Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

76,559cataloged exploits

34,978CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,443Referência 21,899GitHub PoC 13,960VulnCheck XDB 8,542Nuclei 4,243Metasploit 3,472✓ verified onlyrecent popular risk

13,960 exploits

GitHub PoC★ 8

Scanning for CVE-2020-8193 - Auth Bypass check

CVE-2020-8193MEDIUMunder attack13 Jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISK

open ↗

GitHub PoC★ 3

TeamViewer Store Credentials Decryption

CVE-2019-18988HIGHunder attack13 Jul 2020

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif

86RISK

open ↗

GitHub PoC★ 45

Citrix ADC从权限绕过到RCE

CVE-2020-8193MEDIUMunder attack12 Jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISK

open ↗

GitHub PoC

freeFV/CVE-2020-5902-fofa-scan

CVE-2020-5902CRITICALunder attackransomware12 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 6

This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerability CVE-2020-8193, CVE-2020-8195 and CVE-2020-8196 (disclosed July 08, 2020).

CVE-2020-8193MEDIUMunder attack12 Jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISK

open ↗

GitHub PoC

momika233/cve-2020-5902

CVE-2020-5902CRITICALunder attackransomware12 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Exploits for CVE-2020-5902 POC

CVE-2020-5902CRITICALunder attackransomware11 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 10

CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware11 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 88

Citrix ADC Vulns

CVE-2020-8193MEDIUMunder attack10 Jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISK

open ↗

GitHub PoC★ 2

批量检测CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 5

Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface (TMUI) arbitrary file read and command execution vulnerabilities.

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 62

F5 BIG-IP RCE CVE-2020-5902 automatic check tool

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Simple Vulnerability Checker Wrote by me "@TheCyberViking" and A fellow Researcher who wanted to be left Nameless... you know who you are you beautiful bitch

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

Shu1L/CVE-2020-5902-fofa-scan

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 4

F5 Big-IP CVE-2020-5902 mass exploiter/fuzzer.

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

修改的poc，适用于python3

CVE-2019-19781CRITICALunder attackransomware09 Jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 2

Script para validar CVE-2020-5902 hecho en Go.

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

SharpHack/CVE-2019-19781

CVE-2019-19781CRITICALunder attackransomware09 Jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 6

It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

dnerzker/CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

A powershell script to check vulnerability CVE-2020-5902 of ip list

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 13

F5 BIG-IP 任意文件读取+远程命令执行RCE

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

F5 BIG IP Scanner for CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Scan from a given list for F5 BIG-IP and check for CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

F5 mass scanner and CVE-2020-5902 checker

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

POC

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 4

F5 BIG-IP Scanner (CVE-2020-5902)

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

k3nundrum/CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Any3ite/CVE-2020-5902-F5BIG

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware06 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.