Lucene search
+L

17876 matches found

Kitploit
Kitploit
added 2026/09/21 2:12 p.m.11 views

CVE-2025-31324_PoC

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader This script performs: 1. File upload to the vulnerable endpoint via Upload host/port 2. Optional trigger via HTTP GET via Trigger host/port 3. Basic response...

10CVSS8.3AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 2:00 p.m.8 views

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Directory Traversal SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented application and integration platform that provid...

5.3CVSS6.6AI score0.28312EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 1:47 p.m.11 views

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth Automated Exploit for CVE-2020-6287 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks...

10CVSS8.7AI score0.94719EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/21 1:45 p.m.7 views

CVE-2025-31324

Información ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: Sin registros. Sin ruido. Solo señal. // ----- FIRMA ----- Clave: ssh-rsa AAAAB3...NullKey...KFA== Huella:...

10CVSS8.2AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 12:32 p.m.7 views

CVE-2025-31324

CVE-2025-31324 CVE-2025-31324, SAP Exploit root@kitploit: POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...

10CVSS8.6AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/21 5:24 a.m.10 views

jsp-webshell-scanner

JSP Webshell Scanner for SAP CVE-2025-31324 and PeopleSoft IOC Triage A lightweight script to scan .jsp and .jspx files for suspicious patterns typically associated with JSP-based webshells, including those observed in attacks exploiting SAP NetWeaver CVE-2025-31324. This scanner has also been...

10CVSS8.3AI score0.9947EPSS
SaveExploits22
Nuclei
Nuclei
added 2026/09/21 2:08 a.m.141 views

SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition

SAP NetWeaver AS JAVA LM Configuration Wizard, versions 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an...

10CVSS8.5AI score0.94719EPSS
SaveExploits6References5
Kitploit
Kitploit
added 2026/09/21 12:45 a.m.10 views

Onapsis_CVE-2025-31324_Scanner_Tools

Vulnerability and Indicator of Compromise IoC Scanner for CVE-2025-31324 Visual Composer Metadata Uploader Vulnerability CVE-2025-31324 is a critical CVSSv3 10 vulnerability affecting SAP NetWeaver systems, specifically within the Visual Composer Metadata Uploader component. This vulnerability...

10CVSS8.6AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/20 11:05 p.m.15 views

CVE-2026-58231

CVE-2026-58231 Detection Script Detection and precondition-verification tool for CVE-2026-58231 — improper authorization in the Data Hub Adapter component of SAP Commerce Cloud CVSS 10.0. The script performs non-destructive checks only. It does not ship or execute any code-injection payload...

10CVSS9AI score0.0171EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/20 10:37 p.m.11 views

CVE-2020-6287-Sap-Add-User

CVE-2020-6287-Sap-Add-User sap netweaver portal add user administrator...

10CVSS8.6AI score0.94719EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/20 7:03 p.m.10 views

SAPGateBreaker-Exploit

CVE-2022-22536: HTTP Smuggling Through SAP's Front Door SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepe...

10CVSS8.5AI score0.97945EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/20 6:16 p.m.6 views

CVE-2025-31324

🔴 CVE-2025-31324 — SAP NetWeaver Visual Composer Unauthenticated File Upload Type: Proof of Concept — Vulnerability Research CVE: CVE-2025-31324 CVSS: 10.0 Critical AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Status: Patched — SAP Security Note 3594142 + 3604119 Added to CISA KEV: May 2025 ⚠️ Este PoC...

10CVSS8.6AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/20 1:15 p.m.8 views

CVE-2025-31324

CVE-2025-31324 Una prueba de concepto desarrollada para explotar CVE-2025-31324. Uso root@kitploit: usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show...

10CVSS8.4AI score0.9947EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/20 10:47 a.m.9 views

Burp_CVE-2025-31324

CVE-2025-31324 Burp Suite Extension Overview This Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324 , a critical vulnerability in SAP NetWeaver Visual Composer’s Metadata Uploader component. The vulnerability allows unauthenticated remote code execution via fi...

10CVSS8.7AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/20 10:25 a.m.14 views

CVE-2025-31324

Proof of Concept - CVE-2025-31324 [email protected] Proof of concept exploit for vulnerability CVE-2025-31324 in SAP NetWeaver Visual Composer , which allows arbitrary file upload without authentication via the /developmentserver/metadatauploader endpoint. ⚠️ This code is for educational...

10CVSS8.9AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/20 7:19 a.m.40 views

HoneySAP

HoneySAP: SAP Low-interaction honeypot Version 0.1.2.dev0 XXX 2022 Overview HoneySAP is a low-interaction research-focused honeypot specific for SAP services. It's aimed at learn the techniques and motivations behind attacks against SAP systems. Features low-interaction honeypot for SAP services...

6AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.220 views

SAP Solution Manager 7.2 - Remote Command Execution

SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...

10CVSS8.5AI score0.98266EPSS
SaveExploits7References7
Kitploit
Kitploit
added 2026/09/19 3:43 p.m.11 views

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters CVE-2025-31324 is a critical "Unrestricted File Upload" vulnerability affecting the SAP NetWeaver Application Server AS Java. Specifically, it resides within the Visual Composer component VCFRAMEWORK. The flaw allows a...

10CVSS8.5AI score0.9947EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/19 10:11 a.m.10 views

SAPSlayer

This repository does not have a README...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 4:18 a.m.11 views

CVE-2025-42944

CVE-2025-42944 Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution,...

10CVSS8.8AI score0.02893EPSS
SaveExploits1References1
Rows per page
Query Builder