CVE-2025-69212-PoC

CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager versiones Uso root@kitploit: CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...

CVE-2025-69212

CVE-2025-69212: OpenSTAManager presenta una inyección de comandos del sistema operativo en el procesamiento de archivos P7M Descripción general...

CVE-2025-69212_PoC

CVE-2025-69212: OpenSTAManager Proof of Concept PoC This repository contains a Proof of Concept PoC demonstrating the vulnerability identified as CVE-2025-69212 within OpenSTAManager, an OS Command Injection vulnerability caused by the P7M signed XML file decoding functionality. The versions...

CVE-2025-69212

CVE-2025-69212 Descripción OpenSTAManager es una solución de software de gestión para asistencia técnica, facturación electrónica y contabilidad. Las versiones =2.9.8 son vulnerables a una vulnerabilidad de ejecución remota de código autenticada. Un atacante puede explotar este problema cargando ...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — Inyección de Comandos del Sistema Operativo en el Procesamiento de Archivos P7M Resumen...

CVE-2025-69212-Exploit

CVE-2025-69212 - Exploit de inyección de comandos en OpenSTAManager P7M Un script de exploit totalmente automatizado para CVE-2025-69212 , una vulnerabilidad de inyección de comandos en OpenSTAManager. Este script se autentica con credenciales de administrador, implementa un shell web PHP malicio...

Exploit for OS Command Injection in Devcode Openstamanager

CVE-2025-69212 - OpenSTAManager P7M Command Injection Exploit...

Exploit for OS Command Injection in Devcode Openstamanager

OpenSTA-Exploit --- About CVE-2025-...

Exploit for CVE-2026-69212

CVE-2025-69212 — OpenSTAManager OS Command Injection RCE Pr...

CVE-2025-69212

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...

CVE-2025-69212

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...

CVE-2025-69212

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...

EUVD-2025-206884

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...

Command Injection

Overview devcode-it/openstamanager is a management software for technical assistance and electronic invoicing Affected versions of this package are vulnerable to Command Injection via the decodeP7M function. An attacker can execute arbitrary system commands on the server by uploading a ZIP archiv...