## https://sploitus.com/exploit?id=8276B0B0-A504-5BFB-96EF-E9535076655D
# CVE-2025-69212-PoC
https://github.com/advisories/GHSA-25fp-8w8p-mx36
A critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.
## Clone and run
git clone https://github.com/xorandd/CVE-2025-69212-PoC
cd CVE-2025-69212
python3 CVE-2025-69212.py -u http://target.com -C