check-point-gateways-rce

Check Point 安全网关 RCE 工具 - element.security 已在 R81.10 T335, R80.40 T294 上测试 使用示例： python3 checkpointgatewaysrce.py --mode dump https://192.168.0.100 研究博客文章： 通过 CVE-2021-40438 实现的 Check Point 安全网关 RCE...

CVE-2026-50751

CVE-2026-50751 Escáner IKEv1 de Check Point Un escáner de vulnerabilidades multihilo para CVE-2026-50751 , una vulnerabilidad crítica de omisión de autenticación IKEv1 que afecta a los Check Point Quantum Security Gateways. Resumen Los sistemas VPN de acceso remoto de Check Point con IKEv1...

SOC_287

SOC287 - Checkpoint Security Gateway 上的任意文件读取漏洞 CVE-2024-24919 概述 本仓库包含针对影响 Check Point Security Gateways 的 CVE-2024-24919 漏洞的详细演练。该漏洞允许任意文件读取，可能暴露敏感的系统文件，如 /etc/passwd。本文深入分析了攻击场景、检测方法和缓解策略。 实验室演练 有关此 Let's Defend SOC 实验室的详细演练，请参阅： SOC287 实验室演练 概述 CVE ID：CVE-2024-24919 漏洞类型：任意文件读取 受影响系统：Check...

CVE-2024-24919

Exploit para CVE-2024-24919 Descripción Este script de Python es un exploit para CVE-2024-24919, un CVE que afectó a productos Check Point: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versiones: R77.20 EOL, R77.30 EOL, R80.10...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure、Policy Secure 和 ZTA 网关 - CVE-2025-0282 命令： python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET 参考： https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283?language=en...

CVE-2023-35793-CSRF-On-Web-SSH

CVE-2023-35793-Web-SSH上的CSRF 此仓库包含Dodge工业团队在Dodge OPTIFY平台中发现的CVE-2023-35793的描述。 CVE ID: CVE-2023-35793 厂商: Cassia Networks 产品: Access Controller 版本: Cassia-AC-2.1.1.2303271039 漏洞: 跨站请求伪造 CSRF 影响: Web SSH, 网关 描述: WebSSH功能可通过CSRF初始化。 状态: 厂商确认，已修复 修复版本: Cassia-AC-2.1.1.2308181707 详情...

clawdguard

🦞 ClawdGuard Endurecimiento de seguridad para instalaciones de Clawdbot/Moltbot. Detecta y corrige pasarelas expuestas. Detecta y corrige pasarelas expuestas de Clawdbot/Moltbot • • • • • •...

CTT-Sovereign-Vortex

CTT-Sovereign-Vortex CTT-Terrminus-Vortex CVE-2026-2406 🕰️ CTT-Sovereign-Vortex: Refracción Terrminus CVE-2026-2406 "El sistema solo es tan seguro como el tiempo que ocupa." Arquitecto Principal: Americo Simoes @amexsimoes Metodología: Teoría del Tiempo Convergente CTT v2.0 Objetivo: Pasarelas de...

CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 es una vulnerabilidad de lectura arbitraria de archivos sin autenticación que puede tratarse nada menos que como un RCE completo sin autenticación. Un atacante puede leer cualquier archivo sensible ubicado en el dispositivo afectado con...

CVE-2025-22457

PoC para CVE-2025-22457 Un desbordamiento de búfer basado en pila remoto sin autenticación que afecta a Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure y ZTA Gateways Resumen Este es un exploit de prueba de concepto para demostrar la explotación de CVE-2025-22457. Para un anális...

citrixInspector

CVE-2023-3519 检查器 cve20233519inspector.py 是一款基于 Python 的漏洞扫描器，用于检测 Citrix Gateway 中的 CVE-2023-3519 漏洞。它通过对目标网站进行被动分析和指纹识别，基于一系列检查来评估其漏洞状态。 近期更新 新增功能：解析 /vpn/pluginlist.xml 文件，更准确地判断系统是否已修补或存在漏洞。 新增功能：可选检查目标服务器上常见的 Webshell 入侵危害指标（IOC）。 实现扫描逻辑，判断目标是否已验证为已修补。感谢 @UKDanielCard & @DTCERT 安装 此脚本需要 Pyth...

EUVD-2026-63545

A vulnerability exists in the Dynamic DNS DDNS functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and th...

CVE-2026-19586 Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...

EUVD-2026-63544

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...

GHSA-9HGC-G3W5-67CM ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

Summary The /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...

CVE-2026-16038 MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways

The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on several of its payment-completion endpoints, allowing an unauthenticated attacker to mark an arbitrary order fully paid without paying and obtain goods or services...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack in the pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime functions. An attacker can obtain sensitive information about the outcome of RSA decryption operations by submitting crafted EnvelopedData and analyzing error...

CVE-2026-14317

The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, which allows unauthenticated users to complete donations through a payment gateway the administrator has disabled...

CVE-2026-14317

The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, which allows unauthenticated users to complete donations through a payment gateway the administrator has disabled...

CVE-2026-14317 GiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction Bypass

The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request input, which allows unauthenticated users to complete donations through a payment gateway the administrator has disabled...