Latest Vulnerabilities with Public Exploits

Updated 3h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

369,794 CVEs tracked 55,257 with exploits 5,135 exploited in wild 1,654 CISA KEV 4,260 Nuclei templates 56,269 vendors 49,311 researchers

55,257 results Clear all

CVE-2006-6590 1 PoC Analysis EPSS 0.02

AR Memberscript - Remote File Inclusion via script_folder Parameter

PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitrary PHP code via a URL in the script_folder parameter.

Dec 15, 2006 STIX 2.1

CVE-2006-6569 1 PoC Analysis EPSS 0.03

GenesisTrader 1.0 - Info Disclosure

form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive information via the (1) do and (2) chem parameters with a "modfich" floap parameter.

Dec 15, 2006 STIX 2.1

CVE-2006-6571 1 PoC Analysis EPSS 0.02

GenesisTrader 1.0 - Cross-Site Scripting via form.php Parameters

Multiple cross-site scripting (XSS) vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cuve, (2) chem, (3) do, and possibly other parameters.

Dec 15, 2006 STIX 2.1

CVE-2006-6612 1 PoC Analysis EPSS 0.03

phpmycms 0.3 - Remote File Inclusion via basic.inc.php basepath_start Parameter

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath_start parameter.

Dec 18, 2006 STIX 2.1

CVE-2006-6558 1 PoC Analysis EPSS 0.06

Crob FTP Server 3.6.1 b.263 - Denial of Service via Long LIST Command

Crob FTP Server 3.6.1 b.263 allows remote attackers to cause a denial of service via a long series of "?A" sequences in the (1) LIST and possibly (2) NLST command.

Dec 14, 2006 STIX 2.1

CVE-2006-6628 1 PoC Analysis EPSS 0.04

OpenOffice.org 2.1 - Denial of Service via Crafted DOC File

Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted DOC file, as demonstrated by the 12122006-djtest.doc file, a variant of CVE-2006-6561 in a separate codebase.

Dec 18, 2006 STIX 2.1

CVE-2006-6567 1 PoC Analysis EPSS 0.04

mxBB kb_mods - Remote File Inclusion via module_root_path Parameter

PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

Dec 15, 2006 STIX 2.1

CVE-2006-6568 1 PoC Analysis EPSS 0.04

mxBB Knowledge Base Module 2.0.2 - Directory Traversal via phpEx Parameter

Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the phpEx parameter.

Dec 15, 2006 STIX 2.1

CVE-2006-6552 1 PoC Analysis EPSS 0.03

BLOG:CMS <= 4.1.3 - Remote File Inclusion via DIR_ADMIN Parameter

PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DIR_ADMIN parameter.

Dec 14, 2006 STIX 2.1

CVE-2006-6553 1 PoC Analysis EPSS 0.03

mxbb_newssuite 1.03 - Remote File Inclusion via mx_root_path Parameter

PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the NewsSuite 1.03 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.

Dec 14, 2006 STIX 2.1

CVE-2006-6560 1 PoC Analysis EPSS 0.02

MxBB (MX-System) Portal <mx_modsdb 1.0.0 - RCE

PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Portal allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

Dec 14, 2006 STIX 2.1

CVE-2006-6845 1 PoC Analysis EPSS 0.02

CMS Made Simple 1.0.2 - Cross-Site Scripting via cntnt01searchinput Parameter

Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action.

Dec 31, 2006 STIX 2.1

CVE-2006-6611 1 PoC Analysis EPSS 0.03

Barman 0.0.1r3 - Remote File Inclusion via basepath Parameter

PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter.

Dec 18, 2006 STIX 2.1

CVE-2006-6615 1 PoC Analysis EPSS 0.02

mxBB Activity Games Module 0.92 - Remote File Inclusion via module_root_path Parameter

PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

Dec 18, 2006 STIX 2.1

CVE-2006-6538 1 PoC Analysis EPSS 0.03

D-LINK DWL-2000AP+ firmware 2.11 - DoS

D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of ARP replies on the wired or wireless (radio) link and (2) a denial of service (device crash) via a flood of ARP requests on the wireless link.

Dec 14, 2006 STIX 2.1

CVE-2006-6545 1 PoC Analysis EPSS 0.02

PHP ErrorDocs 1.0.0 - Remote File Inclusion via module_root_path Parameter

PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB (mx_errordocs) allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.

Dec 14, 2006 STIX 2.1

CVE-2006-6613 1 PoC Analysis EPSS 0.02

phpAlbum <0.4.1 Beta 6 - Path Traversal

Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. (dot dot) in the pa_lang[include_file] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.

Dec 18, 2006 STIX 2.1

CVE-2006-5645 1 PoC Analysis EPSS 0.17

Sophos Anti-Virus and Endpoint Security < 6.0.5 - Denial of Service via Malformed RAR Archive

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.

CWE-399 Nov 01, 2006 STIX 2.1

CVE-2006-5646 1 PoC Analysis EPSS 0.17

Sophos Anti-Virus and Endpoint Security < 6.0.5 - Heap-Based Buffer Overflow via CHM LZX Decompression

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0.

CWE-119 Nov 01, 2006 STIX 2.1

CVE-2006-5647 1 PoC Analysis EPSS 0.21

Sophos Anti-Virus and Endpoint Security < 6.0.5 - Remote Code Execution via Malformed CHM File

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk header, aka "CHM name length memory consumption vulnerability."

CWE-119 Nov 01, 2006 STIX 2.1

Latest Vulnerabilities with Public Exploits

Investigate

Ecosystems

Reference Indexes

Recent Blog Posts

CVEForge Labs

KEV Gaps