Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

SAP-CVE-2025-31324 POC A tool to detect and exploit a critica...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324-NUCLEI Nuclei template for...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

PoC - CVE-2025-31324 [email protected] Exploit de prueba par...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Vulnerability and Indicator of Compromise IoC Scanner for CV...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 CVE-2025-31324, SAP Exploit POST /developme...

SAP NetWeaver Flaw Scores 10.0 Severity as Hackers Deploy Web Shells

A critical vulnerability CVE-2025-31324 in SAP NetWeaver Visual Composer puts systems at risk of full compromise. Learn how…...

SAP NetWeaver Visual Composer Metadata Uploader Improper Authorization (CVE-2025-31324) (Direct Check)

Binary data sapnetweaverCVE-2025-31324.nbin...

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

CVE-2025-31324 Missing Authorization check in SAP NetWeaver (Visual Composer development server)

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

CVE-2024-31324

creationtimestamp| type| source ---|---|--- 2025-03-15 15:45:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7683...

CVE-2021-31324

creationtimestamp| type| source ---|---|--- 2025-01-16 09:29:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-31324.yaml 2025-01-20 21:01:59+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad57fo42d...

CVE-2024-31324

CVE-2024-31324 affects Android Framework due to a tapjacking/overlay bypass in WindowState.java. The issue can be triggered by starting an activity in portrait, then rotating to landscape, enabling local elevation of privilege with user interaction required. The entry notes exploitation is possib...

CVE-2022-31324

creationtimestamp| type| source ---|---|--- 2022-09-14 02:25:55+00:00| seen| https://t.me/cibsecurity/49748...

CVE-2022-31324

CVE-2022-31324 (WAPPLES) : A vulnerability in Penta Security Systems Inc WAPPLES (version 6.0 r3 4.10-hotfix1) within the downloadAction() function allows an attacker to download arbitrary files via a crafted POST request. This is stated across multiple sources (NVD, Red Hat advisory, CVE lists) ...

CentOS Web Panel SQL Injection (CVE-2021-31316; CVE-2021-31324)

An SQL injection vulnerability exists in CentOS Web Panel. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2021-31324

The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution...

CVE-2021-31324

The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution...

CVE-2021-31324

The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution...

CVE-2021-31324

CentOS Web Panel’s unprivileged User Portal is affected by a Command Injection vulnerability (CVE-2021-31324). The Nuclei templates describe exploitation via the idsession parameter, allowing unauthenticated attackers to execute arbitrary OS commands with root privileges, leading to full server c...