CVE-2006-20001

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.

• https://github.com/Saksham2002/CVE-2006-20001

CVE-2006-6184

Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long filename in a (1) GET or (2) PUT command.

• https://github.com/shauntdergrigorian/cve-2006-6184

• https://github.com/b03902043/CVE-2006-6184

CVE-2006-5051

Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.

• https://github.com/bigb0x/CVE-2024-6387

• https://github.com/ThemeHackers/CVE-2024-6387

• https://github.com/sardine-web/CVE-2024-6387_Check

CVE-2006-4814

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.

• https://github.com/tagatac/linux-CVE-2006-4814

CVE-2006-4777

Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.

• https://github.com/Mario1234/js-driveby-download-CVE-2006-4777

CVE-2006-3747

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.

• https://github.com/defensahacker/CVE-2006-3747

CVE-2006-3592

Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to execute arbitrary commands with elevated privileges via unspecified vectors, involving "certain CLI commands," aka bug CSCse11005.

• https://github.com/adenkiewicz/CVE-2006-3592

CVE-2006-3392

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from the filename. NOTE: This is a different issue than CVE-2006-3274.

• https://github.com/IvanGlinkin/CVE-2006-3392

• https://github.com/brosck/CVE-2006-3392

• https://github.com/oxagast/oxasploits

• https://github.com/g1vi/CVE-2006-3392

• https://github.com/0xtz/CVE-2006-3392

• https://github.com/Adel-kaka-dz/CVE-2006-3392

• https://github.com/kernel-cyber/CVE-2006-3392

• https://github.com/gb21oc/ExploitWebmin

CVE-2006-2842

** DISP

• https://github.com/karthi-the-hacker/CVE-2006-2842

CVE-2006-1236

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.

• https://github.com/Axua/CVE-2006-1236

CVE-2006-0987

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.

• https://github.com/pcastagnaro/dns_amplification_scanner

CVE-2006-0450

phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering many users through profile.php or (2) using search.php to search in a certain way that confuses the database.

• https://github.com/Parcer0/CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities