Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

79,211cataloged exploits
36,421CVEs with public exploitation
24,695lab-tested
AllExploit-DB 24,464Referência 23,022GitHub PoC 15,027VulnCheck XDB 8,846Nuclei 4,361Metasploit 3,491✓ verified onlyrecentpopularrisk
5,629 exploits
Referência✓ VexDay Proof
Polaring 0.04.03 - 'general.php' Remote File Inclusion
CVE-2006-5078—webappsphp
PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remot
23RISK
open ↗
Referência✓ VexDay Proof
paBugs 2.0 Beta 3 - 'class.mysql.php' Remote File Inclusion
CVE-2006-5079—webappsphp
PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote
23RISK
open ↗
Referência✓ VexDay Proof
evoBB 0.3 - 'path' Remote File Inclusion
CVE-2006-5087—webappsphp
Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary
23RISK
open ↗
Referência✓ VexDay Proof
A-Blog 2.0 - 'menu.php' Remote File Inclusion
CVE-2006-5092—webappsphp
PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary
23RISK
open ↗
Referência✓ VexDay Proof
TagIt! Tagboard 2.1.b b2 - 'index.php' Remote File Inclusion
CVE-2006-5093—webappsphp
PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows re
23RISK
open ↗
Referência✓ VexDay Proof
Linksys WRT54G Firmware 1.00.9 - Security Bypass (2)
CVE-2006-5202—remotehardware
Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attac
23RISK
open ↗
Referência✓ VexDay Proof
Invision Gallery 2.0.7 - 'readfile()' / SQL Injection
CVE-2006-5206—webappsphp
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the
23RISK
open ↗
Referência✓ VexDay Proof
SHTTPD 1.34 - 'POST' Remote Buffer Overflow
CVE-2006-5216—remotewindows
Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary cod
50RISK
open ↗
Referência✓ VexDay Proof
Millewin 13.39.146.1 - Local Privilege Escalation
CVE-2021-3394—localwindows
Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per
23RISK
open ↗
Referência✓ VexDay Proof
Dimension of phpBB 0.2.6 - 'phpbb_root_path' Remote File Inclusions
CVE-2006-5222—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to exe
23RISK
open ↗
Referência✓ VexDay Proof
FreeForum 0.9.7 - 'forum.php' Remote File Inclusion
CVE-2006-5230—webappsphp
PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute a
23RISK
open ↗
Referência✓ VexDay Proof
Ciamos CMS 0.9.6b - 'config.php' Remote File Inclusion
CVE-2006-5257—webappsphp
PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System (CMS) 0.
23RISK
open ↗
Referência✓ VexDay Proof
compteur 2.0 - 'param_editor.php' Remote File Inclusion
CVE-2006-5259—webappsphp
PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execute arbitrary P
23RISK
open ↗
Referência✓ VexDay Proof
PHPMyNews 1.4 - 'cfg_include_dir' Remote File Inclusion
CVE-2006-5261—webappsphp
Multiple PHP remote file inclusion vulnerabilities in PHPMyNews 1.4 and earlier allow remote attackers to execute arbitr
23RISK
open ↗
Referência✓ VexDay Proof
Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)
CVE-2006-5296—doswindows
PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record
28RISK
open ↗
Referência✓ VexDay Proof
phpBB lat2cyr Mod 1.0.1 - 'lat2cyr.php' Remote File Inclusion
CVE-2006-5305—webappsphp
PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attac
23RISK
open ↗
Referência✓ VexDay Proof
Open Conference Systems 1.1.4 - 'fullpath' File Inclusion
CVE-2006-5308—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers
23RISK
open ↗
Referência✓ VexDay Proof
TribunaLibre 3.12 Beta - 'ftag.php' Remote File Inclusion
CVE-2006-5314—webappsphp
PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitra
23RISK
open ↗
Referência✓ VexDay Proof
registroTL - 'main.php' Remote File Inclusion
CVE-2006-5315—webappsphp
PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code
23RISK
open ↗
Referência✓ VexDay Proof
eboli - 'index.php' Remote File Inclusion
CVE-2006-5317—webappsphp
PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via
23RISK
open ↗
Referência✓ VexDay Proof
Album Photo Sans Nom 1.6 - Remote Source Disclosure
CVE-2006-5320—webappsphp
Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary fi
23RISK
open ↗
Referência✓ VexDay Proof
phpBB PlusXL 2.0_272 - 'constants.php' Remote File Inclusion
CVE-2006-5387—webappsphp
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module
23RISK
open ↗
Referência✓ VexDay Proof
PHPht Topsites - 'common.php' Remote File Inclusion
CVE-2006-5458—webappsphp
PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute
23RISK
open ↗
Referência✓ VexDay Proof
Open Meetings Filing Application - Remote File Inclusion
CVE-2006-5517—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote
23RISK
open ↗
Referência✓ VexDay Proof
EZ-Ticket 0.0.1 - 'common.php' Remote File Inclusion
CVE-2006-5523—webappsphp
PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PH
23RISK
open ↗
Referência✓ VexDay Proof
PHP-Nuke 7.9 - 'Encyclopedia' SQL Injection
CVE-2006-5525—webappsphp
Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL in
23RISK
open ↗
Referência✓ VexDay Proof
Fully Modded phpBB 2021.4.40 - Multiple File Inclusions
CVE-2006-5526—webappsphp
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 202
23RISK
open ↗
Referência✓ VexDay Proof
OTSCMS 2.1.3 - Multiple Remote File Inclusions
CVE-2006-5548—webappsphp
PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 2.0
23RISK
open ↗
Referência✓ VexDay Proof
RevilloC MailServer 1.x - 'RCPT TO' Remote Denial of Service
CVE-2006-5552—doswindows
Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier allow remote attackers to cause a denial of
23RISK
open ↗
Referência✓ VexDay Proof
Imageview 5 - '/Cookie/index.php' Local/Remote File Inclusion
CVE-2006-5554—webappsphp
Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local
23RISK
open ↗
← previouspage 100 / 188next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.