OpenShell

OpenShell OpenShellは、Goで書かれた軽量なオープンソースのリバースシェル管理サーバーです。 Webベースのシンプルなグラフィカルユーザーインターフェース（GUI）を通じて、リバースシェルチャネルを確立し操作することができます。 バグを見つけた場合や提案がある場合は、遠慮なくIssueを開いてください。 このプロジェクトが役立つ、または参考になると感じたなら、リポジトリに⭐を付けていただけると大変嬉しいです！ あなたのサポートは、このツールを改善し続けるための大きなモチベーションになります。 免責事項...

CVE-2026-16232

CVE-2026-16232 概要 これは、アプリケーショントークンを使用した SmartConsole ログインプロセスにおける認証バイパスである CVE-2026-16232 を悪用する概念実証スクリプトです。この脆弱性は、Check Point Security Management Server および Multi-Domain Security Management Server MDS に影響します。 完全な技術分析については、Rapid7 Analysis を参照してください。 使用方法 $ python3 CVE-2026-16232.py --help usage:...

Check Point Gaia Operating System (sk1000171)

The remote host is missing a hotfix for the Gaia Operating System. It is, therefore, affected by a vulnerability as referenced in the sk1000171 advisory. - A path traversal and arbitrary file upload vulnerability in Check Point Security Management Server, Multi-Domain Security Management Server,...

CVE-2026-16232

CVE-2026-16232 — Check Point SmartConsole 认证绕过 从未认证网络访问 到完整管理员权限 的认证绕过 PoC。单文件,Python 3 纯标准库零依赖。 漏洞简述 管理服务器 Java 登录服务 authenticateRemoteApplication 直接接受攻击者提供的 SIC DN 字符串作为身份 ,而不是把它绑定到经 TLS 客户端证书认证的真实 DN。攻击者从未认证的 SIC 引导通信中读取管理服务器自身的 SIC DN 并回放,即可:伪造应用身份 → 获取应用令牌 → 通过 gen-sso-token 铸造 SmartConsole...

BIT-MILVUS-2026-69111 Milvus 2.6.22, 3.0.0 Unauthenticated Denial of Service via /management/stop

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint,...

PT-2026-98996

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint,...

The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in the improper limitation of the path name to the directory. This allows attackers to execute arbitrary code.

The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in incorrect path name restrictions for accessing the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23, the company said. The flaw,CVE-2026-93616 , allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point releas...

CVE-2026-93616

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

EUVD-2026-84375

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616

A pre-authentication directory traversal vulnerability exists in the Check Point Management Web Service , affecting Check Point Security Management and Log Servers. This flaw allows unauthenticated attackers to upload and execute arbitrary scripts, potentially leading to remote code execution . A...

Check Point Multiple Products Path Traversal Vulnerability

Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts...

VulnCheck KEV: CVE-2026-93616

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

PT-2026-96718

Name of the Vulnerable Software and Affected Versions Security Management Server versions R81.10 through R82.20 Multi-Domain Security Management Server versions R81.10 through R82.20 Log Server versions R81.10 through R82.20 Multi-Domain Log Server versions R81.10 through R82.20 SmartEvent versio...

CVE-2026-93616: Directory Traversal and File upload allows execution of arbitrary script on the Management Server

Symptoms - A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on the Check Point Management Server. This vulnerability is exploited in the Wild. Check Point is aware of a handful of customers who have been attacked. This...

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the network. The Security Management Server is the system that controls firewall policy and administrator access. Check Point h...

PT-2026-93729

Name of the Vulnerable Software and Affected Versions Check Point Security Management Server affected versions not specified Check Point Multi-Domain Security Management affected versions not specified Check Point Log Server affected versions not specified Description A stack-based buffer overflo...