Lucene search
+L

4747 matches found

Kitploit
Kitploit
added 2026/09/12 11:39 a.m.8 views

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth CVE-2020-6287の自動エクスプロイト CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard、バージョン - 7.30、7.31、7.40、7.50は認証チェックを実行しないため、事前認証なしの攻撃者が設定タスクを実行してSAP Javaシステムに対して重要なアクションを実行でき、管理者ユーザーを作成する能力を含み、システムの機密性、完全性、可用性を損ない、認証チェックの欠如に至ります。 Shodanライセンスが必要です...

10CVSS8.4AI score0.94719EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/12 6:12 a.m.10 views

SAP_RECON

CVE-2020-6287, CVE-2020-6286 SAP RECON 취약점에 대한 PoC Pffff! RECONRemotely Exploitable Code On NetWeaver이라고? 정말? 그게 최고의 코드네임이었어? : 이 스크립트는 SAP LM Configuration Wizard의 인가 확인 누락 취약점을 확인하고, PoC 스크립트로서 queryProtocol 메소드의 디렉토리 트래버설을 악용합니다. 디렉토리 트래버설을 통해 SAP 서버에서 모든 zip 파일을 다운로드할 수 있습니다. 이 프로젝트는 교육 목적으로만...

10CVSS7.4AI score0.94719EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/12 4:45 a.m.8 views

CVE-2022-22536

CVE-2022-22536 SAPメモリパイプ非同期化の脆弱性MPI CVE-2022-22536。 説明 - CVE-2022-22536のPOC: SAPメモリパイプMPI非同期化の脆弱性。 - 2022-02-15にantxによって作成。 詳細 SAP NetWeaver Application Server ABAP、SAP NetWeaver Application Server Java、ABAP Platform、SAP Content Server 7.53およびSAP Web...

10CVSS8.2AI score0.97945EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/12 4:18 a.m.7 views

CVE-2025-42944

CVE-2025-42944 由于SAP NetWeaver中存在反序列化漏洞,未认证的攻击者可通过RMI-P4模块向开放端口提交恶意载荷来利用该系统。此类不受信任的Java对象的反序列化可能导致任意操作系统命令执行,对应用程序的机密性、完整性和可用性造成严重影响。 这种检测方法的工作原理是什么? 这种检测方法通过发送GET请求,根据服务器标头识别SAP NetWeaver应用服务器实例,利用正则表达式提取版本号,然后使用DSL匹配器检查检测到的版本是否为7.50或更低,以指示可能存在的RMI-P4模块反序列化漏洞。 如何运行此脚本? 1. 从此处下载Nuclei 2. 将模板复制到本地...

10CVSS8.5AI score0.02893EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/12 1:38 a.m.4 views

SAP-brute

SAP-brute SAP Netweaver 로그인 무차별 대입 공격 도구. root@kitploit: usage: SAP-brute.py -h -u URL -f FILE -p PROXY optional arguments: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging 단일 사이트 root@kitploit:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:20 a.m.15 views

CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - эксплойт для SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT версии - 7.30, 7.31, 7.40, 7.50, без ограничений, злоумышленник, аутентифицированный как неадминистративный пользователь, может загрузить вредоносный файл по сети и запустить его обработку, что способн...

9.9CVSS8.1AI score0.36018EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 11:43 p.m.7 views

CVE-2025-31324_PoC_SAP

CVE-2025-31324PoC Доказательство концепции для CVE-2025-31324: Неавторизованная загрузка в SAP NetWeaver Visual Composer Metadata Uploader Данный скрипт выполняет: 1. Загрузку файла на уязвимую конечную точку через хост/порт загрузки 2. Опциональный запуск через HTTP GET через хост/порт триггера ...

10CVSS8.2AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/11 9:56 p.m.6 views

sap-netweaver-0day-CVE-2025-31324

Scattered Lapsus$ Hunters 로 알려진 슈퍼그룹 - ShinyHunters, Scattered Spider, Lapsus$ 그룹의 결합체가 이 0day의 PoC를 유출했습니다. 이 0day는 ShinyHunters가 제작했으며, 적극적으로 악용 중인 중국 국가 행위자로부터 도난당한 것입니다. 유출처: https://t.me/leavemealonefbi/185...

