Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-66837 — Technical documentation and proof-of-concept for CVE-2025-66837, a remote authenticated file upload vulnerability in ARIS allowing arbitrary code execution via crafted PDF files. | Kitploit
Tools/GitHubGitHub/saykino/cve-2025-66837
Vulnerability AnalysisExploitationWeb Application ExploitationMalware AnalysisPenetration Testing
GitHubsaykino/cve-2025-66837

CVE-2025-66837

Technical documentation and proof-of-concept for CVE-2025-66837, a remote authenticated file upload vulnerability in ARIS allowing arbitrary code execution via crafted PDF files.

View Repository
28 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-66837 Malicious File Upload

Description

A file upload vulnerability in ARIS allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware

CVSS Score: 6.8 (Medium)

Attack Type

  • Remote (Authenticated)

Affected Versions

  • Versions before <= 10.0.23.0.3587512

Vendor of Product

  • software ag

Affected Product Code Base

  • ARIS

Affected Component

  • File Upload API.

Mitigations

  • Validated the contents of the uploaded file.

Vulnerability Details

  • A user will download a pdf file/malware uploaded by the attacker and the malicious code will be executed after openining the file.

Fixed versions

  • Versions after > 10.0.23.0.3587512

Discovered By:

  • Yazan Abu-Nadi
Download Tool