F5 Networks BIG-IP : BIND vulnerability (K000163234)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163234 advisory. An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enou...

CVE-2023-46747

CVE-2023-46747 An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs This is an script indented forto exploit the Remote code Execution on Vulnerable f5-BIG Ip products Installation: root@kitploit: git clone...

CVE-2022-1388

Vuln Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. Vuln Product F5 BIG-IQ 11.6.1 - 11.6.5 F5 BIG-IP...

F5-BIG-IP-RCE-CVE-2022-1388

CVE-2022-1388 F5 BIG-IP RCE Detección Multihilo uso： root@kitploit: 单个url: python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx 批量多线程: python3 CVE-2022-1388.py -f url.txt 执行命令: python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx -c whoami resultado:...

CVE-2020-5902

Summary In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Credits: Mikhail...

CVE-2022-1388-Scanner

Escáner F5 CVE-2022-1388 Escáner de vulnerabilidad BIG-IP iControl REST CVE-2022-1388 Uso root@kitploit: pip install -r requirements.txt pytohn3 CVE-2022-1388-Scanner.py Solicitud root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive,...

test_cve-2023-46747

Python script to test if a F5 BIG-IP is vulnerable for CVE-2023-46747. When vulnerable a user account with administrator rights is added. To mitigate this vulnerability, see: https://my.f5.com/manage/s/article/K000137353...

CVE-202122986-EXP

F5 BIG-IP Remote Command Execution Vulnerability CVE-2021-22986 Affected Versions F5 BIG-IP 16.x: 16.1.0.3 F5 BIG-IP 15.x: 15.1.0.4 F5 BIG-IP 14.x: 14.1.2.6 F5 BIG-IP 13.x: 13.1.3.4 F5 BIG-IP 12.x: 12.1.5.2 F5 BIG-IP 11.x: 11.6.5.2 fofa iconhash="-335242539" POC root@kitploit: POST...

f5_rce_poc

Uso root@kitploit: python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 El efecto es el siguiente: root@kitploit: python3 f5rce.py -u 127.0.0.1 --ssrf Después de ejecutar el comando, ingrese exit para salir PD: La salida no es lo suficientemente estética, lo modificaré 😁...

F5 BIG-IP - Unauthenticated RCE via AJP Smuggling

CVE-2023-46747 is a critical severity authentication bypass vulnerability in F5 BIG-IP that could allow an unauthenticated attacker to achieve remote code execution RCE. The vulnerability impacts the BIG-IP Configuration utility, also known as the TMUI, wherein arbitrary requests can bypass...

CVE-2020-5902

CVE-2020-5902 Script de Python para verificar CVE-2020-5902 dispositivos F5 BIG-IP. Uso root@kitploit: python3 CVE-2020-5902.py -i Salida root@kitploit: - Script de Python para verificar CVE-2020-5902 dispositivos F5 BIG-IP. | codificado por Abdullah AlZahrani ! Tu objetivo: 127.0.0.1 I /etc/pass...

CVE-2022-1388

CVE-2022-1388 PoC para CVE-2022-1388 que afecta a F5 BIG-IP. Uso root@kitploit: $ ./poc.sh --help Usage: poc.sh --help --file FILE --scan --exploit --payload PAYLOAD CVE-2022-1388 PoC script. One or multiple IPs can be scanned. Arguments: --help Show this help message and exit. --file FILE File...

MINI-F5R9-8Q5M-VQVJ

Bulletin has no description...

F5 Networks BIG-IP : BIND vulnerability (K000163212)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163212 advisory. If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for...

K000162872: Out-of-band Security Notification (September 2, 2026)

Security Advisory Description On September 2, 2026, F5 announced the following security issues. This document is intended to serve as an index of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associated...

K000163171: Linux kernel netfilter vulnerability CVE-2026-53000

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfreercu to release ops Florian Westphal says: "Historically this is not an issue, even for normal base hooks: the data path doesn't use the original nfhookops that are used to...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000161728)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000161728 advisory. A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker ...

F5 Networks BIG-IP : BIG-IP and BIG-IQ Configuration utility vulnerability (K000162521)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.0.0.3 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000162521 advisory. BIG-IP has a vulnerability where an authenticated user of any role may be able to create...

K000163156: Multiple libssh vulnerabilties

Security Advisory Description CVE-2026-15370 A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names...

F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000163141)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163141 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator th...