algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский Scripts de configuration automatique du serveur VPN IPsec Configurez votre propre serveur VPN IPsec en quelques minutes, avec IPsec/L2TP, Cisco IPsec et IKEv2. Un VPN IPsec chiffre votre trafic réseau, de sorte que personne entre vous et le serveur VPN ne...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...

killasa

killasa Test de vulnérabilité pour CVE-2016-1287 longueur de fragment IKE invalide dans Cisco ASA Négocie une SA IKEv2 avec la fragmentation Cisco activée, puis envoie deux fragments IKE, dont l'un a une longueur invalide de 1 octet...

CVE-2026-50751-Mitigation-Scripts

CVE-2026-50751-Mitigation-Scripts Il existe plusieurs techniques d'atténuation que vous pouvez utiliser à partir du sk ; https://support.checkpoint.com/results/sk/sk185033 1. Désactivez la prise en charge des clients legacy. 2. Configurez l'accès distant pour n'utiliser que ike v2 Des scripts son...

CVE-2026-33824

🚨 CVE-2026-33824: 악용 분석 및 대응 🎯 요약 CVE-2026-33824 는 Windows의 IKEInternet Key Exchange 프로토콜에서 사전 인증 없이 원격 코드 실행 을 허용하는 치명적인 취약점CVSS 9.8/10입니다. 이는 모든 정예 공격자가 찾는 "메모리 수술"입니다: SYSTEM 권한으로 실행되는 Double FreeCWE-415 취약점입니다. 🔴 PARTE I: 악용 관점 1.1 공격 시나리오 정교한 공격자는 무작위로 패킷을 보내지 않습니다. 네트워크를 통한 메모리 오케스트레이션 을 세...

AlmaLinux 9.6 [TuxCare] Security Update: libreswan Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784305067)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784305067 advisory. - Libreswan, via the function RSAauthenticatehashsignaturerawrsa, did not correctly verify the length of the authentication hash whe...

Rocky Linux 8 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (crlsa-2026_46396)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202646396 advisory. librenswan: IKEv1 Denial of Service via RSA-SHA1 PKCS1 Version 1.5 Encrypted authentication payload CVE-2026-50721 librenswan: IKEv2 Denial of Service via...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1785422092)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785422092 advisory. - In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However,...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2025:1764957598)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764957598 advisory. - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is...

Rocky Linux 10.2 [CIQ] Security Update: libreswan / libreswan-debugsource / libreswan-minimal / etc Multiple Vulnerabilities (crlsa-2026_46398)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202646398 advisory. librenswan: IKEv1 Denial of Service via RSA-SHA1 PKCS1 Version 1.5 Encrypted authentication payload CVE-2026-50721 librenswan: IKEv2 Denial of Service...

Rocky Linux 8 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (crlsa-2023_7052)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20237052 advisory. libreswan: Invalid IKEv2 REKEY proposal causes restart CVE-2023-38710 libreswan: Invalid IKEv1 Quick Mode ID causes restart CVE-2023-38711 libreswan: Inval...

Rocky Linux 9 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource Multiple Vulnerabilities (crlsa-2026_46397)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202646397 advisory. librenswan: IKEv1 Denial of Service via RSA-SHA1 PKCS1 Version 1.5 Encrypted authentication payload CVE-2026-50721 librenswan: IKEv2 Denial of Service via...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1784019530)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784019530 advisory. - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial o...

CVE-2025-14733

Scanner IKEv2 WatchGuard — CVE-2025-14733 Identifiez les appliances WatchGuard Firebox vulnérables à la CVE-2025-14733, une vulnérabilité critique de pré-authentification dans l'implémentation IKEv2 de Fireware OS. Cet outil effectue une détection de version sûre via la négociation IKEv2 standard...

CVE-2026-86133

An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon iked allows a remote attacker who has completed the initial IKEv2 handshake to crash the iked process by sending a specially crafted encrypted IKEv2 message, resulting in a denial of service...

CVE-2026-86132

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1784131746)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784131746 advisory. - Libreswan, via the function RSAauthenticatehashsignaturepkcs115rsa, did not correctly verify the DER encoding of the ASN.1 digest when the...

CVE-2026-86133

An integer underflow vulnerability exists in the WatchGuard Fireware OS IKE daemon (iked ). A remote attacker who has completed the initial IKEv2 handshake can crash the iked process by sending a specially crafted encrypted IKEv2 message, leading to a denial of service . No specific exploit detai...

CVE-2026-86132 Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service

An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon iked allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite...