62 matches found
SOC_287
SOC287 - Checkpoint Security Gateway의 임의 파일 읽기 취약점 CVE-2024-24919 개요 이 저장소는 Check Point Security Gateways에 영향을 미치는 CVE-2024-24919 취약점에 대한 상세한 실습 내용을 담고 있습니다. 이 취약점은 임의 파일 읽기를 허용하여 /etc/passwd와 같은 민감한 시스템 파일을 노출시킬 수 있습니다. 이 문서는 공격 시나리오, 탐지 방법 및 완화 전략에 대한 심층 분석을 제공합니다. 실습 안내 이 Let's Defend SOC 실습에 ...
CVE-2024-24919
CVE-2024-24919 익스플로잇 설명 이 Python 스크립트는 CVE-2024-24919의 익스플로잇입니다. 이 CVE는 Check Point 제품에 영향을 미칩니다: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances 버전: R77.20 EOL, R77.30 EOL, R80.10 EOL, R80.20 EOL, R80.20.x, R80.20SP EOL, R80.30...
CVE-2024-24919-Check-Point-Remote-Access-VPN
CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 は、未認証の任意ファイル読み取りの脆弱性であり、完全な未認証RCEに他ならないものとして扱えます。攻撃者は、影響を受けるアプライアンス上の機密ファイルをスーパーユーザー アクセスで読み取ることができます。攻撃者は ntds.dit または /etc/password ファイルの内容を取得し、それらを使用してシステムにログインできます。また、Security Gateway...
CVE-2026-50751
CVE-2026-50751 Check Point IKEv1 스캐너 Check Point Quantum Security Gateways에 영향을 주는 치명적인 IKEv1 인증 우회 취약점인 CVE-2026-50751 용 멀티스레드 취약점 스캐너입니다. 개요 IKEv1이 활성화된 Check Point 원격 액세스 VPN 시스템은 인증 우회 공격에 취약합니다. 이 도구는 대상 시스템에서 IKEv1이 활성화되어 있는지 탐지합니다. CVE-2026-50751 세부 정보: CVSS 점수 : 9.8 치명적 취약점 : Check Point...
Check Point Gaia Operating System (sk185152)
The remote host is missing a hotfix for the Gaia Operating System. It is, therefore, affected by a vulnerability as referenced in the sk185152 advisory. - An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remot...
CVE-2026-62144 Management Authentication Bypass and Privilege Escalation
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security...
CVE-2026-62144
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security...
EUVD-2026-47701
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security...
CVE-2026-62144: Improper Authentication
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security...
PT-2026-63410
Name of the Vulnerable Software and Affected Versions Check Point Security Management affected versions not specified Multi-Domain Security Management affected versions not specified Description An authentication bypass allows an unauthenticated remote attacker to execute administrative commands ...
CVE-2026-50752 - VPN site to site certificate bypass vulnerability in deprecated IKEv1 key exchange
Symptoms - A vulnerability in the certificate validation logic of the deprecated IKEv1 key exchange method may lead to a man-in-the-middle attack on the VPN site-to-site configuration. This vulnerability was discovered by Check Point security research team. There are no reported exploits of this...
CVE-2026-48132 - VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP
Symptoms - The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used 4500/UDP. As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service temporary interruption o...
Training-Free Color-Aware Adversarial Diffusion Sanitization for Diffusion Stegomalware Defense at Security Gateways
The rapid expansion of generative AI has normalized large-scale synthetic media creation, enabling new forms of covert communication. Recent generative steganography methods, particularly those based on diffusion models, can embed high-capacity payloads without fine-tuning or auxiliary decoders,...
EUVD-2016-7572
Malware in sbrugna...
EUVD-2017-16899
Malware in sbrugna...
EUVD-2013-1068
Malware in sbrugna...
EUVD-2015-7977
Malware in sbrugna...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
Check Point Security Gateways Information Disclosure - CVE-202...
The Dreaded Network Pivot: An Attack Intelligence Story
Rapid7 recently released our 2024 Attack Intelligence Report, a 14-month deep dive into the vulnerability and attacker landscape. The spiritual successor to our annual Vulnerability Intelligence Report, the AIR includes data from the Rapid7 research team combined with our detection and response a...