Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

87,168cataloged exploits

40,553CVEs with public exploitation

24,696lab-tested

All Referência 26,327Exploit-DB 24,488GitHub PoC 18,080VulnCheck XDB 10,169Nuclei 4,567Metasploit 3,537✓ verified onlyrecent popular risk

18,044 exploits

GitHub PoC★ 10

CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware11 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Exploits for CVE-2020-5902 POC

CVE-2020-5902CRITICALunder attackransomware11 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 5

Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface (TMUI) arbitrary file read and command execution vulnerabilities.

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 62

F5 BIG-IP RCE CVE-2020-5902 automatic check tool

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 2

批量检测CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 88

Citrix ADC Vulns

CVE-2020-8193MEDIUMunder attack10 Jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISK

open ↗

GitHub PoC

修改的poc，适用于python3

CVE-2019-19781CRITICALunder attackransomware09 Jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 2

Script para validar CVE-2020-5902 hecho en Go.

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

SharpHack/CVE-2019-19781

CVE-2019-19781CRITICALunder attackransomware09 Jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 1

Shu1L/CVE-2020-5902-fofa-scan

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 4

F5 Big-IP CVE-2020-5902 mass exploiter/fuzzer.

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Simple Vulnerability Checker Wrote by me "@TheCyberViking" and A fellow Researcher who wanted to be left Nameless... you know who you are you beautiful bitch

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

A powershell script to check vulnerability CVE-2020-5902 of ip list

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

F5 BIG IP Scanner for CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 6

It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

dnerzker/CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 13

F5 BIG-IP 任意文件读取+远程命令执行RCE

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

POC

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

k3nundrum/CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Any3ite/CVE-2020-5902-F5BIG

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

F5 mass scanner and CVE-2020-5902 checker

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 4

F5 BIG-IP Scanner (CVE-2020-5902)

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Scan from a given list for F5 BIG-IP and check for CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

Python script to check CVE-2020-5902 (F5 BIG-IP devices).

CVE-2020-5902CRITICALunder attackransomware06 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 10

批量扫描CVE-2020-5902，远程代码执行，已测试

CVE-2020-5902CRITICALunder attackransomware06 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 2

CVE-2020-5902 scanner

CVE-2020-5902CRITICALunder attackransomware06 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 8

sv3nbeast/CVE-2020-5902_RCE

CVE-2020-5902CRITICALunder attackransomware06 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 43

exploit code for F5-Big-IP (CVE-2020-5902)

CVE-2020-5902CRITICALunder attackransomware06 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Patch F5 appliance CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware06 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

dummy poc

CVE-2020-5902CRITICALunder attackransomware06 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.