210 matches found
f5-waf-enforce-sig-CVE-2021-44228
f5-waf-enforce-sigs-CVE-2021-44228 これは、BIG-IP ASMデバイス上のすべてのポリシーに対して、CVE-2021-44228に関連するシグネチャを強制適用します。 概要 このスクリプトは、以下のリストに含まれるCVE-2021-44228に関連するすべてのシグネチャを、Adv. WAF/ASMのすべてのポリシーに対してブロッキングモードで強制適用します。 sigs = '200104768', '200104769', '200004450', '200004451','200004474','200104770','200104771'...
f5-waf-quick-patch-cve-2021-44228
f5-waf-quick-patch-CVE-2021-44228 F5 Networks Advanced WAF/ASM Quick Patch CVE 2021-44228. 概述 该工具连接到BIG-IP设备，创建一个名为CVE-2021-4428的自定义签名集，并将其应用于所有策略的阻塞模式。它还会强制执行所有签名并应用更改。该工具已在BIG-IP ASM v15.x上测试，但我认为它应该适用于v13.x/v14.x/v16.x。 警告：此过程可能会在运行时增加控制平面上的CPU和内存使用率。 工作原理 该工具利用BIG-IP iControl REST...
CVE-2021-22993
On BIG-IP Advanced WAF and BIG-IP ASM versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, DOM-based XSS on DoS Profile properties page. Note: Software versions which have reached End of Software Development EoSD are no...
CVE-2022-23026
On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, an authenticated user with low privileges, such as a guest, can upload data using an undisclosed REST endpoint causing an increase in disk resource...
CVE-2025-61938 BIG-IP Advanced WAF and ASM bd process vulnerability
When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manually or through the automatic Policy Builder, the bd process can terminate repeatedly. Note: Software versions which have...
CVE-2025-61935: Unchecked Return Value
When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-54858: Uncontrolled Recursion
When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed JSON schema, and the security policy is applied to a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End o...
EUVD-2020-27033
Malware in sbrugna...
EUVD-2016-8325
Malware in sbrugna...
EUVD-2019-16209
Malware in sbrugna...
EUVD-2021-10111
Malware in sbrugna...
EUVD-2021-10094
Malware in sbrugna...
EUVD-2021-10128
Malware in sbrugna...
EUVD-2021-10119
Malware in sbrugna...
EUVD-2021-10147
Malware in sbrugna...
EUVD-2018-17310
Malware in sbrugna...
EUVD-2019-16241
Malware in sbrugna...
EUVD-2020-27068
Malware in sbrugna...