CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script 描述 CVE-2024-24919 是 Check Point Security Gateway 设备中的一个漏洞，允许攻击者通过路径遍历漏洞未经授权访问敏感文件。此漏洞使攻击者无需身份验证即可读取目标系统中的特定文件内容。 DORK FOFA: title="Check Point SSL Network Extender" 该脚本是一个基于命令行的漏洞利用实现，用于测试目标是否受 CVE-2024-24919 影响。 功能 对受影响的目标进行漏洞利用 从目标获取敏感文件 使用自定义头部的请求 要求...

wardgate

Wardgate - AI代理安全网关 Wardgate 是一个安全网关，位于AI代理与外部世界之间——隔离API调用的凭据，隔离远程命令执行的SSH密钥，并对远程环境（conclaves）中的命令执行进行门控。 让你的AI代理能够访问API、SSH密钥和Shell工具——无需提供凭据，也无需信任它们直接执行。 问题所在 AI代理很强大。它们可以管理你的日历、查看邮件、更新任务、编写代码并自动化你的生活。但要做到这些，它们需要访问你的账户和系统。 它们就像一个天才少年：知道很多，但有自己想法。容易轻信（提示注入）。而且像青少年一样，它们不会真正思考。所以考虑后果绝对超出了它们的能力范围！...

CVE-2024-24919-POC

PoC de CVE-2024-24919 🚀 🔥 Descripción Este script automatiza la explotación de CVE-2024-24919 Divulgación no autorizada de información de Checkpoint Security Gateway. 📌 Características ✅ Prueba de URLs individuales y en masa ✅ Explotación automatizada ✅ Simple y rápido 🛠️ Uso Clona este repositori...

Check-Point_poc

Check-Pointpoc Check-Point安全网关任意文件读取漏洞CVE-2024-24919 python Check-Pointpoc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage:...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. FIRST: I AM NOT RESPONSIB...

CVE-2024-24919

CVE-2024-24919 用于验证Checkpoint防火墙VPN上CVE-2024-24919漏洞的利用工具 该工具创建一个输出文件夹，其中包含一个"Target-IP.txt"文件。该文件包含受影响目标的/etc/passwd文件内容，从而确定系统是否存在漏洞。 运行此工具只需要Python 3。使用以下命令运行该工具： python3 CVE-2024-24919.py -i Target-IP 关于该漏洞的更多信息： https://thehackernews.com/2024/05/check-point-warns-of-zero-day-attacks.html...

Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection

Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...

CVE-2026-50751

🚨 CVE-2026-50751 - Bypass dell'autenticazione in Check Point VPN IKEv1 📖 Panoramica CVE-2026-50751 è una vulnerabilità critica di bypass dell'autenticazione che colpisce le implementazioni di Check Point Quantum Security Gateway configurate con il protocollo legacy IKEv1 Remote Access VPN. Il...

Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

Questo repository non contiene un README...

CVE-2026-55618

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...

CVE-2026-55618

eml_parser is a Python module for parsing .eml files. Prior to 3.0.2 , the clean_found_uri function in parser.py validates potential URL strings before unescaping HTML entities for colon, slash, or period characters. As a result, valid encoded URLs and their hostnames are rejected and omitted fro...

Check Point Quantum Gateway - Information Disclosure

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. id: CVE-2024-24919 info: name: Check Poi...

EUVD-2026-52569

A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-42271link is external BerriAI LiteLLM Command Injection Vulnerability CVE-2026-50751link is external Check Point Security Gateway Improper Authentication...

Check Point Security Gateway Improper Authentication Vulnerability

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password...

CVE-2026-48132

The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used 4500/UDP. As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service temporary interruption of VPN...

CVE-2026-48133

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...

Waterfall WF-500 操作系统命令注入漏洞

The Waterfall WF-500 is a sending-side host component in the industrial control network unidirectional security gateway developed by the Israeli company Waterfall. The Waterfall WF-500 has a vulnerability related to operating system command injection. This vulnerability stems from command injecti...

CVE-2026-48132

The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used 4500/UDP. As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service temporary interruption of VPN...

CVE-2026-48133

When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway...