24 matches found
CVE-2025-31324
CVE-2025-31324 Proof-of-Concept 0day für SAP NetWeaver erstellt von ShinyHunters CVE-2025-31324 ist eine kritische Sicherheitslücke vom Typ "Unrestricted File Upload", die den SAP NetWeaver Application Server AS Java betrifft. Genauer gesagt befindet sie sich in der Visual Composer-Komponente...
SAP-CVE-2025-31324
SAP-CVE-2025-31324 POC Ein Tool zur Erkennung und Ausnutzung einer kritischen, nicht authentifizierten Datei-Upload-Schwachstelle in SAP NetWeaver Visual Composer. Beschreibung SAP NetWeaver Visual Composer enthält eine Komponente namens Metadata Uploader, der die ordnungsgemäßen...
CVE-2025-31324_PoC_SAP
CVE-2025-31324PoC Proof-of-Concept für CVE-2025-31324: Unauthentifizierter Upload im SAP NetWeaver Visual Composer Metadata Uploader Dieses Skript führt Folgendes aus: 1. Datei-Upload an den verwundbaren Endpunkt über Upload-Host/Port 2. Optionaler Trigger via HTTP GET über Trigger-Host/Port 3...
CVE-2025-31324-File-Upload
CVE-2025-31324-Datei-Upload Ein völlig unauthentifizierter Datei-Upload-Endpunkt in Visual Composer erlaubt es jedem, beliebige Dateien z.B. eine JSP-Web-Shell auf den Server zu legen. Proof-of-concept-Tool zur Überprüfung und Ausnutzung der unauthentifizierten Datei-Upload-Schwachstelle...
CVE-2025-31324_PoC
CVE-2025-31324PoC Proof-of-Concept für CVE-2025-31324: Unangemeldeter Upload im SAP NetWeaver Visual Composer Metadata Uploader Dieses Skript führt Folgendes aus: 1. Datei-Upload an den verwundbaren Endpunkt über Upload-Host/Port 2. Optionaler Trigger über HTTP GET über Trigger-Host/Port 3...
Onapsis_CVE-2025-31324_Scanner_Tools
Scanner für Schwachstellen und Kompromittierungsindikatoren IoC für CVE-2025-31324 Schwachstelle im Visual-Composer-Metadata-Uploader CVE-2025-31324 ist eine kritische Schwachstelle CVSSv3 10, die SAP-NetWeaver-Systeme betrifft, insbesondere die Komponente Visual Composer Metadata-Uploader. Diese...
CVE-2025-31324
🔴 CVE-2025-31324 — SAP NetWeaver Visual Composer Unauthenticated File Upload Type: Proof of Concept — Vulnerability Research CVE: CVE-2025-31324 CVSS: 10.0 Critical AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Status: Patched — SAP Security Note 3594142 + 3604119 Added to CISA KEV: May 2025 ⚠️ Este PoC...
CVE-2025-31324
CVE-2025-31324 Ein Proof of Concept, entwickelt zur Ausnutzung von CVE-2025-31324. Usage usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show this help...
Burp_CVE-2025-31324
CVE-2025-31324 Burp Suite Erweiterung Überblick Diese auf Python basierende Burp Suite Erweiterung wurde entwickelt, um das Vorhandensein von CVE-2025-31324 zu erkennen, einer kritischen Schwachstelle in der Metadaten-Upload-Komponente des SAP NetWeaver Visual Composers. Die Schwachstelle...
📄 SAP NetWeaver 7.50 Visual Composer Metadata Shell Upload
SAP NetWeaver Visual Composer contains an unauthenticated file upload vulnerability in the metadata uploader component that allows attackers to upload arbitrary files including JSP web shells and WAR applications, leading to remote code execution on the SAP server. The vulnerability exists in the...
SAP NetWeaver Visual Composer Metadata Uploader Installed
Binary data sapnwmduinstalled.nbin...
SAP NetWeaver Visual Composer Metadata Uploader Deserialization Vulnerability
SAP NetWeaver Visual Composer Metadata Uploader is a component in SAP NetWeaver for uploading metadata. A deserialization vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader that originates from deserializing malicious content, which can be exploited by an attacker to cause a...
SAP Netweaver Visual Composer Multiple Vulnerabilities (May 2025)
SAP NetWeaver Visual Composer is affected by multiple vulnerabilities, including the following: - SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of...
CVE-2025-42999
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...
SAP NetWeaver Visual Composer Metadata Uploader 安全漏洞
SAP NetWeaver Visual Composer Metadata Uploader is a component in SAP NetWeaver for uploading metadata. A deserialization vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader that originates from deserializing malicious content, which can be exploited by an attacker to cause a...
PT-2025-20812
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The Metadata Uploader function of the Visual Composer tool in SAP NetWeaver contains a flaw in its deserialization mechanism. Deserialization is the process of converting a data stream...
CVE-2025-42999: Deserialization of Untrusted Data
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...
CVE-2025-42999
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system. Recent assessments: Assessed Attacker...
Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324
On Thursday, April 24, enterprise resource planning company SAP published a CVE and a day later, an advisory behind login for CVE-2025-31324, a zero-day vulnerability in NetWeaver Visual Composer that carries a CVSSv3 score of 10. The vulnerability arises from a missing authorization check in...