10CVSS7.9AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/11 9:51 p.m.8 views

CVE-2018-2380

CVE-2018-2380 CVSS v3 기본 점수: 6.6/10 SAP NetWeaver AS JAVA CRM의 로그 주입을 통한 원격 명령 실행 PoC 스크립트 사용 예 root@kitploit: python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true 설명 --host는 SAP 서버 IP입니다. --port는 SAP NetWeaver AS Java...

6.6CVSS7.3AI score0.28934EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/11 5:58 p.m.9 views

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal Экспериментальный LFI-сканер: автоматическое обнаружение раскрытия /etc/passwd с помощью обхода каталогов и проверки по регулярному выражению. root@kitploit: LFI-сканер Лёгкий экспериментальный скрипт на Python для сканирования целевых хостов на уязвимост...

7.5CVSS8.1AI score0.95111EPSS
SaveExploits3References1
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.137 views

SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition

SAP NetWeaver AS JAVA LM Configuration Wizard, versions 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an...

10CVSS8.5AI score0.94719EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.202 views

SAP NetWeaver Development Infrastructure - Server Side Request Forgery

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...

9.9CVSS7.7AI score0.69075EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/09 11:45 a.m.8 views

Onapsis_CVE-2025-31324_Scanner_Tools

CVE-2025-31324 취약점 및 침해 지표IoC 스캐너 Visual Composer Metadata Uploader 취약점 CVE-2025-31324는 SAP NetWeaver 시스템, 특히 Visual Composer Metadata Uploader 구성 요소에 영향을 미치는 치명적인CVSSv3 10 취약점입니다. 이 취약점으로 인해 인증되지 않은 공격자가 시스템에 임의의 파일을 업로드할 수 있으며, 잠재적으로 원격 코드 실행과 완전한 시스템 장악으로 이어질 수 있습니다. Onapsis는 이 취약점의 치명적인 특성을...

10CVSS8.1AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/09 11:44 a.m.4 views

Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment

CVE-2025-31324 제로데이 SAP 취약점 및 침해 평가 도구 Onapsis & Mandiant 공동 릴리즈 Onapsis와 Mandiant는 SAP NetWeaver Java 시스템의 치명적인 0-day 취약점인 CVE-2025-31324 및 CVE-2025-42999 와 관련된 잠재적 침해를 식별하는 데 도움이 되는 오픈소스 도구를 공동으로 릴리스했습니다. 이 도구는 잠재적으로 영향을 받는 환경에 액세스할 수 있는 시스템 관리자가 로컬에서 화이트박스 실행 하도록 설계되었습니다. 취약점 평가, 간단한 침해 평가 및...

10CVSS8.1AI score0.99512EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/09 4:27 a.m.7 views

CVE-2020-6287-Sap-Add-User

CVE-2020-6287-Sap-Add-User добавление пользователя-администратора в портал SAP NetWeaver...

10CVSS8.4AI score0.94719EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/09 4:02 a.m.9 views

CVE-2025-0054

CVE-2025-0054 – Сканер сохранённых XSS SAP NetWeaver 🕷 Лёгкий инструмент на Python для обнаружения уязвимостей сохранённого межсайтового скриптинга XSS в SAP NetWeaver Application Server Java , специально нацеленный на CVE-2025-0054. ⚠️ Только для образовательного и авторизованного тестирования...

5.4CVSS6AI score0.00274EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.7 views

SAP NetWeaver Memory Corruption (3757002)

The version of the SAP NetWeaver kernel detected on the remote host is affected by a memory corruption vulnerability as referenced in SAP Security Note 3757002: - SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that...

7.7CVSS0.0026EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.9 views

SAP NetWeaver AS ABAP Missing Authorization Check (3772838)

The version of SAP NetWeaver AS ABAP detected on the remote host is affected by a missing authorization check vulnerability as referenced in SAP Security Note 3772838: - Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker...

4.3CVSS0.00168EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.8 views

SAP NetWeaver Information Disclosure (3750721)

The version of the SAP NetWeaver kernel detected on the remote host is affected by an information disclosure vulnerability as referenced in SAP Security Note 3750721: - SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to...

6.5CVSS0.00231EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.9 views

SAP NetWeaver Memory Corruption (3747649)

The version of the SAP NetWeaver kernel detected on the remote host is affected by a memory corruption vulnerability as referenced in SAP Security Note 3747649: - A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an...

10CVSS0.00321EPSS
SaveExploits0References3
Rows per page
Query Builder