https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T02:34:17.225367+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-69212 CVE-2025-69212 — OpenSTAManager has an OS Command Injection in P7M File Processing 2026-10-13T02:34:17.227066+00:00

Affected: devcode-it openstamanager

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.