CVE-2025-69215

CVE-2025-69215: OpenSTAManager presenta una SQL Injection nel modulo Stampe Panoramica...

CVE-2026-24419

CVE-2026-24419: OpenSTAManager tem uma Injeção SQL no módulo Prima Nota Visão Geral...

CVE-2026-24418

CVE-2026-24418: OpenSTAManager presenta una vulnerabilità di SQL Injection nel modulo delle operazioni bulk di Scadenzario Panoramica...

CVE-2026-24417

CVE-2026-24417: OpenSTAManager tem uma Injeção de SQL Cega Baseada em Tempo com Negação de Serviço Amplificada Visão Geral...

CVE-2026-24416

CVE-2026-24416: OpenSTAManager presenta una SQL Injection Blind Basata sul Tempo nel Modulo Prezzi Articoli Panoramica...

CVE-2026-24415

CVE-2026-24415: OpenSTAManager Affected by XSS in modificaiva.php via righe parameter Panoramica...

CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC

CVE-2026-38751 – OpenSTAManager: Caricamento Arbitrario di File PoC Questo repository contiene un exploit proof-of-concept PoC per CVE-2026-38751, che affligge OpenSTAManager ≤ 2.10. La vulnerabilità consente a un attaccante autenticato di caricare un modulo malevolo tramite la funzionalità di...

CVE-2025-69212-PoC

CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager versioni Utilizzo root@kitploit: CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...

CVE-2025-69212-PoC

CVE-2025-69212 — PoC de Injeção de Comandos P7M no OpenSTAManager OpenSTAManager = 2.9.8 — Injeção de Comandos do SO através de nome de arquivo .p7m malicioso em upload ZIP. Arquivo: src/Util/XML.php:100 — $file não sanitizado em exec Vetor: /plugins/importFEZIP/actions.php → ZIP → nome de arquiv...

Hack-The-Box-Enigma-Findings-Report

🛡️ Hack The Box - Relatório de Descobertas Enigma 📋 Visão Geral Este repositório contém um relatório abrangente de teste de penetração para a máquina Enigma do Hack The Box. 🔍 Principais Descobertas Compartilhamento NFS Inseguro Expondo Documentos de Integração - Severidade Média Divulgação de...

CVE-2026-38751

CVE-2026-38751 — OpenSTAManager Modul-Upload RCE Authentifizierte RCE über unvalidierten ZIP-Upload im Modul-Update-Endpunkt. Betroffen: OpenSTAManager = 2.10.x Anforderungen pip install requests Verwendung root@kitploit: Reverse shell Penelope or any listener python3 exploit.py -u http://TARGET ...

CVE-2026-69212

CVE-2025-69212 — OpenSTAManager OS命令注入（远程代码执行） CVE-2025-69212 的概念验证利用程序，该漏洞是OpenSTAManager = 2.9.8中的一个OS命令注入漏洞，允许经过身份验证的攻击者通过恶意构造的ZIP文件上传实现远程代码执行。 安全公告 CVE： CVE-2025-69212 GHSA： GHSA-25fp-8w8p-mx36 受影响版本： OpenSTAManager = 2.9.8 修复版本： OpenSTAManager 2.9.9+ CVSS： 严重 漏洞详情 该漏洞存在于 src/Util/XML.php...

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

OpenSTAManager RCE 利用工具 CVE-2026-38751 概述 此 Python 脚本利用 OpenSTAManager 2.10 版本中的一个远程代码执行漏洞，编号为 CVE-2026-38751。该利用工具允许经过身份验证的用户上传恶意模块并在目标系统上执行任意命令。 漏洞详情 CVE ID ：CVE-2026-38751 产品 ：OpenSTAManager 版本 ：2.10 类型 ：远程代码执行 RCE 攻击向量 ：基于 Web，需要有效身份验证 利用原理 该利用工具遵循以下步骤： 1. 身份验证 ：使用提供的凭据登录 OpenSTAManager 应用 2...

CVE-2025-69212

CVE-2025-69212 विवरण OpenSTAManager तकनीकी सहायता, इलेक्ट्रॉनिक इनवॉइसिंग और लेखांकन के लिए एक प्रबंधन सॉफ्टवेयर समाधान है। संस्करण =2.9.8 एक प्रमाणित रिमोट कोड निष्पादन भेद्यता के प्रति संवेदनशील हैं। एक हमलावर एक विशेष रूप से तैयार .zip आर्काइव अपलोड करके इस समस्या का शोषण कर सकता है, जिसमें एक...

CVE-2025-69212

CVE-2025-69212: OpenSTAManager की P7M फ़ाइल प्रोसेसिंग में OS कमांड इंजेक्शन अवलोकन...

CVE-2025-69216

CVE-2025-69216: OpenSTAManager hat eine SQL-Injection in der Scadenzario-Druckvorlage Überblick...

CVE-2025-69214

CVE-2025-69214: OpenSTAManager presenta una SQL Injection in ajaxselect.php endpoint componenti Panoramica...

CVE-2025-69213

CVE-2025-69213: OpenSTAManager ha una SQL Injection in ajaxcomplete.php endpoint getsedi Panoramica...

OpenSTAManager-RCE-Exploit-CVE-2026-38751

OpenSTAManager RCE Exploit CVE-2026-38751 Beliebiger Datei-Upload, der zu Remote-Codeausführung führt Vollständiger Proof-of-Concept für CVE-2026-38751 , geschrieben in Rust. Warnung: Dieses Tool ist ausschließlich für autorisierte Sicherheitstests und zu Bildungszwecken bestimmt. Verwenden Sie e...

CVE-2025-69212-Exploit

CVE-2025-69212 - OpenSTAManager P7M Befehlsinjektions-Exploit Ein vollautomatisiertes Exploit-Skript für CVE-2025-69212 , eine Befehlsinjektions-Schwachstelle in OpenSTAManager. Dieses Skript authentifiziert sich mit Admin-Zugangsdaten, lädt eine schädliche PHP-Webshell über eine präparierte...