Lucene search
+L

36 matches found

Kitploit
Kitploit
•added 2026/09/22 5:26 a.m.•18 views

oracle-xxe-sqli

oracle-xxe-sqli SQLインジェクションを介したOracle CVE-2014-6577の自動悪用 使用方法: root@kitploit: oracle-xxe-sqli.py -h -i IP -p PORT --disable-server --custom-headers CUSTOMHEADERS -f PAYLOADFILE url Options positional arguments: url URL to inject. Use as the injection marker, just once. optional arguments: -h,...

6.8CVSS6.4AI score0.03528EPSS
SaveExploits1
Circl
Circl
•added 2026/09/12 10:00 a.m.•14 views

CVE-2025-6577

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:05+00:00| seen| https://t.me/shimiscyberworld/1424 2026-09-12 10:00:07+00:00| seen| https://t.me/shimiscyberworld/1381 2026-09-13 00:00:51+00:00| seen| https://t.me/shimiscyberworld/1381 2026-09-13 00:00:55+00:00| seen|...

9.8CVSS5.7AI score0.0026EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/12 9:31 a.m.•34 views

CVE-2025-6577

CVE-2025-6577 : Affects Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website before version 4.5.001 . Root cause: improper neutralization of special elements used in SQL commands leading to an SQL Injection vulnerability. Severity: CVSS v3.1 v3.1 base score 9.8 (CRITICAL) with high i...

9.8CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Circl
Circl
•added 2026/04/19 9:15 p.m.•10 views

CVE-2026-6577

creationtimestamp| type| source ---|---|--- 2026-04-19 21:15:12+00:00| published-proof-of-concept| Telegram/ufJM6PGgYCZvMYI9YNw2SbGN8uW-GB10f-lGfe46lAW4 2026-04-19 21:29:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjuvjsryko2e 2026-04-19 23:53:28+00:00| seen|...

7.5CVSS7.3AI score0.00654EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/19 7:30 p.m.•13 views

CVE-2026-6577 liangliangyy DjangoBlog logtracks Endpoint views.py missing authentication

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS6.6AI score0.00654EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/19 7:30 p.m.•7 views

CVE-2026-6577

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS5.3AI score0.00654EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/04/19 7:30 p.m.•57 views

CVE-2026-6577 liangliangyy DjangoBlog logtracks Endpoint views.py missing authentication

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS0.00654EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2018-6577

Malware in sbrugna...

6.1CVSS6.7AI score0.00647EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 2:04 a.m.•17 views

CVE-2023-6577

A vulnerability was found in Byzoro PatrolFlow 2530Pro up to 20231126. It has been rated as problematic. This issue affects some unknown processing of the file /log/mailsendview.php. The manipulation of the argument file with the input /boot/phpConfig/tbadmin.txt leads to path traversal. The atta...

4.3CVSS6.8AI score0.01185EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:46 p.m.•21 views

CVE-2020-6577

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

9.8CVSS7.5AI score0.01552EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:19 a.m.•21 views

CVE-2019-6577

A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...

5.4CVSS5.8AI score0.00876EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/20 10:10 a.m.•35 views

CVE-2024-6577 Unclaimed S3 Bucket Usage in pytorch/serve

In the latest version of pytorch/serve, the script 'uploadresultstos3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthorized access to the bucket if it is not...

6.3CVSS0.00388EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/01/11 12:00 a.m.•34 views

Ubuntu: Security Advisory (USN-6577-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS7.1AI score0.11151EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/10 12:00 a.m.•39 views

Ubuntu 16.04 ESM : Linux kernel (AWS) vulnerabilities (USN-6577-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6577-1 advisory. Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from divisio...

6.4CVSS7.4AI score0.11151EPSS
SaveExploits0References3
Circl
Circl
•added 2023/12/30 4:02 p.m.•12 views

CVE-2023-6577

creationtimestamp| type| source ---|---|--- 2023-12-30 16:02:19+00:00| seen| https://t.me/ctinow/160910...

4.3CVSS5.8AI score0.01185EPSS
SaveExploits1References1
CVE
CVE
•added 2023/12/07 8:31 p.m.•72 views

CVE-2023-6577

CVE-2023-6577 affects Byzoro PatrolFlow 2530Pro up to 20231126. The issue is a path traversal vulnerability in the /log/mailsendview.php endpoint, triggered by manipulating the file argument with input such as /boot/phpConfig/tb_admin.txt. This can lead to remote access to restricted paths. Multi...

4.3CVSS4.6AI score0.01185EPSS
SaveExploits1References4Affected Software1
Check Point Advisories
Check Point Advisories
•added 2021/04/11 12:00 a.m.•50 views

Zen Cart IT-Recht Kanzlei Plugin SQL Injection (CVE-2020-6577)

An SQL injection vulnerability exists in Zen Cart IT-Recht Kanzlei Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS10AI score0.01552EPSS
SaveExploits1
Circl
Circl
•added 2021/03/19 6:32 a.m.•16 views

CVE-2020-6577

creationtimestamp| type| source ---|---|--- 2021-03-19 06:32:50+00:00| seen| https://t.me/cibsecurity/25162...

9.8CVSS8.7AI score0.01552EPSS
SaveExploits1References1
NVD
NVD
•added 2021/03/19 4:15 a.m.•31 views

CVE-2020-6577

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

9.8CVSS0.01552EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/03/19 3:25 a.m.•39 views

CVE-2020-6577

The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c German edition allows itrk-api.php rechtstextlanguage SQL Injection...

9.7AI score0.01552EPSS
SaveExploits1References2
Rows per page
Query Builder