Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,107cataloged exploits

36,322CVEs with public exploitation

24,695lab-tested

All Exploit-DB 24,464Referência 22,936GitHub PoC 15,010VulnCheck XDB 8,846Nuclei 4,361Metasploit 3,490✓ verified onlyrecent popular risk

79,107 exploits

VulnCheck XDB

initial-access

CVE-2020-8193MEDIUMunder attack12 Jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2020-8193MEDIUMunder attack12 Jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISK

open ↗

GitHub PoC

Exploits for CVE-2020-5902 POC

CVE-2020-5902CRITICALunder attackransomware11 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 10

CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware11 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2020-5902CRITICALunder attackransomware11 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

VulnCheck XDB

infoleak

CVE-2020-8193MEDIUMunder attack10 Jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISK

open ↗

Exploit-DB

Aruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command Execution

CVE-2020-7115—remotelinux10 Jul 2020

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon succ

35RISK

open ↗

GitHub PoC★ 2

批量检测CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 88

Citrix ADC Vulns

CVE-2020-8193MEDIUMunder attack10 Jul 2020

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14

100RISK

open ↗

GitHub PoC★ 5

Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface (TMUI) arbitrary file read and command execution vulnerabilities.

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 62

F5 BIG-IP RCE CVE-2020-5902 automatic check tool

CVE-2020-5902CRITICALunder attackransomware10 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

SharpHack/CVE-2019-19781

CVE-2019-19781CRITICALunder attackransomware09 Jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

Exploit-DB

CompleteFTP Professional 12.1.3 - Remote Code Execution

CVE-2019-16116—remotewindows09 Jul 2020

EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file.

23RISK

open ↗

GitHub PoC★ 4

F5 Big-IP CVE-2020-5902 mass exploiter/fuzzer.

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

修改的poc，适用于python3

CVE-2019-19781CRITICALunder attackransomware09 Jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2019-19781CRITICALunder attackransomware09 Jul 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISK

open ↗

GitHub PoC★ 2

Script para validar CVE-2020-5902 hecho en Go.

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

Simple Vulnerability Checker Wrote by me "@TheCyberViking" and A fellow Researcher who wanted to be left Nameless... you know who you are you beautiful bitch

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

Shu1L/CVE-2020-5902-fofa-scan

CVE-2020-5902CRITICALunder attackransomware09 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

A powershell script to check vulnerability CVE-2020-5902 of ip list

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 13

F5 BIG-IP 任意文件读取+远程命令执行RCE

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

Exploit-DB

BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery (Change Password)

CVE-2020-14944—webappshardware08 Jul 2020

Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can all

23RISK

open ↗

GitHub PoC★ 6

It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

Exploit-DB

SuperMicro IPMI 03.40 - Cross-Site Request Forgery (Add Admin)

CVE-2020-15046—webappshardware08 Jul 2020

The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to

23RISK

open ↗

GitHub PoC

dnerzker/CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC★ 1

F5 BIG IP Scanner for CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

VulnCheck XDB

initial-access

CVE-2020-5902CRITICALunder attackransomware08 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

GitHub PoC

k3nundrum/CVE-2020-5902

CVE-2020-5902CRITICALunder attackransomware07 Jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RISK

open ↗

Metasploit500

FreeBSD ip6_setpktopt Use-After-Free Privilege Escalation

CVE-2020-7457—07 Jul 2020

In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 1

30RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.