833 matches found
CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...
CVE-2026-85102: Improper Certificate Validation
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...
CVE-2026-85103: Heap-based Buffer Overflow
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...
CVE-2026-85103 - ASN.1 decoding heap overflow leading to a remote code execution
Symptoms - Issue: A heap overflow in the VPN certificate ASN.1 decoding flow may allow an attacker to remotely execute arbitrary code on the Security Management Server and Security Gateway. Clarification: All Security Management Server deployments are vulnerable, regardless of configuration, and...
CVE-2026-85102 - Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN
Symptoms - Issue: Improper validation of certificate data during VPN negotiation may allow an unauthenticated remote attacker to execute arbitrary code on the Security Gateway. This issue received the ID CVE-2026-85102 with CVSS: 9.8. For Site-to-Site VPN , the issue affects Security gateways tha...
PT-2026-88979
Name of the Vulnerable Software and Affected Versions Check Point Quantum Security Gateway affected versions not specified Check Point Security Gateway affected versions not specified Check Point Spark Firewall affected versions not specified Check Point Quantum Security Management affected...
CVE-2026-55618
emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...
CVE-2026-55618
eml_parser is a Python module for parsing .eml files. Prior to 3.0.2 , the clean_found_uri function in parser.py validates potential URL strings before unescaping HTML entities for colon, slash, or period characters. As a result, valid encoded URLs and their hostnames are rejected and omitted fro...
ClawSentry: A Progressive Multi-Tier Security Monitor for Safeguarding Autonomous LLM Agents
As large language model LLM agents move from conversation to executing code, reading local files, and orchestrating external tools, a single agent hijacked by a malicious third-party skill can cause data exfiltration, privilege escalation, or cascading compromise. We argue that agentic risk is...
EUVD-2026-52569
A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
!Read on Mediumhttps://img.shields.io/badge/Read%20on-Medium...
MPSec ISG1000 Security Gateway Panel - Detect
Detects MPSec ISG1000 Security Gateway Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects MPSec ISG1000 Security Gateway Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'MPSec ISG1000...
NS-ASG Application Security Gateway 6.3 - Sql Injection Detection
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The...
Ubiquiti UniFi Security Gateway - Login Panel Detection
Ubiquiti UniFi Security Gateway management panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti UniFi Security Gateway management panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...
Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection Detection
Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...
SkillGate: Cost Efficient Runtime Malicious Skill File Detection in Coding Agents
Software engineering teams now deploy AI coding agents Cursor, Claude Code, GitHub Copilot as first-class productivity tools, installing domain-specific skill files to tailor agent behavior to project APIs, framework conventions, and organizational workflows. These complex Markdown files are easi...
Exploit for Cross-site Scripting in Proofpoint Enterprise_Protection
About Security researcher: ly1g3, ly1g3attuta.io GPG finge...
📄 Proofpoint Messaging Security Gateway 8.18.4.73 Remote Code Execution
Proofpoint Messaging Security Gateway version 8.18.4.73 has a remote code execution vulnerability that can be leveraged via a simple curl. About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586...
📄 Proofpoint Messaging Security Gateway 8.18.4.73 Remote Code Execution
Proofpoint Messaging Security Gateway version 8.18.4.73 has a remote code execution vulnerability in Euwebutils.pm. About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-42271link is external BerriAI LiteLLM Command Injection Vulnerability CVE-2026-50751link is external Check Point Security Gateway Improper Authentication...