Lucene search
+L

760 matches found

RedhatCVE
RedhatCVE
added 2025/04/10 8:13 a.m.5 views

CVE-2025-31330

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

9.9CVSS7.3AI score0.00722EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
added 2025/04/08 1:1 p.m.7 views

2025 Ransomware: Business as Usual, Business is Booming

Getting an edge on your adversaries involves understanding their behaviors and their mindset. Rapid7 Labs took a look at internal and publicly-available ransomware data for Q1 2025 and added our own insights to provide a picture of the year thus far—and what you can do now to reduce your attack...

9.3AI score
SaveExploits0
NVD
NVD
added 2025/04/08 8:15 a.m.6 views

CVE-2025-31330

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

9.9CVSS0.00722EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/04/08 7:15 a.m.8 views

CVE-2025-31330 Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

9.9CVSS7.5AI score0.00722EPSS
SaveExploits0References2
CVE
CVE
added 2025/04/08 7:15 a.m.109 views

CVE-2025-31330

CVE-2025-31330 affects SAP Landscape Transformation (SLT). A vulnerability in a function module exposed via RFC allows a user‑privileged attacker to inject arbitrary ABAP code and bypass authorization checks, effectively acting as a backdoor and risking full system compromise (affecting confident...

9.9CVSS7.5AI score0.00722EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/08 7:15 a.m.27 views

CVE-2025-31330 Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

9.9CVSS0.00722EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.8 views

PT-2025-15376 · Sap · Sap Landscape Transformation

Name of the Vulnerable Software and Affected Versions: SAP Landscape Transformation SLT affected versions not specified Description: The issue allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC, enabling the injection of arbitrary ABAP code...

9.9CVSS6.6AI score0.00722EPSS
SaveExploits0References16
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.5 views

SAP Landscape Transformation 代码注入漏洞

SAP Landscape Transformation is a tool for system data migration and integration from SAP, Germany. A code injection vulnerability exists in SAP Landscape Transformation, which stems from a vulnerability in a function module exposed via an RFC that could lead to ABAP code injection...

9.9CVSS7.2AI score0.00722EPSS
SaveExploits0References4
Microsoft Secure
Microsoft Secure
added 2025/04/01 4:0 p.m.9 views

Transforming public sector security operations in the AI era

The cyberthreat landscape is evolving at an unprecedented pace, becoming increasingly dangerous and complex. Nation-state threat actors and cybercriminals are employing advanced tactics and generative AI to execute highly sophisticated attacks. This situation is further compounded by outdated...

7.1AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2025/03/31 3:0 p.m.10 views

New innovations in Microsoft Purview for protected, AI-ready data

The Microsoft Fabric and Microsoft Purview teams are excited to be in Las Vegas from March 31 to April 2, 2025, for the second annual and highly anticipated Microsoft Fabric Community Conference. With more than 200 sessions, 13 focused tracks, 21 hands-on workshops, and two keynotes, attendees ca...

7.6AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2025/03/05 2:0 p.m.8 views

Inside the Take Command Summit 2025 Agenda: What’s in Store for This Year’s Event?

The cybersecurity landscape is shifting fast—ransomware is evolving, AI is reshaping security operations, and regulations are becoming more complex than ever. Security teams are under pressure to outpace adversaries, manage risk, and defend against sophisticated threats. That’s why Take Command...

7.3AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2025/03/04 2:0 p.m.11 views

Building a High Performance Team in India: Meet Swami Nathan

Swami Nathan has a track record of building new teams from scratch for global companies. Through his experiences, he’s identified what it takes to build not just any team - but a high performing team that drives innovation and growth for business while propelling career trajectories for those who...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 2:44 p.m.13 views

CVE-2020-6236

SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admingroup privileges to change ownership and permissions including S-user ID bit s-bit of arbitrary files remotely. This results in the possibility to execute these files as root user from a...

7.2CVSS7.2AI score0.01236EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:43 p.m.18 views

CVE-2020-6191

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...

9CVSS7.1AI score0.01579EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:41 p.m.12 views

CVE-2020-6192

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management...

9CVSS7.3AI score0.01718EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:36 p.m.15 views

CVE-2020-26832

SAP AS ABAP SAP Landscape Transformation, versions - 20111620, 20111640, 20111700, 20111710, 20111730, 20111731, 20111752, 2020 and SAP S4 HANA SAP Landscape Transformation, versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should b...

7.6CVSS6.5AI score0.02162EPSS
SaveExploits2
The Hacker News
The Hacker News
added 2025/02/04 11:0 a.m.18 views

Watch Out For These 8 Cloud Security Shifts in 2025

As cloud security evolves in 2025 and beyond, organizations must adapt to both new and evolving realities, including the increasing reliance on cloud infrastructure for AI-driven workflows and the vast quantities of data being migrated to the cloud. But there are other developments that could...

7.3AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2025/01/27 2:0 p.m.10 views

The 2024 Ransomware Landscape: Looking back on another painful year

The ransomware landscape in 2024 continued to evolve at a rapid pace, outgrowing many of the trends we saw in 2023. Threat actors remained relentless and innovative, targeting organizations of all sizes and sectors. In this post, we’ll examine the latest data points, discuss notable groups, and...

7.1AI score
SaveExploits0
Wiz blog
Wiz blog
added 2025/01/23 2:0 p.m.8 views

Securing the Container Frontier: Kubernetes Trends Report 2025

From rapid-fire attack attempts to evolving defense strategies, our Kubernetes Security Report paints a vivid picture of a dynamic landscape. Check out the preview here...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2025/01/12 12:0 a.m.138 views

CISA: 2023 ISC Annual Review

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

7.4AI score
SaveExploits0
Rows per page
Query Builder