Malicious Activity Over DNS Tunneling

DNS Tunneling is used to pass non-DNS information using DNS messages, which are normally allowed by security devices. Malicious users or malware may use DNS tunnels to bypass inspection by the security gateway...

The vulnerability of Check Point Security Gateway’s security gateway, related to resource release errors, allows attackers to trigger a service failure.

The vulnerability of Check Point Security Gateway relates to resource release errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through specially crafted HTTPS requests...

The vulnerability of Check Point Security Gateway’s security gateway allows attackers to circumvent existing access restrictions and carry out spear-phishing attacks.

The vulnerability of Check Point Security Gateway relates to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and carry out spear-phishing attacks...

The multiple vulnerabilities of Check Point Security Gateway firewalls models series 80, 600, and 1000 involve deficiencies in access control. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The multiple vulnerabilities of Check Point Security Gateway Series 80, 600, and 1000 are related to deficiencies in access control for certain functions. Exploitation of these vulnerabilities could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protect...

The numerous vulnerabilities of Check Point Security Gateway’s security gateway, related to resource release errors, allow attackers to trigger service failures.

The multiple vulnerabilities of Check Point Security Gateway are related to resource release errors. Exploitation of these vulnerabilities can allow a malicious actor to cause service failures remotely...

CVE-2019-8462

In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging...

CVE-2019-8462

In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging...

Code injection

In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging...

CVE-2019-8462

CVE-2019-8462 affects Check Point Security Gateway GAIA v80.30 (R80.30) when the Threat Prevention Forensics feature is enabled and enhanced-logging is configured. Multiple sources describe a DoS condition where an authenticated, local attacker can trigger a crash/stop responding behavior by send...

CVE-2019-8462

In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging...

Weak password vulnerability in NetGuard Operations and Maintenance Security Gateway V3.0 at Beijing NetGuard Cloud Information Technology Co.

Netnifty O&M Security Gateway is a compliance management system for controlling and auditing user O&M operations in business environments. A weak password vulnerability exists in the Netnifty Operations and Maintenance Security Gateway of Beijing Netnifty Nebula Information Technology Company...

In a rare scenario, R80.30 Security Gateway managed by R80.30 Security Management crashes when Threat Prevention Forensics feature is enabled

...

Weak Password Vulnerability in Tianqing Web Application Security Gateway

SkyQuest Web Application Security Gateway is a new generation of Web security protection and application delivery application security product developed by Qisda, which is used to defend against attacks targeting Web application vulnerabilities, analyze HTTP/HTTPS traffic on Web servers and...

Access Control Vulnerabilities in Multiple ZyXEL Products

ZyXEL ZyWall 310 and others are products of Taiwan, China-based ZyXEL Corporation.ZyXEL ZyWall 310 is a 310 series VPN firewall appliance.ZyXEL ZyWall 110 is a 110 series VPN firewall appliance.ZyXEL USG1900 is a next-generation unified security gateway appliance. A security vulnerability exists ...

Cross-site scripting vulnerability in multiple Zyxel devices

ZyXEL ZyWall 310 and others are products of Taiwan, China-based ZyXEL Corporation.ZyXEL ZyWall 310 is a 310 series VPN firewall appliance.ZyXEL ZyWall 110 is a 110 series VPN firewall appliance.ZyXEL USG1900 is a next-generation unified security gateway appliance. Zyxel ZyWall A cross-site...

CVE-2019-12581

A reflective Cross-site scripting XSS vulnerability in the freetimefailed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...

Check Point Response to CVE-2019-11477, CVE-2019-11478, CVE-2019-11479 - TCP SACK PANIC Linux Kernel vulnerabilities

Cause CVE-2019-11477: The Linux kernel is vulnerable to an integer overflow in the 16-bit width of TCPSKBCBskb- tcpgsosegs. A remote attacker could exploit this to crash the system and create a Denial Of Service. CVE-2019-11478: The Linux kernel is vulnerable to a flaw that allows attackers to se...

Schweitzer Engineering Laboratories Ethernet Security Gateway Detection

Binary data 755352.prm...

Schweitzer Engineering Laboratories Security Gateway Detection

Binary data 755353.prm...

How to add a Security Gateway to TeamCity

TeamCity TeamCity is a continuous integration CI and deployment server which is developed by Jetbrains. It was released in 2006 as a commercial software but can also be used free of charge within a certain scale. Next to Bamboo and Jenkins it is one of the most common solutions to build and deplo...