Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: From Web Shell to Full Control: APT-Style Exploits Surge Against SAP NetWeaver
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 11 May 2025 00:08:11 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #CVE_2025_31324 #enterprise risk #GOREVERSE #NetWeaver #Remote Code Execution #SAP #SAP Security #SUPERSHELL #Unit 42 #Web Shell
Daily CyberSecurity
From Web Shell to Full Control: APT-Style Exploits Surge Against SAP NetWeaver
CVE-2025-31324 in SAP NetWeaver lets attackers upload web shells, enabling full remote code execution and system compromise—no login required.
16 views
Daily Writeups
⤷ Title: MITRE Technique and Detection Opportunities — CVE-2025–31324 — SAP Critical Vulnerability CVSS 10!
════════════════════════
𐀪 Author: MITRE Doggy
════════════════════════
ⴵ Time: Sun, 11 May 2025 06:53:30 GMT
════════════════════════
⌗ Tags: #sap #vulnerability #netweaver #cve_2025_31324 #cybersecurity
Medium
MITRE Technique and Detection Opportunities — CVE-2025–31324 — SAP Critical Vulnerability CVSS 10! — Unit42 Threat Research
A critical SAP NetWeaver vulnerability (CVE-2025–31324) allows unauthenticated attackers to upload malicious files, enabling remote code…
25 views
Daily Writeups
⤷ Title: SAP Patch Fixes Critical CVSS 9.6 Flaw in NetWeaver: Privilege Escalation and System Integrity at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 06:31:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ABAP Security #CVE_2025_42989 #NetWeaver #privilege escalation #SAP Business Warehouse #SAP BusinessObjects #SAP GRC #SAP Security Patch Day #XSS Vulnerability
Daily CyberSecurity
SAP Patch Fixes Critical CVSS 9.6 Flaw in NetWeaver: Privilege Escalation and System Integrity at Risk
SAP's June 2025 Security Patch Day reveals critical and high-severity vulnerabilities in NetWeaver, GRC, BW, and BI. Immediate patching is crucial to protect your enterprise.
39 views
Daily Writeups
⤷ Title: SAP’s July 2025 Patch Day Brings 27 New Notes, Multiple Critical RCE & Deserialization Flaws (CVSS 10.0)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 07:40:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2025_30009 #CVE_2025_42967 #Enterprise Portal #Insecure Deserialization #Live Auction Cockpit #NetWeaver #rce #Remote Code Execution #S/4HANA #SAP #security patch #Vulnerability
Daily CyberSecurity
SAP's July 2025 Patch Day Brings 27 New Notes, Multiple Critical RCE & Deserialization Flaws (CVSS 10.0)
SAP's July 2025 Patch Day fixes 27 vulnerabilities, including critical RCE (CVSS 10.0) in Live Auction Cockpit and multiple insecure deserialization flaws (CVSS 9.1) across NetWeaver components.
23 views
Daily Writeups
⤷ Title: SAP Patches Critical Flaws Allowing Full System Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 14 Sep 2025 09:06:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #data breach #enterprise software #NetWeaver #remote code execution #SAP #Security Patch #vulnerability
Penetration Testing Tools
SAP Patches Critical Flaws Allowing Full System Takeover
SAP has released a critical security patch for its NetWeaver Java application server, addressing flaws that could lead to full system compromise.
48 views
Daily Writeups
⤷ Title: SAP Patches Critical 10.0 Flaw in NetWeaver: Unauthenticated RCE Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Oct 2025 08:27:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_42937 #CVE_2025_42944 #cybersecurity #NetWeaver #rce #SAP #Security Patch Day #Vulnerability
Daily CyberSecurity
SAP Patches Critical 10.0 Flaw in NetWeaver: Unauthenticated RCE Risk
SAP's October 2025 Security Patch Day addressed 13 new notes, including two critical 10.0 flaws in NetWeaver AS Java and Print Service, posing an RCE threat.
14 views
Daily Writeups
⤷ Title: SAP November 2025 Patch Day Fixes 3 Critical Flaws (CVSS 10) — Including Code Injection and Insecure Key Management
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 08:14:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Patch Update #Deserialization #Hard_coded Credentials #NetWeaver #rce #SAP #Solution Manager
Daily CyberSecurity
SAP November 2025 Patch Day Fixes 3 Critical Flaws (CVSS 10) — Including Code Injection and Insecure Key Management
SAP released its Patch Day update fixing 18 flaws, including two Critical (CVSS 10.0) vulnerabilities: RMI-P4 RCE and Hard-Coded Credentials in SQL Anywhere Monitor, risking unauthenticated takeover.
16 views
Daily Writeups
⤷ Title: Critical SAP Alert: Code Injection (CVSS 9.9) Exposes S/4HANA Databases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 07:47:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_0488 #CVE_2026_0509 #database security #ERP Security #NetWeaver #Patch Tuesday #SAP CRM #SAP S/4HANA #SAP Security
Daily CyberSecurity
Critical SAP Alert: Code Injection (CVSS 9.9) Exposes S/4HANA Databases
SAP Feb 2026 update fixes critical CVE-2026-0488 (CVSS 9.9). Code injection in CRM & S/4HANA allows full database compromise. Patch immediately.
29 views
Daily Writeups
⤷ Title: Critical 9.6 Severity: SAP May 2026 Patch Day Fixes Dangerous S/4HANA and Commerce Cloud Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 08:08:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BusinessObjects #Commerce Cloud #CVE_2026_34260 #CVE_2026_34263 #Cyber Security #infosec #NetWeaver #Patch Day #rce #S/4HANA #SAP Security #sql injection
Daily CyberSecurity
Critical 9.6 Severity: SAP May 2026 Patch Day Fixes Dangerous S/4HANA and Commerce Cloud Flaws
SAP’s May 2026 Patch Day fixes two 9.6 severity flaws in S/4HANA and Commerce Cloud. Prevent SQL injection and RCE by updating your SAP landscape today.
17 views
Daily Writeups
⤷ Title: SAP Patches CVE-2026-44747 (CVSS 9.9): Critical Memory Corruption Flaw in NetWeaver AS ABAP
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 07:34:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_44747 #memory corruption #NetWeaver #SAP #SAP Security Patch Day
Daily CyberSecurity
SAP Patches CVE-2026-44747 (CVSS 9.9): Critical Memory Corruption Flaw in NetWeaver AS ABAP
TL;DR SAP Security Patch Day July 2026 shipped 16 new security notes and one GitHub advisory. The top fix, CVE-2026-44747 (CVSS 9.9), patches a memory corruption flaw in SAP NetWeaver Application …
10 views