CVE-2025-69212-PoC

CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager версии Использование CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...

CVE-2025-69212_PoC

CVE-2025-69212: Доказательство концепции PoC для OpenSTAManager Этот репозиторий содержит доказательство концепции PoC, демонстрирующее уязвимость, обозначенную как CVE-2025-69212 в OpenSTAManager. Это уязвимость внедрения команд ОС, вызванная функцией декодирования файлов P7M подписанный XML...

EUVD-2025-206884

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...

CVE-2025-69212: Improper Neutralization of Special Elements used in an OS Command

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...