Latest Vulnerabilities with Public Exploits

Updated 4h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

370,064 CVEs tracked 55,263 with exploits 5,136 exploited in wild 1,655 CISA KEV 4,264 Nuclei templates 56,284 vendors 49,330 researchers
55,263 results Clear all
CVE-2006-5485 1 PoC Analysis EPSS 0.03
SpeedBerg 1.2beta1 - Remote File Inclusion via SPEEDBERG_PATH Parameter
Multiple PHP remote file inclusion vulnerabilities in SpeedBerg 1.2beta1 allow remote attackers to execute arbitrary PHP code via a URL in the SPEEDBERG_PATH parameter to (1) entrancePage.tpl.php, (2) generalToolBox.tlb.php, (3) myToolBox.tlb.php, (4) scriplet.inc.php, (5) simplePage.tpl.php, (6) speedberg.class.php, and (7) standardPage.tpl.php.
Oct 24, 2006 STIX 2.1
CVE-2006-5517 1 PoC Analysis EPSS 0.09
Rhode Island Open Meetings Filing System - Remote Code Execution via PROJECT_ROOT Parameter
Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) editmeetings/session.php, (2) email/session.php, (3) entityproperties/session.php, or (4) inc/mail.php.
CWE-94 Oct 26, 2006 STIX 2.1
CVE-2006-5518 1 PoC Analysis EPSS 0.10
RSSonate - Remote File Inclusion via PROJECT_ROOT Parameter
Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) xml2rss.php, (2) config_local.php, (3) rssonate.php, and (4) sql2xml.php in Src/getFeed/inc/.
Oct 26, 2006 STIX 2.1
CVE-2006-5522 1 PoC Analysis EPSS 0.03
Johannes Erdfelt Kawf < 1.0 - Remote File Inclusion via Config Parameter
Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config parameter in (1) main.php or (2) user/account/main.php.
Oct 26, 2006 STIX 2.1
CVE-2006-5495 1 PoC Analysis EPSS 0.04
Trawler Web CMS < 1.8.1 - Remote File Inclusion via Multiple PHP Script Parameters
Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_red2 parameter to (a) _msdazu_pdata/redaktion/artikel/up/index.php; (b) addtort.php, (c) colorpik2.php, (d) colorpik3.php, (e) extras_menu.php, (f) farbpalette.php, (g) lese_inc.php, and (h) newfile.php in _msdazu_share/richtext/; the (2) path_scr_dat2 parameter to (i)_msdazu_share/share/insert1.php; the (3) path_red parameter to (j) _msdazu_share/extras/downloads/index.php; and unspecified parameters in other files.
Oct 25, 2006 STIX 2.1
CVE-2006-5480 1 PoC Analysis EPSS 0.03
Castor PHP Web Builder 1.1.1 - Remote Code Execution via rootpath Parameter
PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary PHP code via the rootpath parameter.
CWE-94 Oct 24, 2006 STIX 2.1
CVE-2006-5514 1 PoC Analysis EPSS 0.01
Web Group Communication Center < 0.5.6b - SQL Injection via quiz.php qzid Parameter
SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attackers to execute arbitrary SQL commands via the qzid parameter.
Oct 26, 2006 STIX 2.1
CVE-2006-5446 1 PoC Analysis EPSS 0.01
Casinosoft Casino Script 3.2 - SQL Injection via cfam Parameter
SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter.
Oct 23, 2006 STIX 2.1
CVE-2006-5423 1 PoC Analysis EPSS 0.02
Lou Portail 1.4.1 - Remote File Inclusion via g_admin_rep Parameter
PHP remote file inclusion vulnerability in admin/admin_module.php in Lou Portail 1.4.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the g_admin_rep parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Oct 20, 2006 STIX 2.1
CVE-2006-7106 1 PoC Analysis EPSS 0.02
powerphlogger < 2.0.9 - Remote Code Execution via rel_path Parameter
PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter.
CWE-94 Mar 03, 2007 STIX 2.1
CVE-2006-5722 1 PoC Analysis EPSS 0.02
Segue CMS < 1.5.9 - Remote File Inclusion via Theme Parameter
Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to (1) themesettings.php or (2) index.php, a different vector than CVE-2006-5497. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Nov 04, 2006 STIX 2.1
CVE-2006-5555 1 PoC Analysis EPSS 0.03
EPNadmin 0.7 and 0.7.1 - Remote File Inclusion via Langage Parameter
PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execute arbitrary PHP code via the langage parameter.
Oct 26, 2006 STIX 2.1
CVE-2006-5503 1 PoC Analysis EPSS 0.02
Simple Machines Forum 1.1 RC2 - Cross-Site Scripting via Index.php Action Parameter
Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Oct 25, 2006 STIX 2.1
CVE-2006-5510 1 PoC Analysis EPSS 0.03
PH Pexplorer < 0.24 - Directory Traversal via Language Cookie
Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via ".." sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code.
Oct 25, 2006 STIX 2.1
CVE-2006-5494 1 PoC Analysis EPSS 0.03
PHP-Nuke pandaBB module - Remote Code Execution via adminpath or basepath Parameter
Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters. NOTE: this issue might overlap CVE-2006-6795.
CWE-94 Oct 25, 2006 STIX 2.1
CVE-2006-5497 1 PoC Analysis EPSS 0.03
Segue CMS < 1.5.7 - Remote File Inclusion via themesdir Parameter
PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter.
Oct 25, 2006 STIX 2.1
CVE-2006-5444 1 PoC Analysis EPSS 0.85
Asterisk 1.0.x-1.0.11 and 1.2.x-1.2.12 - Remote Code Execution via Skinny Channel Driver Integer Overflow
Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads to a heap-based buffer overflow.
Oct 23, 2006 STIX 2.1
CVE-2006-5436 1 PoC Analysis EPSS 0.02
FreeFAQ 1.0.e - Remote File Inclusion via faqpath Parameter
PHP remote file inclusion vulnerability in index.php in FreeFAQ 1.0.e allows remote attackers to execute arbitrary PHP code via a URL in the faqpath parameter.
Oct 20, 2006 STIX 2.1
CVE-2006-5431 1 PoC Analysis EPSS 0.02
Zorum < 3.5 - Remote File Inclusion via appDirName Parameter
PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appDirName parameter.
Oct 20, 2006 STIX 2.1
CVE-2006-6633 1 PoC Analysis EPSS 0.02
YapBB < 1.2_beta2 - Remote File Inclusion via GLOBALS[include_Bit] Parameter
PHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[include_Bit] parameter.
Dec 18, 2006 STIX 2.1

