CVE-2022-1388

CVE-2022-1388 - F5 BIG-IP iControl REST Bypass dell'autenticazione e RCE Questo script Python sfrutta CVE-2022-1388, una vulnerabilità critica in F5 BIG-IP iControl REST che consente l'esecuzione remota di comandi senza autenticazione tramite un controllo degli accessi improprio e una gestione no...

CVE-2022-1388

CVE-2022-1388 Vulnerabilità REST iControl di BIG-IP CVE-2022-1388 Utilizzo Questa POC è verificata! root@kitploit: curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' ...

CVE-2022-1388

Vulnerabilità BIG-IP iControl REST CVE-2022-1388 PoC Questa vulnerabilità potrebbe consentire a un attaccante non autenticato con accesso di rete al sistema BIG-IP tramite la porta di gestione e/o gli indirizzi self IP di eseguire comandi di sistema arbitrari, creare o eliminare file o disabilita...

CVE-2021-22986-Poc

CVE-2021-22986-Poc Questo è un PoC per l'RCE non autenticata di BIGIP iControl. POC : curl -ksu admin:redacted https://192.168.123.134/mgmt/tm/access/bundle-install-tasks -d '"filePath":"id"' | jq . curl -ksu : https://192.168.123.134/mgmt/shared/authn/login -d...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Template Nuclei CVE-2022-1388 - Esposizione REST iControl BIG-IP 6 maggio 2022 Questo verifica solo la presenza dell'API raggiungendo l'endpoint di autenticazione Questa vulnerabilità potrebbe consentire a un attaccante non autenticato con accesso di rete al sistema BIG-IP attraverso la porta di...

CVE-2026-42058

An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-42058

CVE-2026-42058 affects BIG-IP iControl REST. An authenticated attacker can make undisclosed requests to iControl REST and leak usernames of BIG-IP local user accounts. Impact is limited to control plane; no data-plane exposure reported. CVSS scores: v3.1 base 4.3 (MEDIUM) with NETWORK attack vect...

CVE-2026-42058 BIG-IP iControl REST vulnerability

An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

EUVD-2024-39167

Malicious code in bioql PyPI...

CVE-2025-23239

CVE-2025-23239 affects BIG-IP iControl REST. In Appliance mode, an authenticated user with high privileges can exploit an undisclosed iControl REST endpoint to execute arbitrary commands, crossing a security boundary. Impact is command injection on the control plane with administrator-like privil...