seccomp-tools

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

f5-waf-quick-patch-cve-2021-44228

f5-waf-quick-patch-CVE-2021-44228 F5 Networks Advanced WAF/ASM クイックパッチ CVE 2021-44228。 概要 このツールはBIG-IPデバイスに接続し、CVE-2021-4428というカスタムシグネチャセットを作成し、すべてのポリシーにブロッキングモードで適用します。また、すべてのシグネチャを強制し、変更を適用します。BIG-IP ASM v15.xでテスト済みですが、v13.x/v14.x/v16.xでも動作すると思われます。 警告:...

f5-waf-enforce-sig-CVE-2021-44228

f5-waf-enforce-sigs-CVE-2021-44228 これは、BIG-IP ASMデバイス上のすべてのポリシーに対して、CVE-2021-44228に関連するシグネチャを強制適用します。 概要 このスクリプトは、以下のリストに含まれるCVE-2021-44228に関連するすべてのシグネチャを、Adv. WAF/ASMのすべてのポリシーに対してブロッキングモードで強制適用します。 sigs = '200104768', '200104769', '200004450', '200004451','200004474','200104770','200104771'...

ASM-Obfuscator

ASM-Obfuscator 高级 x86-64 汇编代码混淆器。 描述 汇编代码混淆器是一款功能强大且用途广泛的工具，旨在增强你的 x86-64 汇编代码的安全性。它通过采用多种混淆技术和反分析措施，保护你的项目免受逆向工程和分析的侵扰。 功能特性 指令注入 ：在每条汇编指令之前注入自定义字节序列，以迷惑反汇编器。 随机化 ：在代码结构中引入随机性，使其更难预测。 调试器检测 ：在代码执行期间检测调试器的存在，并采取反调试措施。 反分析技术 ：通过条件分支和时序检查来迷惑动态分析工具。 动态解密 ：在运行时加密并动态解密代码段，从而增加复杂性。 动态解压缩...

Astra Linux – Vulnerability in Nasm

In Netwide Assembler NASM 2.15rc10, the SEGV condition can be triggered in toktext within asm/preproc.c by accessing the READ memory...

PinTheft-asm

pintheft-asm PinTheft-go を生の x86-64 アセンブリで書き直しました。理由は特にありません。 make ./pintheft ルートシェルをドロップします。終了時に復元コマンドが表示されます。 詳細は → 元のPoC を参照してください。...

proteus

Proteus Proteus - Axiom 数据库和 API https://github.com/pry0cc/axiom。 最初为使用 ProjectDiscovery 工具构建 ASM 平台而编写。 设置 首先，克隆仓库 git clone https://github.com/pry0cc/proteus /.proteus cd /.proteus 接下来，修改 config/notify.yaml 以包含你的 Slack webhook。 进入 bin 目录，修改 docker-compose.yml 中的 volumes，使其映射到你本地的 axiom 配置。你需要将...

The vulnerability of the arch/x86/include/asm/nospec-branch.h and arch/x86/kernel/cpu/bugs.c files in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the arch/x86/include/asm/nospec-branch.h and arch/x86/kernel/cpu/bugs.c files in Linux operating systems is related to a violation of expected behavior. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260925-73-0188

The vulnerability of the asm function in the kernel/kheaders.c module of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nasm (UTSA-2023-001258)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001258 advisory. NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 Tenable has extracted the preceding description block...

Astra Linux – Vulnerability in Nasm

A stack-use-after-scope issue was discovered in the expandmmacparams function in preproc.c in nasm before version 2.15.04. This issue allows remote attackers to cause a denial of service through crafted ASM files...

Astra Linux – Vulnerability in Nasm

A buffer overflow vulnerability exists in the hashfindi function in hashtbl.c in nasm 2.15rc0, allowing remote attackers to cause a denial of service through a crafted ASM file...

Exploit for CVE-2026-16723

🚨 CVE-2026-16723 — fastjson 1.2.83 @JSONType resource detect...

CVE-2026-15394

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15394 Header Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15394 Header Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet Meta

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-15394

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-47906

The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asmcode' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM vulnerability (K000160727)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K000160727 advisory. When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed...