{"uuid": "7df43dad-391c-4f59-b748-6f2ea6009244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69212", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/446", "content": "CVE-2025-69212\n\nOpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.", "creation_timestamp": "2026-08-28T00:00:37.559722Z"}