Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.713exploits catalogados

39.298CVEs con explotación pública

24.695probados en laboratorio

Todos Referência 25.379Exploit-DB 24.485GitHub PoC 16.200VulnCheck XDB 9648Nuclei 4478Metasploit 3523✓ solo verificadosrecientes populares riesgo

82.877 exploits

GitHub PoC★ 1

An unauthenticated attacker can send an HTTP request with an "Accept-Encoding" HTTP request header triggering a double free in the unknown coding-list inside the HTTP Protocol Stack (http.sys) to process packets, resulting in a kernel crash.

CVE-2022-21907CRITICAL10 may 2022

HTTP Protocol Stack Remote Code Execution Vulnerability

70RIESGO

GitHub PoC★ 6

CVE-2022-1388 is an authentication bypass vulnerability in the REST component of BIG-IP’s iControl API that was assigned a CVSSv3 score of 9.8. The iControl REST API is used for the management and configuration of BIG-IP devices. CVE-2022-1388 could be exploited by an unauthenticated attacker with network access to the management port or self IP addresses of devices that use BIG-IP. Exploitation would allow the attacker to execute arbitrary system commands, create and delete files and disable services.

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

GitHub PoC★ 4

A Test API for testing the POC against CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

GitHub PoC★ 1

POC of CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

GitHub PoC★ 7

Reverse Shell for CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

GitHub PoC★ 1

Test and Exploit Scripts for CVE 2022-1388 (F5 Big-IP)

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

GitHub PoC★ 5

Angus-Team/F5-BIG-IP-RCE-CVE-2022-1388

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

GitHub PoC★ 1

CVE-2007-2447

CVE-2007-2447—10 may 2022

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware10 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

GitHub PoC★ 30

Proof of concept exploit for CVE-2022-30525 (Zxyel firewall command injection)

CVE-2022-30525CRITICALbajo ataque10 may 2022

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pat

100RIESGO

GitHub PoC★ 25

Generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection.

CVE-2021-44228CRITICALbajo ataqueransomware09 may 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

VulnCheck XDB

initial-access

CVE-2022-1388CRITICALbajo ataqueransomware09 may 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.