28 matches found
CVE-2025-31324-Exploits
This repository does not have a README...
sap-netweaver-0day-CVE-2025-31324
The SUPERGROUP known as Scattered Lapsus$ Hunters - A combination of groups among ShinyHunters, Scattered Spider, and Lapsus$ have leaked the POC to this 0day This 0day was created by ShinyHunters and stolen from the Chinese state actors in active exploitation. Leaked here:...
sap_netweaver_cve-2025-31324-
This repository does not have a README...
jsp-webshell-scanner
JSP Webshell Scanner for SAP CVE-2025-31324 and PeopleSoft IOC Triage A lightweight script to scan .jsp and .jspx files for suspicious patterns typically associated with JSP-based webshells, including those observed in attacks exploiting SAP NetWeaver CVE-2025-31324. This scanner has also been...
Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment
CVE-2025-31324 Zero-Day SAP Vulnerability & Compromise Assessment Tool Joint Release by Onapsis & Mandiant Onapsis and Mandiant have collaborated to release an open-source tool to assist SAP customers in identifying potential compromise related to CVE-2025-31324 and CVE-2025-42999 , a critical...
CVE-2025-31324
SAP CVE-2025-31324 Analyzer A Python-based security scanner for identifying the CVE-2025-31324 vulnerability in SAP Visual Composer systems, and detecting known Indicators of Compromise IOCs such as malicious .jsp. 🚀 Features Detects vulnerable Visual Composer endpoints Scans for known malicious...
CVE-2025-31324-NUCLEI
CVE-2025-31324-NUCLEI Nuclei template for cve-2025-31324 SAP Usage: nuclei -u https://victima.com -t cve-2025-31324-validation.yaml Múltiples objetivos Usage: nuclei -l targets.txt -t cve-2025-31324-validation.yaml...
CVE-2025-31324
CVE-2025-31324 How does this detection method work? The template performs an HTTP GET request to the target's base URL and examines the response headers to identify SAP NetWeaver Application Server instances. This information helps assess whether the system might be susceptible to CVE-2025-31324...
Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution
A new exploit combining two critical, now-patched security flaws in SAP NetWeaver has emerged in the wild, putting organizations at risk of system compromise and data theft. The exploit in question chains together CVE-2025-31324 and CVE-2025-42999 to bypass authentication and achieve remote code...
Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver
CVE-2025-31324 A proof of concept developed to exploit CVE-2...
Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell
A China-linked unnamed threat actor dubbed Chaya004 has been observed exploiting a recently disclosed security flaw in SAP NetWeaver. Forescout Vedere Labs, in a report published Thursday, said it uncovered a malicious infrastructure likely associated with the hacking group weaponizing...
Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver
Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░...
Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver
CVE-2025-31324 Zero-Day SAP Vulnerability & Compromise Assessm...
Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver
CVE-2025-31324-File-Upload A totally unauthenticated file-uplo...
Vulnerabilities fixed in SAP products
SAP has fixed vulnerabilities in several products, including SAP Financial Consolidation, SAP Landscape Transformation, SAP NetWeaver Application Server ABAP, SAP Commerce Cloud, SAP ERP BW, SAP BusinessObjects Business Intelligence Platform, SAP KMC WPC, SAP Solution Manager, SAP S4CORE, and SAP...
Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver
CVE-2025-31324 Burp Suite Extension Overview This Python-b...
Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver
CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauth...
Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver
CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauth...