Lucene search
+L

21254 matches found

GithubExploit
GithubExploit
•added 2025/05/07 6:23 a.m.•393 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░...

10CVSS9.5AI score0.99486EPSS
SaveExploits21
GithubExploit
GithubExploit
•added 2025/05/07 6:23 a.m.•328 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░...

10CVSS9.5AI score0.99486EPSS
SaveExploits21
CNVD
CNVD
•added 2025/05/07 12:00 a.m.•18 views

SAP Learning Solution Cross-Site Request Forgery Vulnerability

SAP Learning Solution is an enterprise-wide learning management system from SAP. SAP Learning Solution suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could explo...

4.6CVSS6.2AI score0.00141EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/05/01 6:44 p.m.•498 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 Zero-Day SAP Vulnerability & Compromise Assessm...

10CVSS9.2AI score0.99486EPSS
SaveExploits22
CISA
CISA
•added 2025/04/29 12:00 p.m.•20 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-31324link is external SAP NetWeaver Unrestricted File Upload Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors...

10CVSS7.3AI score0.99486EPSS
SaveIn wildExploits21References6
GithubExploit
GithubExploit
•added 2025/04/29 12:16 a.m.•399 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauth...

10CVSS9.8AI score0.99486EPSS
SaveExploits21
Tenable Nessus
Tenable Nessus
•added 2025/04/29 12:00 a.m.•19 views

SAP NetWeaver Visual Composer Metadata Uploader Arbitrary File Upload

SAP NetWeaver Visual Composer Metadata Uploader is affected by an improper authorization vulnerability allowing an unauthenticated attacker to upload arbitrary files allowing to achieve a Remote Code Execution. No source data...

10CVSS8AI score0.99486EPSS
SaveExploits21References2
CISA KEV Catalog
CISA KEV Catalog
•added 2025/04/29 12:00 a.m.•33 views

SAP NetWeaver Unrestricted File Upload Vulnerability

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries...

10CVSS9.6AI score0.99486EPSS
SaveIn wildExploits21
GithubExploit
GithubExploit
•added 2025/04/28 8:32 p.m.•285 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauth...

10CVSS9.8AI score0.99486EPSS
SaveExploits21
GithubExploit
GithubExploit
•added 2025/04/28 1:19 p.m.•387 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

SAP-CVE-2025-31324 POC A tool to detect and exploit a critica...

10CVSS9.8AI score0.99486EPSS
SaveExploits21
The Hacker News
The Hacker News
•added 2025/04/28 12:18 p.m.•145 views

⚡ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More

What happens when cybercriminals no longer need deep skills to breach your defenses? Today's attackers are armed with powerful tools that do the heavy lifting — from AI-powered phishing kits to large botnets ready to strike. And they're not just after big corporations. Anyone can be a target when...

9.3CVSS7.5AI score0.99993EPSS
SaveExploits91
Rapid7 Blog
Rapid7 Blog
•added 2025/04/28 11:57 a.m.•38 views

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

On Thursday, April 24, enterprise resource planning company SAP published a CVE and a day later, an advisory behind login for CVE-2025-31324, a zero-day vulnerability in NetWeaver Visual Composer that carries a CVSSv3 score of 10. The vulnerability arises from a missing authorization check in...

10CVSS9.5AI score0.99486EPSS
SaveExploits21
Rapid7 Blog
Rapid7 Blog
•added 2025/04/28 11:57 a.m.•17 views

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

On Thursday, April 24, enterprise resource planning company SAP published a CVE and a day later, an advisory behind login for CVE-2025-31324, a zero-day vulnerability in NetWeaver Visual Composer that carries a CVSSv3 score of 10. The vulnerability arises from a missing authorization check in...

10CVSS9.1AI score0.99486EPSS
SaveExploits21
GithubExploit
GithubExploit
•added 2025/04/28 1:43 a.m.•158 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324-NUCLEI Nuclei template for...

10CVSS7.4AI score0.99486EPSS
SaveExploits21
GithubExploit
GithubExploit
•added 2025/04/28 1:32 a.m.•135 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

PoC - CVE-2025-31324 [email protected] Exploit de prueba par...

10CVSS9.4AI score0.99486EPSS
SaveExploits21
Positive Technologies
Positive Technologies
•added 2025/04/28 12:00 a.m.•20 views

PT-2025-18045 · Mantus667 · Wp-Pmanager

Name of the Vulnerable Software and Affected Versions: WP-PManager WordPress plugin version 1.2 and earlier SAP NetWeaver affected versions not specified Description: The issue allows for SQL injection attacks due to a parameter not being sanitized and escaped before use in a SQL statement. A...

5.4CVSS6.2AI score0.00164EPSS
SaveExploits1References5
GithubExploit
GithubExploit
•added 2025/04/27 4:40 p.m.•377 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

Vulnerability and Indicator of Compromise IoC Scanner for CV...

10CVSS9.7AI score0.99486EPSS
SaveExploits21
GithubExploit
GithubExploit
•added 2025/04/27 11:39 a.m.•373 views

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 CVE-2025-31324, SAP Exploit POST /developme...

10CVSS9.4AI score0.99486EPSS
SaveExploits21
VulnCheck KEV
VulnCheck KEV
•added 2025/04/27 12:00 a.m.•15 views

VulnCheck KEV: CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content...

9.1CVSS8.1AI score0.12743EPSS
SaveIn wildExploits3References11
RedhatCVE
RedhatCVE
•added 2025/04/26 5:09 p.m.•36 views

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

10CVSS7AI score0.99486EPSS
SaveExploits21References1
Rows per page
Query Builder