Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-69212-PoC | Kitploit
Tools/GitHubGitHub/xorandd/cve-2025-69212-poc
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and Control
GitHubxorandd/cve-2025-69212-poc

CVE-2025-69212-PoC

View Repository
1 month agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-69212-PoC

https://github.com/advisories/GHSA-25fp-8w8p-mx36

OpenSTAManager (versions <= 2.9.8) has a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.

Clone and run

root@kitploit:~
git clone https://github.com/xorandd/CVE-2025-69212-PoC
cd CVE-2025-69212-PoC
python3 CVE-2025-69212.py -u http://target.com -C <PHPSESSID_cookie>

Usage

root@kitploit:~
CVE-2025-69212.py [-h] -u URL -C COOKIE

options:
  -h, --help           show this help message and exit
  -u, --url URL        target url, eg http://127.0.0.1
  -C, --cookie COOKIE  cookie value
Download Tool