259 matches found
CVE-2026-24419
CVE-2026-24419ļ¼OpenSTAManager ē Prima Nota ęØ”åååØ SQL ę³Øå „ę¼ę“ ę¦čæ° åꮵ| čƦę ---|--- CVE ID| CVE-2026-24419 äø„éę§| é« å®å Øå ¬å| ę„ēå®å Øå ¬å åē°č | Lukasz Rybak åå½±åäŗ§å devcode-it/openstamanager ļ¼ēę¬ļ¼fetchOne'SELECT idanagrafica FROM codocumenti WHERE id IN'.$iddocumenti ? implode',', $iddocumenti : 0.'''idanagrafica'; å½±åļ¼...
CVE-2026-24416
CVE-2026-24416ļ¼OpenSTAManager äŗ§åå®ä»·ęØ”åååØåŗäŗę¶é“ēē² SQL ę³Øå „ę¼ę“ ę¦čæ° åꮵ| čƦē»äæ”ęÆ ---|--- CVE ē¼å·| CVE-2026-24416 äø„éę§| é«å± å®å Øå ¬å| ę„ēå®å Øå ¬å åē°č | Lukasz Rybak åå½±åäŗ§å devcode-it/openstamanager ļ¼ēę¬ļ¼= 2.9.8ļ¼ CWE åē±» CWE-89: ęŖę£ē”®äøå SQL å½ä»¤äøä½æēØēē¹ę®å ē“ ļ¼'SQL ę³Øå „'ļ¼ čƦē»äæ”ęÆ ęč¦ OpenSTAManager v2.9.8 ēäŗ§åå®ä»·ęØ”åäøååØäø„éēåŗäŗę¶é“ēē² SQL...
OpenSTAManager_RCE_Exploit-CVE-2026-38751-
OpenSTAManager RCE Exploit CVE-2026-38751 Overview This Python script exploits a Remote Code Execution vulnerability in OpenSTAManager version 2.10, identified as CVE-2026-38751. The exploit allows authenticated users to upload a malicious module and execute arbitrary commands on the target syste...
CVE-2026-24418
CVE-2026-24418: OpenSTAManager has a SQL Injection vulnerability in the Scadenzario bulk operations module Overview...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 - OpenSTAManager P7M Command Injection Exploit...
Exploit for OS Command Injection in Devcode Openstamanager
OpenSTA-Exploit --- About CVE-2025-...
Exploit for OS Command Injection in Devcode Openstamanager
š”ļø Hack The Box - Enigma Findings Report š Overview This reposit...
Exploit for OS Command Injection in Devcode Openstamanager
No d...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 --- Description OpenSTAManager is a manag...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 - OpenSTAManager OS Command Injection PoC U...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 OpenSTAManager --check Vulnerabili...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8...
Exploit for OS Command Injection in Devcode Openstamanager
No d...
Exploit for CVE-2026-69212
CVE-2025-69212 ā OpenSTAManager OS Command Injection RCE Pr...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 PoC - OpenSTAManager P7M Command Injection RCE...
Exploit for OS Command Injection in Devcode Openstamanager
CVE-2025-69212 ā OpenSTAManager P7M Command Injection PoC Ope...
CVE-2026-38751
OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality modules/aggiornamenti/uploadmodules.php...
GHSA-RM34-FG4M-39MW OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality
OpenSTAManager versions 2.10 and earlier contain an arbitrary file upload vulnerability in the module update functionality modules/aggiornamenti/uploadmodules.php...
OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality
OpenSTAManager versions 2.10 and earlier contain an arbitrary file upload vulnerability in the module update functionality modules/aggiornamenti/uploadmodules.php...
Arbitrary File Upload
Overview devcode-it/openstamanager is a management software for technical assistance and electronic invoicing Affected versions of this package are vulnerable to Arbitrary File Upload via the uploadmodules.php process. An attacker can upload arbitrary files by exploiting insufficient validation...