CVE-2025-31324
In 5 briefs, most recently 30 July 2025. RSS for this tag
Published 2025-04-24
Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗
Known exploited (CISA KEV)
SAP NetWeaver Unrestricted File Upload Vulnerability.
Added 2025-04-29 · used in ransomware campaigns
Coverage in DanSec Daily
- Saint Paul city cyberattack prompting National Guard activation, Aeroflot flight cancellations, and Allianz Life breach hitting 1.4M US customers.
- Coinbase breach via bribed support agents, Nucor halted by a cyber incident, and APT28 exploiting webmail zero-days in the RoundPress campaign.
- The Coinbase insider data breach and extortion attempt, SAP NetWeaver exploitation by BianLian and RansomExx, and Samsung MagicINFO Mirai attacks.
- Pearson breach, Insight Partners data theft, and Toronto school district ransom, plus SonicWall and Cisco flaws and Qilin ransomware activity.
- Marks & Spencer ransomware disruption by Scattered Spider, SAP NetWeaver CVE-2025-31324 exploitation, and Hitachi Vantara Akira attack.