Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits

40,961CVEs with public exploitation

24,696lab-tested

All Referência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecent popular risk

26,571 exploits

Referência✓ VexDay Proof

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-1776—webappsphp

PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote atta

28RISK

open ↗

Referência✓ VexDay Proof

SysInfo 1.21 - 'sysinfo.cgi' Remote Command Execution

CVE-2006-1832—webappscgi

sysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the debugger action.

23RISK

open ↗

Referência✓ VexDay Proof

Fuju News 1.0 - Authentication Bypass / SQL Injection

CVE-2006-1837—webappsphp

SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands vi

23RISK

open ↗

Referência✓ VexDay Proof

Fuju News 1.0 - Authentication Bypass / SQL Injection

CVE-2006-1838—webappsphp

edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.

23RISK

open ↗

Referência✓ VexDay Proof

Blackorpheus ClanMemberSkript 1.0 - SQL Injection

CVE-2006-1917—webappsphp

SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbitr

23RISK

open ↗

Referência✓ VexDay Proof

IBM Director < 5.10 - 'Redirect.bat' Directory Traversal

CVE-2006-4681—remotewindows

Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

Telekorn Signkorn Guestbook 1.3 - 'dir_path' Remote File Inclusion

CVE-2006-4788—webappsphp

PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, whe

23RISK

open ↗

Referência✓ VexDay Proof

openmovieeditor 0.0.20060901 - 'name' Local Buffer Overflow

CVE-2006-4789—locallinux

Buffer overflow in Open Movie Editor 0.0.20060901 allows local users to cause a denial of service (system crash) or exec

23RISK

open ↗

Referência✓ VexDay Proof

MobilePublisherPHP 1.5 RC2 - Remote File Inclusion

CVE-2006-4849—webappsphp

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers

23RISK

open ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2L - 'com_contact' Remote Code Execution

CVE-2006-4859—webappsphp

Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mam

23RISK

open ↗

Referência✓ VexDay Proof

Techno Dreams Articles & Papers 2.0 - SQL Injection

CVE-2006-4891—webappsasp

SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows r

23RISK

open ↗

Referência✓ VexDay Proof

CMtextS 1.0 - '/users_logins/admin.txt' Credentials Disclosure

CVE-2006-4897—webappsphp

CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, whic

23RISK

open ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting / SQL Injection Code Execution

CVE-2006-4960—webappsphp

Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to injec

23RISK

open ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 3.0.0 - Remote Code Execution

CVE-2006-4962—webappsphp

Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read

23RISK

open ↗

Referência✓ VexDay Proof

SolidState 0.4 - Multiple Remote File Inclusions

CVE-2006-5020—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbit

28RISK

open ↗

Referência✓ VexDay Proof

Mambo Component Security Images 3.0.5 - Remote File Inclusion

CVE-2006-5048—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier f

28RISK

open ↗

Referência✓ VexDay Proof

SyntaxCMS 1.3 - '0004_init_urls.php' Remote File Inclusion

CVE-2006-5055—webappsphp

PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows

23RISK

open ↗

Referência✓ VexDay Proof

BrudaNews 1.1 - '/admin/index.php' Remote File Inclusion

CVE-2006-5068—webappsphp

PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.

23RISK

open ↗

Referência✓ VexDay Proof

Polaring 0.04.03 - 'general.php' Remote File Inclusion

CVE-2006-5078—webappsphp

PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remot

23RISK

open ↗

Referência✓ VexDay Proof

paBugs 2.0 Beta 3 - 'class.mysql.php' Remote File Inclusion

CVE-2006-5079—webappsphp

PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote

23RISK

open ↗

Referência✓ VexDay Proof

evoBB 0.3 - 'path' Remote File Inclusion

CVE-2006-5087—webappsphp

Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary

23RISK

open ↗

Referência✓ VexDay Proof

PHP Krazy Image Hosting 0.7a - 'display.php' SQL Injection

CVE-2006-5140—webappsphp

SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote at

23RISK

open ↗

Referência✓ VexDay Proof

Newswriter SW 1.4.2 - 'main.inc.php' Remote File Inclusion

CVE-2006-5180—webappsphp

PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.

23RISK

open ↗

Referência

CVE-2006-5190

CVE-2006-5190—

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISK

open ↗

Referência

CVE-2006-5190

CVE-2006-5190—

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISK

open ↗

Referência

CVE-2006-5191

CVE-2006-5191—

PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for

23RISK

open ↗

Referência✓ VexDay Proof

WebYep 1.1.9 - 'webyep_sIncludePath' File Inclusion

CVE-2006-5220—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attac

28RISK

open ↗

Referência✓ VexDay Proof

mxBB Module kb_mods 2.0.2 - Remote File Inclusion

CVE-2006-6568—webappsphp

Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allow

23RISK

open ↗

Referência✓ VexDay Proof

vBlog / C12 0.1 - 'cfgProgDir' Remote File Inclusion

CVE-2006-6586—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers t

23RISK

open ↗

Referência✓ VexDay Proof

TorrentFlux 2.2 - 'maketorrent.php' Remote Command Execution

CVE-2006-6599—webappsphp

maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharact

23RISK

open ↗

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.