Lucene search
+L

57 matches found

Kitploit
Kitploit
added 2026/09/17 5:26 a.m.11 views

CVE-2022-22536_SAP_Request_Smuggling_Scanner

CVE-2022-22536 SAP Rquest Smuggling Scanner This is a fast, socket-level batch scanner for CVE-2022-22536 , a critical request smuggling vulnerability in SAP Internet Communication Manager ICM and SAP Web Dispatcher. It tests multiple hosts in parallel for protocol desynchronization behavior...

10CVSS8.6AI score0.97945EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/13 7:03 p.m.8 views

SAPGateBreaker-Exploit

CVE-2022-22536: HTTP Smuggling Through SAP's Front Door SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepe...

10CVSS8.5AI score0.97945EPSS
SaveExploits8
CVE
CVE
added 2026/09/08 12:12 a.m.36 views

CVE-2026-76968

SAP Web Dispatcher, Internet Communication Manager, and SAP Content Server are affected by an information disclosure vulnerability (CVSS 6.5, MEDIUM). An authenticated low-privileged attacker can access certain administrative functionality or interfaces to obtain sensitive information about the s...

6.5CVSS5.8AI score0.00231EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/10 1:01 p.m.42 views

CVE-2024-2105 JBL: Improper validation of ICM field in connection requests

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

6.5CVSS0.00198EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/10 1:01 p.m.8 views

CVE-2024-2105 JBL: Improper validation of ICM field in connection requests

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

6.5CVSS6.5AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/06 3:35 p.m.42 views

CVE-2025-12556

CVE-2025-12556 affects IDIS ICM Viewer. A parameter/argument injection vulnerability could allow an attacker to execute arbitrary code in the host environment (remote code execution). Public details confirm affected product and impact; some sources note that specific vulnerable versions and a fix...

8.8CVSS7.6AI score0.00461EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:35 p.m.4 views

CVE-2025-12556 IDIS ICM Viewer Argument Injection

An argument injection vulnerability exists in the affected product that could allow an attacker to execute arbitrary code within the context of the host machine...

8.8CVSS7.6AI score0.00461EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/06 3:35 p.m.25 views

CVE-2025-12556 IDIS ICM Viewer Argument Injection

An argument injection vulnerability exists in the affected product that could allow an attacker to execute arbitrary code within the context of the host machine...

8.8CVSS0.00461EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.14 views

IDIS ICM Viewer 参数注入漏洞

IDIS ICM Viewer is a desktop client software for video surveillance systems from IDIS Corporation. IDIS ICM Viewer suffers from a parameter injection vulnerability that stems from parameter injection and could lead to an attacker executing arbitrary code in the host environment...

8.8CVSS7.4AI score0.00461EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.20 views

PT-2025-45186

Name of the Vulnerable Software and Affected Versions IDIS ICM VIEWER affected versions not specified Description An argument injection issue exists that may allow an attacker to execute arbitrary code on the host machine. This could lead to remote code execution. Recommendations At the moment,...

8.8CVSS6.5AI score0.00461EPSS
SaveExploits0References8
CISA
CISA
added 2025/11/04 12:00 p.m.18 views

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-308-01 Fuji Electric Monitouch V-SFT-6 ICSA-25-308-02 Survision License Plate Recognition Camera...

6.6AI score
SaveExploits0References5
GithubExploit
GithubExploit
added 2025/10/31 7:02 p.m.222 views

Exploit for HTTP Request Smuggling in Sap Content_Server

CVE-2022-22536 Batch Scanner This is a fast, socket-level bat...

10CVSS9.2AI score0.97945EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2025/10/31 7:02 p.m.250 views

Exploit for HTTP Request Smuggling in Sap Content_Server

CVE-2022-22536 SAP Rquest Smuggling Scanner This is a fast, s...

10CVSS9.2AI score0.97945EPSS
SaveExploits8
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2014-2776

Malware in sbrugna...

5CVSS6.4AI score0.01513EPSS
SaveExploits0References7
Prion
Prion
added 2024/01/09 2:15 a.m.30 views

Design/Logic Flaw

Under certain conditions, Internet Communication Manager ICM or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, WEBDISP 7.22EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access...

5CVSS6.8AI score0.00326EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/01/09 1:19 a.m.61 views

CVE-2024-22124 Information Disclosure vulnerability in SAP NetWeaver Internet Communication Manager

Under certain conditions, Internet Communication Manager ICM or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, WEBDISP 7.22EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access...

4.1CVSS7.6AI score0.00326EPSS
SaveExploits0References2
Circl
Circl
added 2022/12/12 4:25 p.m.15 views

CVE-2022-45968

creationtimestamp| type| source ---|---|--- 2022-12-12 16:25:57+00:00| seen| https://t.me/cibsecurity/54316 2025-04-22 21:04:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12977...

8.8CVSS7.6AI score0.00973EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/05/11 2:53 p.m.41 views

CVE-2022-27656

The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager ICM does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1AI score0.00559EPSS
SaveExploits0References2
CVE
CVE
added 2022/05/11 2:53 p.m.97 views

CVE-2022-27656

CVE-2022-27656 affects SAP Web Dispatcher Web Administration UI and the Internet Communication Manager (ICM). It stems from insufficient encoding of user‑controlled inputs, enabling Cross‑Site Scripting (XSS). CVSS v3.1 base score 6.1 (MEDIUM); vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. No exp...

6.1CVSS5.9AI score0.00559EPSS
SaveExploits0References2Affected Software3
CNVD
CNVD
added 2022/04/15 12:00 a.m.63 views

SAP Web Dispatcher和Internet Communication Manager拒绝服务漏洞

SAP Web dispatcher and SAP Internet Communication Manager SAP ICM are both products of SAP Germany. SAP Internet Communication Manager is a component of the SAP NetWeaver application server. SAP Web Dispatcher and SAP Internet Communication Manager suffer from a denial-of-service vulnerability th...

7.5CVSS2.2AI score0.01484EPSS
SaveExploits0References1
Rows per page
Query Builder