sap_bo_launchpad-ssrf-timing_attack

SAP BusinessObjects Launchpad SSRF & Timing Attack PoC Este script de Python es una prueba de concepto PoC para ejecutar SSRF Server-Side Request Forgery y Timing Attacks contra SAP BusinessObjects Launchpad. Está diseñado para ayudar a investigadores y profesionales de seguridad a identificar...

sap_logon_ticket

saplogonticket Kit de herramientas general relacionado con el mecanismo SSO de SAP: los Logon Tickets...

Linux Distros Unpatched Vulnerability : CVE-2026-93063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avo...

AZL-102705 CVE-2026-93063 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow...

CVE-2026-93063

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow...

DEBIAN-CVE-2026-93063

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow...

CVE-2026-93063 wifi: iwlwifi: mei: check SAP message length before reading it

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow...

CVE-2026-93063 wifi: iwlwifi: mei: check SAP message length before reading it

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow...

EUVD-2026-82173

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: check SAP message length before reading it Verify the SAP message size is not larger than the local buffer before reading the message to avoid buffer overflow...

CVE-2026-93063

CVE-2026-93063 is a buffer overflow in the Linux kernel's iwlwifi MEI (Manageable Event Interface) driver. The root cause is a missing length validation: the size of a received SAP message was not checked against the local buffer before being read, allowing an oversized message to overflow the bu...

SAP_CVE-2020-6287_find_mandate

SAPCVE-2020-6287findmandate Ayuda del comprobador para verificar la cuenta creada o encontrar su mandato El script le permite comprobar si la cuenta fue creada al usar el exploit RECON.py o encontrar el mandato de la cuenta creada. Exploit: https://github.com/chipik/SAPRECON Inicio rápido: chmod ...

Important: Red Hat Security Advisory: libvirt security update

An update for libvirt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2022-22536_SAP_Request_Smuggling_Scanner

CVE-2022-22536 Escáner de Contrabando de Solicitudes SAP Este es un escáner rápido por lotes a nivel de socket para CVE-2022-22536 , una vulnerabilidad crítica de contrabando de solicitudes en SAP Internet Communication Manager ICM y SAP Web Dispatcher. Prueba múltiples hosts en paralelo para...

CVE-2020-6287

CVE-2020-6287 SAP NetWeaver AS JAVA LM Configuration Wizard Omisión de Autenticación Crear Usuario Java Simple y Administrador SAP NetWeaver es la plataforma tecnológica integrada de SAP y la base técnica de todas las aplicaciones SAP desde SAP Business Suite. SAP NetWeaver es una plataforma de...

Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment

CVE-2025-31324 Herramienta de Evaluación de Vulnerabilidad Zero-Day y Compromiso para SAP Lanzamiento conjunto de Onapsis y Mandiant Onapsis y Mandiant han colaborado para publicar una herramienta de código abierto que ayuda a los clientes de SAP a identificar posibles compromisos relacionados co...

CVE-2025-0054

CVE-2025-0054 – Escáner de XSS Almacenado para SAP NetWeaver 🕷 Una herramienta ligera de Python para detectar vulnerabilidades de Cross-Site Scripting XSS almacenado en SAP NetWeaver Application Server Java , dirigida específicamente a CVE-2025-0054. ⚠️ Solo para pruebas de seguridad educativas y...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2022-39802

3242933 – CVE-2022-39802 Vulnerabilidad de recorrido de rutas de archivo en SAP Manufacturing Execution Información general Riesgo: CRÍTICO Versiones afectadas: root@kitploit: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 URL del proveedor: https://sap.com Bu...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 Vulnerabilidad de Server Side Request Forgery en SAP NetWeaver Development Infrastructure root@kitploit: Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7....

nuclei-template-cve-2025-31324-check

SAP CVE-2025-31324 Check Resumen Esta plantilla está diseñada para comprobar la presencia de la vulnerabilidad SAP NetWeaver CVE-2025-31324. Esta vulnerabilidad permite a usuarios no autorizados subir archivos JSP a través del endpoint /developmentserver/metadatauploader, lo que puede derivar en...