CVE-2025-31324_PoC

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader This script performs: 1. File upload to the vulnerable endpoint via Upload host/port 2. Optional trigger via HTTP GET via Trigger host/port 3. Basic response...

SAP-CVE-2025-31324

SAP-CVE-2025-31324 POC Ein Tool zur Erkennung und Ausnutzung einer kritischen, nicht authentifizierten Datei-Upload-Schwachstelle in SAP NetWeaver Visual Composer. Beschreibung SAP NetWeaver Visual Composer enthält eine Komponente namens Metadata Uploader, der die ordnungsgemäßen...

CVE-2025-31324_PoC_SAP

CVE-2025-31324PoC Prova di concetto per CVE-2025-31324: Caricamento non autenticato in SAP NetWeaver Visual Composer Metadata Uploader Questo script esegue: 1. Caricamento del file sull'endpoint vulnerabile tramite host/porta di Upload 2. Trigger opzionale tramite HTTP GET tramite host/porta di...

Onapsis_CVE-2025-31324_Scanner_Tools

Scanner per vulnerabilità e indicatore di compromissione IoC per CVE-2025-31324 Vulnerabilità di Visual Composer Metadata Uploader CVE-2025-31324 è una vulnerabilità critica CVSSv3 10 che colpisce i sistemi SAP NetWeaver, in particolare il componente Visual Composer Metadata Uploader. Questa...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day per SAP NetWeaver creato da ShinyHunters CVE-2025-31324 è una vulnerabilità critica di "Caricamento di file senza restrizioni" che colpisce il server applicativo SAP NetWeaver AS Java. In particolare, risiede nel componente Visual Composer VCFRAMEWORK. La fall...

CVE-2025-31324

CVE-2025-31324 Uma prova de conceito desenvolvida para explorar CVE-2025-31324. Uso root@kitploit: usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show...

CVE-2025-31324-File-Upload

CVE-2025-31324-Caricamento-File Un endpoint di caricamento file del tutto non autenticato in Visual Composer permette a chiunque di caricare file arbitrari ad esempio, una web-shell JSP sul server. Strumento proof-of-concept per verificare e sfruttare la vulnerabilità di caricamento file non...

Burp_CVE-2025-31324

Extensão Burp Suite CVE-2025-31324 Visão Geral Esta extensão do Burp Suite baseada em Python foi projetada para detectar a presença da CVE-2025-31324 , uma vulnerabilidade crítica no componente Metadata Uploader do SAP NetWeaver Visual Composer. A vulnerabilidade permite a execução remota de códi...

📄 SAP NetWeaver 7.50 Visual Composer Metadata Shell Upload

SAP NetWeaver Visual Composer contains an unauthenticated file upload vulnerability in the metadata uploader component that allows attackers to upload arbitrary files including JSP web shells and WAR applications, leading to remote code execution on the SAP server. The vulnerability exists in the...

SAP NetWeaver Visual Composer Metadata Uploader Installed

Binary data sapnwmduinstalled.nbin...

SAP NetWeaver Visual Composer Metadata Uploader Deserialization Vulnerability

SAP NetWeaver Visual Composer Metadata Uploader is a component in SAP NetWeaver for uploading metadata. A deserialization vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader that originates from deserializing malicious content, which can be exploited by an attacker to cause a...

SAP Netweaver Visual Composer Multiple Vulnerabilities (May 2025)

SAP NetWeaver Visual Composer is affected by multiple vulnerabilities, including the following: - SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of...

CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...

SAP NetWeaver Visual Composer Metadata Uploader 安全漏洞

SAP NetWeaver Visual Composer Metadata Uploader is a component in SAP NetWeaver for uploading metadata. A deserialization vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader that originates from deserializing malicious content, which can be exploited by an attacker to cause a...

PT-2025-20812

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The Metadata Uploader function of the Visual Composer tool in SAP NetWeaver contains a flaw in its deserialization mechanism. Deserialization is the process of converting a data stream...

CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system. Recent assessments: Assessed Attacker...

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

On Thursday, April 24, enterprise resource planning company SAP published a CVE and a day later, an advisory behind login for CVE-2025-31324, a zero-day vulnerability in NetWeaver Visual Composer that carries a CVSSv3 score of 10. The vulnerability arises from a missing authorization check in...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 CVE-2025-31324, SAP Exploit POST /developme...

VulnCheck KEV: CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content...

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...