Investigate

Critical + Public Exploits Exploited in Wild + PoC High EPSS (>=0.7) + PoC With Nuclei Templates Latest CVEs with Public Exploits

Ecosystems

Linux Maven Packagist PyPI npm Go ecosystem RubyGems crates.io NuGet Hex SwiftURL GitHub Actions

Reference Indexes

Exploit Database Researchers Vendors CWE Categories

Recent Blog Posts

CVE-2026-41702: Forty-Seven Microseconds in /var/run/vmware/cnx-tmp
May 17, 2026
Hermes Agent with EIP Harness: The Vulnerability Research Assistant That Also Runs Your Pipelines
May 13, 2026
CVE-2026-41940: cPanel & WHM Pre-Auth RCE - Two Write Paths, One Filter
May 01, 2026
EIP STIX 2.1 / TAXII 2.1 Feed: Exploit Intelligence for Your Stack
Apr 29, 2026
CVE-2026-35414: Three Bugs, One Commit, and Two More Nobody Mentioned
Apr 03, 2026
WP Google Map Plugin - Three Weak Links, One Critical Chain
Mar 29, 2026
 View all posts →

CVEForge Labs

CVE-2026-45829 CRITICAL
ChromaDB >=1.0.0 - Unauthenticated Remote Code Execution via Malicious Model Repository
CVE-2026-42859 HIGH
Neat VNC: Buffer overflow due to oversized RSA public keys
CVE-2026-3296 CRITICAL
Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata
CVE-2026-34980 HIGH
OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network
CVE-2026-35414 MEDIUM
OpenSSH < 10.3 - Always-Incorrect Control Flow Implementation in Authorized Keys Principals Handling
CVE-2026-33765 CRITICAL
Pi-hole Web <6.0 savesettings.php - Command Injection
CVE-2026-4105 MEDIUM
Red Hat Enterprise Linux 10 - Improper Access Control via systemd-machined RegisterMachine D-Bus Method
CVE-2026-30861 CRITICAL
WeKnora 0.2.5-0.2.9 - Unauthenticated Remote Code Execution via MCP stdio Configuration Validation Bypass
CVE-2026-30860 CRITICAL
WeKnora <0.2.12 - RCE via SQL Injection
CVE-2026-28391 CRITICAL
OpenClaw <2026.2.2 - Command Injection
 View all labs →

KEV Gaps

CVE-2026-16812
VeloCloud Orchestrator OS Command Injection
 CVE-2025-68686
Fortinet FortiOS <7.6.1 - Info Disclosure
 CVE-2021-27137
Dd-wrt < 45724 - Stack-based Buffer Overflow
 CVE-2026-58644
Microsoft SharePoint Remote Code Execution Vulnerability
 CVE-2023-4346
KNX Connection Authorization - Device Lockout Denial of Service
 CVE-2026-56155
Microsoft Windows 10 Version 1607 - Active Directory Federation Services Elevation of Privilege Vulnerability
 CVE-2026-12569
PTC Windchill PDMLink and FlexPLM - Deserialization Remote Code Execution
 CVE-2026-34910
Ubiquiti INC UniFi OS Server - Improper Input Validation
 CVE-2026-34909
Ubiquiti INC UniFi OS Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CVE-2026-48027
Compromised Nx Console version 18.95.0
 CVE-2026-8398
DAEMON Tools Lite 12.5.0.2421-12.5.0.2434 - Embedded Malicious Code in Trojanized Installer
 CVE-2009-1537
Microsoft DirectX 7.0-9.0c - Remote Code Execution via QuickTime Movie Parser Filter