Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

81.179exploits catalogados

37.765CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.482Referência 24.138GitHub PoC 15.540VulnCheck XDB 9.080Nuclei 4.434Metasploit 3.505✓ só verificadosrecentes populares risco

15.540 exploits

GitHub PoC★ 6

CVE-2022-1388 is an authentication bypass vulnerability in the REST component of BIG-IP’s iControl API that was assigned a CVSSv3 score of 9.8. The iControl REST API is used for the management and configuration of BIG-IP devices. CVE-2022-1388 could be exploited by an unauthenticated attacker with network access to the management port or self IP addresses of devices that use BIG-IP. Exploitation would allow the attacker to execute arbitrary system commands, create and delete files and disable services.

CVE-2022-1388CRITICALsob ataqueransomware10 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 5

Angus-Team/F5-BIG-IP-RCE-CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware10 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 1

Test and Exploit Scripts for CVE 2022-1388 (F5 Big-IP)

CVE-2022-1388CRITICALsob ataqueransomware10 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 4

A Test API for testing the POC against CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware10 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 7

Reverse Shell for CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware10 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 1

POC of CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware10 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 2

CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC

Trinadh465/device_renesas_kernel_AOSP10_r33_CVE-2022-0492

CVE-2022-0492HIGHsob ataque09 mai 2022

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

86RISCO

GitHub PoC★ 2

CVE-2022-1388 POC exploit

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 1

batch scan CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 56

PoC for CVE-2022-1388_F5_BIG-IP

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 37

CVE-2022-1388 F5 BIG-IP iControl REST RCE

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 84

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 87

F5 BIG-IP RCE exploitation (CVE-2022-1388)

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC

Hudi233/CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 8

F5 BIG-IP iControl REST身份验证绕过漏洞

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 2

CVE-2022-1388 F5 BIG-IP iControl REST身份验证绕过漏洞

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 25

Generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection.

CVE-2021-44228CRITICALsob ataqueransomware09 mai 2022

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 231

POC for CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 59

Exploit and Check Script for CVE 2022-1388

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 7

CVE-2022-1388 F5 Big IP unauth remote code execution

CVE-2022-1388CRITICALsob ataqueransomware09 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 147

Atlassian Bitbucket Data Center RCE(CVE-2022-26133) verification.

CVE-2022-26133CRITICAL09 mai 2022

SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and l

70RISCO

GitHub PoC★ 48

CVE-2022-24734 PoC

CVE-2022-24734HIGH08 mai 2022

Remote code execution in mybb

78RISCO

GitHub PoC

Files required to demonstrate CVE-2022-0847 vulnerability in Linux Kernel v5.8

CVE-2022-0847HIGHsob ataque08 mai 2022

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

GitHub PoC★ 8

blind-intruder/CVE-2022-1388-RCE-checker-and-POC-Exploit

CVE-2022-1388CRITICALsob ataqueransomware08 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC

A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.

CVE-2022-1388CRITICALsob ataqueransomware07 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC

Just proof of concept for Cisco CVE-2020-3452. Using external or internal file base.

CVE-2020-3452HIGHsob ataque07 mai 2022

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RISCO

GitHub PoC★ 92

CVE-2022-1388 F5 BIG-IP RCE 批量检测

CVE-2022-1388CRITICALsob ataqueransomware07 mai 2022

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

GitHub PoC★ 1

cve-2022-29464 EXP

CVE-2022-29464CRITICALsob ataqueransomware07 mai 2022

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

100RISCO

GitHub PoC★ 2

fuzzing with libFuzzer，inlude openssl heartbleed (CVE-2014-0160)

CVE-2014-0160HIGHsob ataque07 mai 2022

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.