f5-waf-quick-patch-cve-2021-44228

f5-waf-quick-patch-CVE-2021-44228 F5 Networks Advanced WAF/ASM Parche Rápido CVE 2021-44228. Resumen Esta herramienta se conecta a un dispositivo BIG-IP y crea un conjunto de firmas personalizado llamado CVE-2021-4428 y lo aplica a todas las políticas en modo de bloqueo. También aplica todas las...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

seccomp-tools

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...

f5-waf-enforce-sig-CVE-2021-44228

f5-waf-enforce-sigs-CVE-2021-44228 Esto aplica las firmas para CVE-2021-44228 en todas las políticas de un dispositivo BIG-IP ASM Resumen Este script aplica todas las firmas presentes en la lista a continuación relacionadas con CVE-2021-44228 en todas las políticas en modo de bloqueo en Adv...

ASM-Obfuscator

ASM-Obfuscator 高级 x86-64 汇编代码混淆器。 描述 汇编代码混淆器是一款功能强大且用途广泛的工具，旨在增强你的 x86-64 汇编代码的安全性。它通过采用多种混淆技术和反分析措施，保护你的项目免受逆向工程和分析的侵扰。 功能特性 指令注入 ：在每条汇编指令之前注入自定义字节序列，以迷惑反汇编器。 随机化 ：在代码结构中引入随机性，使其更难预测。 调试器检测 ：在代码执行期间检测调试器的存在，并采取反调试措施。 反分析技术 ：通过条件分支和时序检查来迷惑动态分析工具。 动态解密 ：在运行时加密并动态解密代码段，从而增加复杂性。 动态解压缩...

Astra Linux – Vulnerability in Nasm

In Netwide Assembler NASM 2.15rc10, the SEGV condition can be triggered in toktext within asm/preproc.c by accessing the READ memory...

Astra Linux – Vulnerability in Nasm

A buffer overflow vulnerability exists in the hashfindi function in hashtbl.c in nasm 2.15rc0, allowing remote attackers to cause a denial of service through a crafted ASM file...

PinTheft-asm

pintheft-asm 用原始 x86-64 汇编重写了 PinTheft-go，为什么不呢。 root@kitploit: make ./pintheft 弹出一个 root shell。退出时会打印恢复命令。 详情 → 原始 PoC。...

proteus

Proteus Proteus - Axiom 数据库和 API https://github.com/pry0cc/axiom。 最初为使用 ProjectDiscovery 工具构建 ASM 平台而编写。 设置 首先，克隆仓库 root@kitploit: git clone https://github.com/pry0cc/proteus /.proteus cd /.proteus 接下来，修改 config/notify.yaml 以包含你的 Slack webhook。 进入 bin 目录，修改 docker-compose.yml 中的 volumes，使其映射到你本地的...

Astra Linux – Vulnerability in Nasm

A stack-use-after-scope issue was discovered in the expandmmacparams function in preproc.c in nasm before version 2.15.04. This issue allows remote attackers to cause a denial of service through crafted ASM files...

Exploit for CVE-2026-16723

🚨 CVE-2026-16723 — fastjson 1.2.83 @JSONType resource detect...

CVE-2026-15394

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-47906

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15394 Header Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM vulnerability (K000160727)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K000160727 advisory. When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed...

PT-2026-40643

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 17.1.3.1 F5 BIG-IP versions prior to 17.5.1.4 F5 BIG-IP versions prior to 21.0.0.1 Description When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the ...

JLSEC-2026-202

Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...

CVE-2026-6067 CVE-2026-6067

A heap buffer overflow vulnerability exists in the Netwide Assembler NASM due to a lack of bounds checking in the objdirective function. This vulnerability can be exploited by a user assembling a malicious .asm file, potentially leading to heap memory corruption, denial of service crash, and...

Unsoundness in opt-in ARMv8 assembly backend for `keccak`

Summary The asm! block enabled by the off-by-default asm feature, when enabled on ARMv8 targets, misspecified the operand type for all of its operands, using in for pointers and values which were subsequently mutated by operations performed within the assembly block. Impact It's unclear what...

CVE-2026-22548

When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's control can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...