CVE-2024-24919

Check Point 安全网关信息泄露 - CVE-2024-24919 一旦 Check Point 安全网关连接到互联网并启用了远程访问 VPN 或 Mobile Access 软件刀片，攻击者就有可能读取网关上的某些信息。现已提供可缓解此漏洞的安全修复程序。 了解更多 — CVE-2024-24919 免责声明 ：本概念验证（POC）仅用于教育和道德测试目的。未经事先双方同意，使用此工具攻击目标属违法行为。遵守所有适用的地方、州和联邦法律是最终用户的责任。开发者不承担任何责任，也不对因使用本程序造成的任何误用或损害负责。 开始使用 寻找目标 要寻找潜在目标，请使用 Fofa（类似...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 可能允许攻击者在 Check Point 安全网关连接到互联网并启用远程访问 VPN 或移动访问软件刀片后读取某些信息。已提供缓解此漏洞的安全修复。 第一： 我对您使用本工具造成的后果不承担任何责任。 第二： apt-get install parallel curl -y chmod +x SCAN-CVE-2024-24919.sh CVE-2024-24919.sh SCAN-CVE-2024-24919.sh： 用于扫描目标列表，默认插入目标的文件是“targets”，使用“nano targets”。...

CVE-2024-24919---Poc

CVE-2024-24919 PoC CVE-2024-24919 的概念验证 了解更多 - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 该漏洞允许未经身份验证的远程攻击者读取受影响设备上任意文件的内容。 描述 可能允许攻击者在Check Point安全网关上读取某些信息，前提是网关已连接到互联网并启用了远程访问VPN或移动访问软件刀片。 Nuclei Template:...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

SOC警报分析：Checkpoint Security Gateway任意文件读取漏洞 CVE-2024-24919 介绍 CVE-2024-24919 是一个关键的 Check Point Security Gateways 零日漏洞，允许未经认证的远程攻击者从受影响系统中读取任意文件。该漏洞于 2024 年 5 月被发现并在野外被积极利用，针对启用了远程访问 VPN 或移动接入 Blade 的设备。攻击者可利用此漏洞访问敏感文件（如密码哈希和 SSH 密钥），进而可能完全控制系统。鉴于其严重性和已被利用的状态，强烈建议立即修补和缓解。 调查与修复 为调查并修复该警报，我采取了以下步骤...

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access SMA 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026. Cybersecurity company Volexity is tracking the activity under the...

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access SMA 1000 series appliances, one of which could be exploited to achieve arbitrary command execution. The vulnerabilities are listed below - CVE-2026-15409 CVSS score: 10.0 - A Server-side...

Exploit for Improper Authentication in Checkpoint Gaia_Os

markdown CVE-2026-50751 - Check Point IKEv1 Authentication Byp...

Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol. The vulnerability, tracked as CVE-2026-50751 CVSS score: 9.3, is a case of a logic flow weakne...

CVE-2026-50751

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password...

EUVD-2026-35047

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password...

CVE-2026-50751 User Authentication Bypass in VPN Remote Access and Mobile Access

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password...

CVE-2026-50751

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password...

CVE-2026-50751 User Authentication Bypass in VPN Remote Access and Mobile Access

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password...

CVE-2026-50751

CVE-2026-50751 is a logic-flow weakness in certificate validation during the deprecated IKEv1 key exchange used by Check Point Remote Access VPN, Mobile Access, and Spark Firewall. The flaw allows an unauthenticated attacker to bypass user authentication and establish a VPN session without a vali...

CVE-2026-10259

A security vulnerability has been detected in H3C Magic B0 up to 100R002. The affected element is the function SetMobileAPInfoById of the file /goform/aspForm. Such manipulation of the argument param leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has be...

CVE-2026-50751 - User Authentication bypass on VPN Remote Access and Mobile Access in deprecated IKEv1 key exchange

Symptoms - An attacker can bypass user authentication by exploiting a logic flow weakness in the Remote Access and Mobile Access certificate validation and establish a remote access VPN connection without a valid user password. Check Point is aware of this vulnerability being exploited in the wil...

SAP Gateway 安全漏洞

SAP Gateway is a framework based on open standards developed by SAP, a German company. This product allows non-SAP applications to connect to SAP applications, as well as access SAP applications on mobile devices. There is a security vulnerability in SAP Gateway, which allows attackers to inject...

CVE-2026-48135 - HTTP service can incorrectly process malformed HTTP requests

Cause An input-handling issue in the HTTP request processing path. Symptoms - A Check Point HTTP-based service, such as Mobile Access Portal or Identity Awareness Portals except for Captive Portal, can incorrectly handle malformed HTTP requests. Gaia Portal is not affected by this issue. - The...

EUVD-2026-20908

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication...

PT-2026-31397

Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 series appliances affected versions not specified Description Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP...