17823 matches found
CVE-2020-6286
CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Directory Traversal SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented application and integration platform that provid...
CVE-2025-31324
信息 ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: 无日志。无噪音。只有信号。 // ----- 签名 ----- 密钥: ssh-rsa AAAAB3...NullKey...KFA== 指纹: 88:11:00:BE:HM:00:82:NULL:TR:ACE 座右铭: "隐私不是犯罪。沉默是武器。" 🛡️ SAP漏洞公开...
CVE-2020-6308-PoC
CVE-2020-6308 SAP POC SAP BusinessObjects Business Intelligence Platform Web Services versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. Follow me on...
CVE-2020-6308
CVE-2020-6308 用于 SAP Business Objects SSRF 的漏洞利用脚本 这是一个简单的 Golang 脚本，用于自动化利用 CVE-2020-6308。原始 Github 仓库没有展示任何自动化（https://github.com/InitRoot/CVE-2020-6308-PoC , 感谢 @InitRoot），因此创建此脚本是为了帮助渗透测试人员/红队成员向客户提供概念验证。 警告：在创建此脚本所对应的渗透测试任务期间，当端口开放时，该特定 Web 服务器仅在 10 秒后才响应。这个特定参数可能会发生变化。如果是这种情况，只需修改第 35 行的 if...
CVE-2025-31324
CVE-2025-31324 CVE-2025-31324, SAP Exploit root@kitploit: POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...
CVE-2017-12637_SAP-NetWeaver-URL-Traversal
CVE-2017-12637SAP-NetWeaver-URL-Traversal 概念验证 LFI 扫描器：通过目录遍历和正则匹配自动检测 /etc/passwd 暴露。 root@kitploit: LFI Scanner 一个轻量级 Python 概念验证脚本，用于扫描目标主机是否存在本地文件包含（LFI）漏洞：它会尝试获取 /etc/passwd，并通过正则检查确认其存在。 :contentReferenceoaicite:0index=0 功能特性 - 批量扫描：从输入文件读取主机名或 host:port 目标 - 目录遍历载荷：用于访问 /etc/passwd - 正则检测：...
CVE-2020-6287_SAP-NetWeaver-bypass-auth
CVE-2020-6287SAP-NetWeaver-bypass-auth Automated Exploit for CVE-2020-6287 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks...
CVE-2025-31324
SAP CVE-2025-31324 Analyzer A Python-based security scanner for identifying the CVE-2025-31324 vulnerability in SAP Visual Composer systems, and detecting known Indicators of Compromise IOCs such as malicious .jsp. 🚀 Features Detects vulnerable Visual Composer endpoints Scans for known malicious...
SAP_RECON
PoC for CVE-2020-6287, CVE-2020-6286 SAP RECON vulnerability Pffff! RECON Remotely Exploitable Code On NetWeaver? Guys, really? That was the best codename you came up with? : This scrip allows to check SAP LM Configuration Wizard missing authorization check vulnerability and as a PoC script...
CVE-2022-41272
CVE-2022-41272 En este repositorio, escribiremos brevemente información sobre la vulnerabilidad CVE-2022-41272. La vulnerabilidad existe en el servicio SAP P4 que se ejecuta en el puerto 5NN04. Donde NN es un número de instancia, que puede ser del 00 al 99. Hay funciones de llamada remota que un...
jsp-webshell-scanner
JSP Webshell Scanner for SAP CVE-2025-31324 and PeopleSoft IOC Triage A lightweight script to scan .jsp and .jspx files for suspicious patterns typically associated with JSP-based webshells, including those observed in attacks exploiting SAP NetWeaver CVE-2025-31324. This scanner has also been...
SAP Solution Manager - Open Redirect
SAP Solution Manager contains an open redirect vulnerability via the logoff endpoint. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-26836 info: name: SAP Solution Manager - Open...
SAP Web Application Server 6.x/7.0 - Open Redirect
frameset.htm in the BSP runtime in SAP Web Application Server WAS 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter. id: CVE-2005-3634 info: name: SAP Web...
SAP_EEM_CVE-2020-6207
PoC for CVE-2020-6207 SAP Solution Managerにおける認証チェック欠落 このスクリプトは、SAP Solution Managerに接続されたSAP SMDAgent上でRCEに繋がるSAP EEMサーブレットtcsmdagentapplicationeemの認証チェック欠落を確認し、悪用するためのものです。 発見者: Pablo Artuso Yvan 'iggy' G 論文: An Unauthenticated Journey to Root :Pwning Your Company's Enterprise Software Servers...
powersap
PowerSAP PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability. PowerSAP allo...
powersap
PowerSAP PowerSAP es una reimplementación simple en PowerShell de técnicas populares y efectivas de todas las herramientas públicas como Bizploit, módulos auxiliares de Metasploit o scripts de Python disponibles en Internet. Esta reimplementación no contiene ninguna vulnerabilidad nueva o no...
sap-netweaver-0day-CVE-2025-31324
Scattered Lapsus$ Huntersとして知られるスーパーグループ — ShinyHunters、Scattered Spider、Lapsus$ のグループの組み合わせが、この0dayのPOCをリークしました。 この0dayはShinyHuntersによって作成され、実際に悪用中の中国の国家主体から盗まれたものです。 リーク先：https://t.me/leavemealonefbi/185...
Onapsis_CVE-2025-31324_Scanner_Tools
Vulnerability and Indicator of Compromise IoC Scanner for CVE-2025-31324 Visual Composer Metadata Uploader Vulnerability CVE-2025-31324 is a critical CVSSv3 10 vulnerability affecting SAP NetWeaver systems, specifically within the Visual Composer Metadata Uploader component. This vulnerability...
CVE-2026-58231
CVE-2026-58231 Detection Script Detection and precondition-verification tool for CVE-2026-58231 — improper authorization in the Data Hub Adapter component of SAP Commerce Cloud CVSS 10.0. The script performs non-destructive checks only. It does not ship or execute any code-injection payload...