SAPKiln

OWASP SAPKiln SAP की दुनिया 🌎 बहुत विशाल और अनूठी है। SAP के पास विभिन्न समस्याओं से निपटने के लिए कई उत्पाद हैं, साथ ही NetWeaver जैसे कई तकनीकी प्लेटफॉर्म भी हैं। SAPKiln एक ओपन-सोर्स GUI टूल 💻 है जिसे सुरक्षा शोधकर्ताओं को SAP Logon/GUI डेस्कटॉप एप्लिकेशन के माध्यम से SAP सिस्टम का कुशल ऑडिटिं...

macOS-enterprise-privileges

Privileges Transparente, kostenlose und sichere Verwaltung von Administratorrechten für macOS. Privileges ist eine kostenlose macOS-Anwendung, die für moderne Unternehmensumgebungen entwickelt wurde. Sie gewährt Benutzern bei Bedarf temporäre Administratorrechte, ohne dauerhafte Admin-Rechte zu...

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth Exploit automatizzato per CVE-2020-6287 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, versioni - 7.30, 7.31, 7.40, 7.50, non esegue un controllo di autenticazione che consente a un utente malintenzionato senza autenticazione preventiva di...

pysap

pysap - Python library for crafting SAP's network protocols packets Version 0.2.1.dev0 in dev Overview SAP Netweaver and SAP HANA are technology platforms for building and integrating SAP business applications. Communication between components uses different network protocols and some services an...

cve-2013-3319

cve-2013-3319 modulo metasploit per CVE-2013-3319 / SAP Security Note 1816536 obsoleto : usa saphostctrlgetcomputersystem da metasploit. Questo è mantenuto solo per scopi storici. Advisory completo: http://labs.integrity.pt/advisories/cve-2013-3319/...

sap_igs_xxe

SAP IGS XXE-Angriff CVE-2018-2392 und CVE-2018-2393 Dieses Modul im Metasploit Framework Dokumentation Modul Verwundbare Anwendung Dieses Modul nutzt CVE-2018-2392 und CVE-2018-2393 aus, zwei XXE-Sicherheitslücken in der XMLCHART-Seite von SAP Internet Graphics Servern IGS der Versionen 7.20,...

CVE-2022-22536_SAP_Request_Smuggling_Scanner

Scanner per Request Smuggling SAP CVE-2022-22536 Questo è uno scanner batch rapido a livello di socket per CVE-2022-22536 , una vulnerabilità critica di request smuggling in SAP Internet Communication Manager ICM e SAP Web Dispatcher. Testa più host in parallelo per rilevare comportamenti di...

SAP Solution Manager 7.2 - Remote Command Execution

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

Burp_CVE-2025-31324

Extensão Burp Suite CVE-2025-31324 Visão Geral Esta extensão do Burp Suite baseada em Python foi projetada para detectar a presença da CVE-2025-31324 , uma vulnerabilidade crítica no componente Metadata Uploader do SAP NetWeaver Visual Composer. A vulnerabilidade permite a execução remota de códi...

CVE-2026-66766

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

CVE-2026-66766 Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

EUVD-2026-65191

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

CVE-2026-66766

SAP S/4HANA (Private Cloud) is affected by a Regular Expression Denial of Service (ReDoS) vulnerability in a third-party component within the Manage Supply Protection functionality. An unauthenticated attacker can supply specially crafted input that triggers excessive regex processing, exhausting...

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal Scanner LFI proof-of-concept: rilevamento automatico delle esposizioni di /etc/passwd tramite directory traversal e corrispondenza regex. root@kitploit: Scanner LFI Un proof-of-concept Python leggero per scansionare host target per vulnerabilità di Local...

PT-2026-81119

Name of the Vulnerable Software and Affected Versions SAP S/4HANA Private Cloud affected versions not specified Description SAP S/4HANA Private Cloud utilizes a third-party component susceptible to a Regular Expression Denial of Service ReDoS, a condition where a specially crafted input causes th...

sap_logon_ticket

saplogonticket Kit de ferramentas geral relacionado ao mecanismo de SSO do SAP: os Logon Tickets...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...