Lucene search
+L

4618 matches found

GithubExploit
GithubExploit
added 2025/04/28 8:32 p.m.280 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauth...

10CVSS9.8AI score0.99512EPSS
SaveExploits18
GithubExploit
GithubExploit
added 2025/04/28 1:19 p.m.375 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

SAP-CVE-2025-31324 POC A tool to detect and exploit a critica...

10CVSS9.8AI score0.99512EPSS
SaveExploits18
The Hacker News
The Hacker News
added 2025/04/28 12:18 p.m.134 views

⚡ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More

What happens when cybercriminals no longer need deep skills to breach your defenses? Today's attackers are armed with powerful tools that do the heavy lifting — from AI-powered phishing kits to large botnets ready to strike. And they're not just after big corporations. Anyone can be a target when...

9.3CVSS9.4AI score0.99996EPSS
SaveExploits80
Rapid7 Blog
Rapid7 Blog
added 2025/04/28 11:57 a.m.33 views

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

On Thursday, April 24, enterprise resource planning company SAP published a CVE and a day later, an advisory behind login for CVE-2025-31324, a zero-day vulnerability in NetWeaver Visual Composer that carries a CVSSv3 score of 10. The vulnerability arises from a missing authorization check in...

10CVSS9.5AI score0.99512EPSS
SaveExploits18
Rapid7 Blog
Rapid7 Blog
added 2025/04/28 11:57 a.m.8 views

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

On Thursday, April 24, enterprise resource planning company SAP published a CVE and a day later, an advisory behind login for CVE-2025-31324, a zero-day vulnerability in NetWeaver Visual Composer that carries a CVSSv3 score of 10. The vulnerability arises from a missing authorization check in...

10CVSS9.1AI score0.99512EPSS
SaveExploits18
GithubExploit
GithubExploit
added 2025/04/28 1:43 a.m.153 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324-NUCLEI Nuclei template for...

10CVSS7.4AI score0.99512EPSS
SaveExploits18
GithubExploit
GithubExploit
added 2025/04/28 1:32 a.m.126 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

PoC - CVE-2025-31324 [email protected] Exploit de prueba par...

10CVSS9.4AI score0.99512EPSS
SaveExploits18
Positive Technologies
Positive Technologies
added 2025/04/28 12:0 a.m.9 views

PT-2025-18045 · Mantus667 · Wp-Pmanager

Name of the Vulnerable Software and Affected Versions: WP-PManager WordPress plugin version 1.2 and earlier SAP NetWeaver affected versions not specified Description: The issue allows for SQL injection attacks due to a parameter not being sanitized and escaped before use in a SQL statement. A...

5.4CVSS6.2AI score0.00152EPSS
SaveExploits1References5
GithubExploit
GithubExploit
added 2025/04/27 4:40 p.m.361 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Vulnerability and Indicator of Compromise IoC Scanner for CV...

10CVSS9.7AI score0.99512EPSS
SaveExploits18
VulnCheck KEV
VulnCheck KEV
added 2025/04/27 12:0 a.m.10 views

VulnCheck KEV: CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content...

9.1CVSS5.8AI score0.11283EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/04/26 5:9 p.m.31 views

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

10CVSS7AI score0.99512EPSS
SaveExploits18References1
HackRead
HackRead
added 2025/04/26 11:45 a.m.41 views

SAP NetWeaver Flaw Scores 10.0 Severity as Hackers Deploy Web Shells

A critical vulnerability CVE-2025-31324 in SAP NetWeaver Visual Composer puts systems at risk of full compromise. Learn how…...

10CVSS7.1AI score0.99512EPSS
SaveExploits18
GithubExploit
GithubExploit
added 2025/04/25 3:22 p.m.215 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 How does this detection method work? The...

10CVSS6.8AI score0.99512EPSS
SaveExploits18
The Hacker News
The Hacker News
added 2025/04/25 10:41 a.m.52 views

New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel Framework

Threat actors are likely exploiting a new vulnerability in SAP NetWeaver to upload JSP web shells with the goal of facilitating unauthorized file uploads and code execution. "The exploitation is likely tied to either a previously disclosed vulnerability like CVE-2017-9844 or an unreported remote...

10CVSS9.4AI score0.99512EPSS
SaveExploits21
Tenable Nessus
Tenable Nessus
added 2025/04/25 12:0 a.m.23 views

SAP Netweaver Visual Composer Detection

Binary data sapnetweavervisualcomposerdetect.nbin...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2025/04/25 12:0 a.m.9 views

SAP NetWeaver Visual Composer Metadata Uploader File Upload Vulnerability

SAP NetWeaver Visual Composer Metadata Uploader is a tool for modeling assistance from SAP. A file upload vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader. The vulnerability is due to an unauthenticated agent uploading potentially malicious executable binaries because the...

10CVSS7.2AI score0.99512EPSS
SaveExploits18References1
BDU FSTEC
BDU FSTEC
added 2025/04/25 12:0 a.m.9 views

The vulnerability of the MetadataUploader function in the Visual Composer tool of the SAP NetWeaver software integration platform allows a hacker to execute arbitrary code.

The vulnerability of the MetadataUploader function in the Visual Composer software integration platform of SAP NetWeaver lies in the ability to upload executable files without limitation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially...

10CVSS8.3AI score0.99512EPSS
SaveExploits18References7
Tenable Nessus
Tenable Nessus
added 2025/04/25 12:0 a.m.32 views

SAP NetWeaver Visual Composer Metadata Uploader Improper Authorization (CVE-2025-31324) (Direct Check)

Binary data sapnetweaverCVE-2025-31324.nbin...

10CVSS7.3AI score0.99512EPSS
SaveExploits18References4
OSV
OSV
added 2025/04/24 5:15 p.m.7 views

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

9.8CVSS7.4AI score0.99512EPSS
SaveExploits18References6
NVD
NVD
added 2025/04/24 5:15 p.m.47 views

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

10CVSS0.99512EPSS
SaveExploits18References6
Rows per page
Query Builder