBM WebSphere Application Server Liberty is used by IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine. Liberty has been updated to address CVE-2026-3621 which causes identity spoofing and CVE-2026-5516 which causes bypass security vulnerabilities...

CVE-2026-40769

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi Save Entries, File Upload & Country Code Field = 1.0.6 versions...

CVE-2026-40769

The CVE-2026-40769 entry concerns the WordPress plugin “Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field” (versions

CVE-2026-40769 WordPress Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field plugin <= 1.0.6 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi Save Entries, File Upload & Country Code Field = 1.0.6 versions...

PT-2026-49413

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi Save Entries, File Upload & Country Code Field = 1.0.6 versions...

Edimax EW-7438RPn 安全漏洞

The Edimax EW-7438RPn is a wireless signal extender from Taiwan, China-based Xunzhou Edimax Corporation. A security vulnerability exists in the Edimax EW-7438RPn version 1.31, which originates from the parameter submit-url operation of the function formLicence in the file /goform/formLicence, and...

Edimax EW-7438RPn 安全漏洞

Edimax EW-7438RPn is a wireless signal extender from Taiwan, China-based Xunzhou Edimax. A security vulnerability exists in the Edimax EW-7438RPn version 1.31, which originates from the operation of the function formrefresh on the parameter submit-url in the file /goform/formrefresh, and could le...

Edimax EW-7438RPn 安全漏洞

Edimax EW-7438RPn is a wireless signal extender from Taiwan, China-based Edimax. A security vulnerability exists in the Edimax EW-7438RPn version 1.31, which originates from the parameter submit-url operation of the function formWpsProxyEnable in the file /goform/formWpsProxyEnable, and may resul...

Edimax EW-7438RPn 安全漏洞

The Edimax EW-7438RPn is a wireless signal extender produced by Edimax of Taiwan, China. Versions of Edimax EW-7438RPn prior to 1.31 contained a security vulnerability. This vulnerability stemmed from unknown functions in the webs component files and/goform/formWpsStart, which operated on...