Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

76.559exploits catalogados

34.978CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8542Nuclei 4243Metasploit 3472✓ solo verificadosrecientes populares riesgo

13.960 exploits

GitHub PoC★ 2

cve-2020-5902 POC exploit

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 1

BIG-IP F5 Remote Code Execution

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 43

exploit code for F5-Big-IP (CVE-2020-5902)

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 36

Python script to exploit F5 Big-IP CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 1

Zinkuth/F5-BIG-IP-CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 2

CVE-2020-5902 scanner

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 8

sv3nbeast/CVE-2020-5902_RCE

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 1

Python script to check CVE-2020-5902 (F5 BIG-IP devices).

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC

Patch F5 appliance CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 10

批量扫描CVE-2020-5902，远程代码执行，已测试

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 1

dummy poc

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 1

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware06 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 55

Automated script for F5 BIG-IP scanner (CVE-2020-5902) using hosts retrieved from Shodan API.

CVE-2020-5902CRITICALbajo ataqueransomware05 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 8

nsflabs/CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware05 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 374

CVE-2020-5902 BIG-IP

CVE-2020-5902CRITICALbajo ataqueransomware05 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 12

POC code for checking for this vulnerability. Since the code has been released, I decided to release this one as well. Patch Immediately!

CVE-2020-5902CRITICALbajo ataqueransomware05 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 71

Proof of concept for CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware05 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 8

rwincey/CVE-2020-5902-NSE

CVE-2020-5902CRITICALbajo ataqueransomware05 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC★ 9

CVE-2020-5902

CVE-2020-5902CRITICALbajo ataqueransomware04 jul 2020

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic

100RIESGO

GitHub PoC

Simple OpenSSL TLS Heartbeat (CVE-2014-0160) Scanner and Exploit (Multiple SSL/TLS versions)

CVE-2014-0160HIGHbajo ataque04 jul 2020

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

GitHub PoC

Kenun99/CVE-2019-16113-Dockerfile

CVE-2019-16113—03 jul 2020

Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j

60RIESGO

GitHub PoC★ 17

The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947

CVE-2020-14947—02 jul 2020

OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php bec

28RIESGO

GitHub PoC★ 2

reversebrain/CVE-2019-18988

CVE-2019-18988HIGHbajo ataque01 jul 2020

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif

86RIESGO

GitHub PoC★ 1

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure (Python3)

CVE-2006-3392—30 jun 2020

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RIESGO

GitHub PoC★ 19

CVE-2013-2028 python exploit

CVE-2013-2028—27 jun 2020

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau

60RIESGO

GitHub PoC

cyberharsh/Shellbash-CVE-2014-6271

CVE-2014-6271CRITICALbajo ataque26 jun 2020

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC★ 1

cyberharsh/DrupalCVE-2018-7602

CVE-2018-7602CRITICALbajo ataqueransomware25 jun 2020

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RIESGO

GitHub PoC

cyberharsh/Tomcat-CVE-2017-12615

CVE-2017-12615HIGHbajo ataqueransomware24 jun 2020

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati

100RIESGO

GitHub PoC★ 1

cyberharsh/Oracle-mysql-CVE-2012-2122

CVE-2012-2122—24 jun 2020

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor

60RIESGO

GitHub PoC

cyberharsh/Php-unit-CVE-2017-9841

CVE-2017-9841CRITICALbajo ataque24 jun 2020

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.