Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
89.220 exploits
remote-with-credentials
CVE-2023-38408CRITICAL24 jan 2026
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot
70RISCO
remote-with-credentials
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
info-leak
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
GitHub PoC
xitexploiter96-dot/CVE-2023-38408
CVE-2023-38408CRITICAL24 jan 2026
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot
70RISCO
abrir ↗
GitHub PoC
For HTB practice
CVE-2022-44268MEDIUM24 jan 2026
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RISCO
abrir ↗
GitHub PoC
CVE-2026-24061 - GNU InetUtils telnetd authentication bypass POC + Docker lab environment for testing
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
GitHub PoC★ 4
CVE-2026-24061 - GNU InetUtils Telnetd Remote Authentication Bypass
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
GitHub PoC
BrainBob/CVE-2026-24061
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
GitHub PoC
GNU Inetutils telnetd Remote Authentication Bypass
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
GitHub PoC
ranasen-rat/cve-2021-42013
CVE-2021-42013CRITICALsob ataqueransomware24 jan 2026
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISCO
abrir ↗
GitHub PoC
BrainBob/Telnet-TestVuln-CVE-2026-24061
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
GitHub PoC★ 4
Docker setup for CVE-2026-24061
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
initial-access
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
GitHub PoC★ 1
A secure, zero-trust database management tool for WordPress. Fixes critical SSRF vulnerabilities (CVE-2021-21311) by enforcing local connections only.
CVE-2021-21311HIGHsob ataque24 jan 2026
SSRF in adminer
100RISCO
abrir ↗
initial-access
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
GitHub PoC
z3n70/CVE-2026-24061
CVE-2026-24061CRITICALsob ataque24 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
initial-access
CVE-2025-2294CRITICAL23 jan 2026
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
85RISCO
GitHub PoC
CVE-2025-52691 PoC: Based on watchtowr's article WT-2026-0001 about an authentication bypass exploit, this one is a functional Python attack script.
CVE-2025-52691CRITICALsob ataqueransomware23 jan 2026
Upload Arbitrary Files
100RISCO
abrir ↗
GitHub PoC
Replica of CVE-2019-15715 in Python3
CVE-2019-15715—23 jan 2026
MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.
35RISCO
abrir ↗
initial-access
CVE-2026-24061CRITICALsob ataque23 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
GitHub PoC★ 4
inetutils-telnetd Authentication Bypass - working
CVE-2026-24061CRITICALsob ataque23 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
GitHub PoC★ 3
xuemian168/CVE-2026-24061
CVE-2026-24061CRITICALsob ataque23 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
GitHub PoC★ 6
Proof of Concept: CVE-2026-24061 is a critical authentication bypass vulnerability in GNU inetutils-telnetd allowing unauthenticated remote attackers to gain instant root shell access via malicious NEW_ENVIRON telnet option exploitation.
CVE-2026-24061CRITICALsob ataque23 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
GitHub PoC
CVE-2026-24061 环境
CVE-2026-24061CRITICALsob ataque23 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
initial-access
CVE-2026-24061CRITICALsob ataque23 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
initial-access
CVE-2026-24061CRITICALsob ataque23 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
remote-with-credentials
CVE-2026-23760CRITICALsob ataqueransomware23 jan 2026
SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
100RISCO
initial-access
CVE-2026-24061CRITICALsob ataque23 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
initial-access
CVE-2026-24061CRITICALsob ataque23 jan 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
initial-access
CVE-2025-52691CRITICALsob ataqueransomware23 jan 2026
Upload Arbitrary Files
100RISCO
← anteriorpágina 353 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.