Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.765exploits catalogados

35.760CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8703Nuclei 4319Metasploit 3476✓ solo verificadosrecientes populares riesgo

77.772 exploits

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 7

Reverse Shell for CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 1

POC of CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 6

CVE-2022-1388-PocExp,新增了多线程,F5 BIG-IP RCE exploitation

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 1

CVE-2007-2447

CVE-2007-2447—10 may 2022

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

abrir ↗

GitHub PoC★ 1

0xAgun/CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 5

PoC For F5 BIG-IP - bash script Exploit one Liner

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 5

Angus-Team/F5-BIG-IP-RCE-CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 6

CVE-2022-1388 is an authentication bypass vulnerability in the REST component of BIG-IP’s iControl API that was assigned a CVSSv3 score of 9.8. The iControl REST API is used for the management and configuration of BIG-IP devices. CVE-2022-1388 could be exploited by an unauthenticated attacker with network access to the management port or self IP addresses of devices that use BIG-IP. Exploitation would allow the attacker to execute arbitrary system commands, create and delete files and disable services.

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC

lowkey0808/cve-2020-25540

CVE-2020-25540—10 may 2022

ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on

60RIESGO

abrir ↗

GitHub PoC

Satheesh575555/external_expat_AOSP10_r33_CVE-2022-23852

CVE-2022-23852CRITICAL10 may 2022

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_

48RIESGO

abrir ↗

GitHub PoC★ 147

Atlassian Bitbucket Data Center RCE(CVE-2022-26133) verification.

CVE-2022-26133CRITICAL09 may 2022

SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and l

70RIESGO

abrir ↗

GitHub PoC

Trinadh465/device_renesas_kernel_AOSP10_r33_CVE-2022-0492

CVE-2022-0492HIGHbajo ataque09 may 2022

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

86RIESGO

abrir ↗

GitHub PoC

Hudi233/CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 37

CVE-2022-1388 F5 BIG-IP iControl REST RCE

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 59

Exploit and Check Script for CVE 2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 7

CVE-2022-1388 F5 Big IP unauth remote code execution

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 87

F5 BIG-IP RCE exploitation (CVE-2022-1388)

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-1388 POC exploit

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 84

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 1

batch scan CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 57

PoC for CVE-2022-1388_F5_BIG-IP

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 230

POC for CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Metasploit300

Icingaweb Directory Traversal in Static Library File Requests

CVE-2022-24716HIGH09 may 2022

Path traversal in Icinga Web 2

78RIESGO

abrir ↗

GitHub PoC★ 8

F5 BIG-IP iControl REST身份验证绕过漏洞

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 2

CVE-2022-1388 F5 BIG-IP iControl REST身份验证绕过漏洞

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

GitHub PoC★ 25

Generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection.

CVE-2021-44228CRITICALbajo ataqueransomware09 may 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

abrir ↗

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.