13374 matches found
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: virtio-net: The issue of checking the received length in large packets has been fixed. Since commit 4959aebba8c0 “virtio-net: Use the MTU size as the buffer length for large packets”, when the guest gso is disabled, the allocated...
Astra Linux – Vulnerability in WebKit2GTK
“Clear History and Website Data” did not successfully clear the browsing history. The issue was resolved through improved data deletion mechanisms. This issue has been fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3, and iPadOS 14.3, as we...
webshell
webshell 简体中文 This is a webshell collection project Give someone a rose, there is a fragrance in your hand if you download this project, please also submit a shell This project covers various common scripts Such as: asp, aspx, php, jsp, pl, py If you submit a webshell, please do not change the na...
CVE-2023-4220-HTB-PermX
Chamilo-LMS-CVE-2023-4220-Exploit Description This exploit demonstrates an Unrestricted file upload vulnerability in Chamilo-LMS. The vulnerability affects the big file upload functionality located at: root@kitploit: /main/inc/lib/javascript/bigupload/inc/bigUpload.php Affected Versions : Chamilo...
CVE-2022-1388
CVE-2022-1388 https://support.f5.com/csp/article/K23605346 Esta vulnerabilidad podría permitir que un atacante no autenticado, a través del puerto de administración y/o su propia dirección IP, acceda a la red del sistema BIG-IP para ejecutar comandos arbitrarios del sistema, crear o eliminar...
CVE-2022-1388
shodan search 'http.html:"BIG-IP Configuration Utility"' --fields=ipstr,port --separator ":" --limit 10 | grep '' shodan search 'http.title:"BIG-IP®-+Redirect"+"Server"' --fields=ipstr,port --separator ":" --limit 10 | grep '' CVE-2022-1388 Escáner CVE-2022-1388 Uso $python3 CVE-2022-1388-V1.1.py...
CVE-2020-5903
CVE-2020-5902 RCE /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=delete+cli+alias+private+list /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=create+cli+alias+private+list+command+bash...
F5 iControl REST - Remote Command Execution
F5 iControl REST interface is susceptible to remote command execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. This affects BIG-IP 16.0.x before 16.0.1.1, 15.1.x before...
CVE-2020-5902
CVE-2020-5902 Python script to check CVE-2020-5902 F5 BIG-IP devices. Usage root@kitploit: python3 CVE-2020-5902.py -i Output root@kitploit: - Python script to check CVE-2020-5902 F5 BIG-IP devices. | coded by Abdullah AlZahrani ! Your target: 127.0.0.1 I /etc/passwd readable PoC...
CVE-2022-1388
CVE-2022-1388 Vulnerabilidad RCE no autenticada en F5 BIG-IP Vulnerabilidad RCE de omisión de autenticación de F5 BIG-IP iControl REST fofa keywords: title="BIG-IP- Redirect" uso ataque root@kitploit: $ python3 cve-2022-1388.py -t https://203.xxx.xxx.xxx + https://203.xxx.xxx.xxx is vulnerable...
CVE-2022-1388
CVE-2022-1388 PoC para CVE-2022-1388 que afecta a F5 BIG-IP. Uso root@kitploit: $ ./poc.sh --help Usage: poc.sh --help --file FILE --scan --exploit --payload PAYLOAD CVE-2022-1388 PoC script. One or multiple IPs can be scanned. Arguments: --help Show this help message and exit. --file FILE File...
CVE-2022-1388_refresh
CVE-2022-1388 - refresh PoC para explotar CVE-2022-1388 en BigIP F5 Uso del Exploit root@kitploit: python3 refresh.py -h usage: refresh.py -h -u URL -f F -c CMD -s SH optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD,...
CVE-2020-5902
CVE-2020-5902 exploit code for F5-Big-IP CVE-2020-5902 Summary In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE...
CVE-2023-4220-Proof-of-concept
CVE-2023-4220-Prueba-de-concepto Chamilo LMS: Carga de archivos grandes no autenticada que permite ejecución remota de código EL CÓDIGO ESTÁ HECHO Y USADO PARA HACKTHEBOX CTF PERMX Carga de archivo no autenticada en la funcionalidad de carga de archivos grandes en...
CVE-2025-31644
CVE-2025-31644: Inyección de Comandos en Appliance mode en F5 BIG-IP El parámetro “file” del comando “save” es vulnerable a un ataque de inyección de comandos, permitiendo que un atacante autenticado con privilegios de administrador a la API web “/mgmt” o al shell SSH “tmsh”, obtenga ejecución...
CVE-2024-21793
CVE-2024-21793 De https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/...
CVE-2020-5902-F5BIG
CVE-2020-5902-F5BIG Simplemente ejecuta el comando como 👇 root@kitploit: go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m R -f /etc/issue or go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m C...
CVE-2022-1388
CVE-2022-1388 This repository conssists of the python exploit code for CVE-2022-1388 F5's BIG-IP RCE usage: exploit.py -h -t TARGET -p PORT -c CMD --ssl options: -h, --help show this help message and exit -t TARGET, --target TARGET Specify the IP Address/Domain Name of the vulnerable server -p...
westone-CVE-2022-1388-scanner
westone-CVE-2022-1388-scanner Las solicitudes no divulgadas pueden omitir la autenticación REST de iControl. Instalación y Uso git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2022-1388-scanner cmd CVE-2022-1388.exe...