{"vulnerability": "cve-2025-4914", "sightings": [{"uuid": "16d028ea-45cb-4889-85a3-5e181889d790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4914", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpja7yu5fe2h", "content": "", "creation_timestamp": "2025-05-19T09:13:37.103015Z"}, {"uuid": "ed08081c-e9c3-46fb-b69a-e14572679968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lsg7ruj4a32x", "content": "", "creation_timestamp": "2025-06-25T08:43:17.274584Z"}, {"uuid": "139cf1b6-7120-4257-95e6-9f8042bbe035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/senator77billy.bsky.social/post/3lstda2qn3k2y", "content": "", "creation_timestamp": "2025-06-30T13:49:31.856716Z"}, {"uuid": "7d66715b-1efa-4ff6-bd77-c1da21c7f74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3lrk2uxszo4u2", "content": "", "creation_timestamp": "2025-06-14T04:01:10.937922Z"}, {"uuid": "9c4b208d-1f7a-4441-bdbb-fb23c1c7f4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lsk3jp4gjk2h", "content": "", "creation_timestamp": "2025-06-26T21:37:47.102780Z"}, {"uuid": "d0f8f28c-72c7-4d5a-8eb4-2f241d7ce3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49146", "type": "seen", "source": "https://bsky.app/profile/theemerichunter.bsky.social/post/3lrkgulea3i2i", "content": "", "creation_timestamp": "2025-06-14T07:35:31.935882Z"}, {"uuid": "972652ea-4d3a-4e4f-89eb-c1bd0eed60bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrbg5cpqiv23", "content": "", "creation_timestamp": "2025-06-10T17:28:33.520386Z"}, {"uuid": "6f0c0a3f-9e32-4030-bbca-c885b942e85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/kaldata.bsky.social/post/3lsgmnvicor2z", "content": "", "creation_timestamp": "2025-06-25T12:33:43.432467Z"}, {"uuid": "fb453cec-1233-48d7-abce-23b547955a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lsklfo5fhc2k", "content": "", "creation_timestamp": "2025-06-27T02:21:52.198556Z"}, {"uuid": "11f11d4c-d4a8-4e92-ae29-04d35589b49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrbhpiyk3l2e", "content": "", "creation_timestamp": "2025-06-10T17:56:37.739399Z"}, {"uuid": "af982000-4e9d-4674-b353-b7615515eaaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lspfj5w7ys23", "content": "", "creation_timestamp": "2025-06-29T00:19:48.522758Z"}, {"uuid": "ccc1d20e-38c0-4f6f-a5b2-a1d620a5204f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-608f6da6-5c765a350835c75b", "content": "", "creation_timestamp": "2025-06-25T15:46:42.001951Z"}, {"uuid": "6d5887c9-8e71-4425-8ad4-c3657d981f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3lsu7ywziu32m", "content": "", "creation_timestamp": "2025-06-30T22:24:31.138598Z"}, {"uuid": "60c40eb7-042e-4660-9cff-18fe4e8d07f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/114774656364028312", "content": "", "creation_timestamp": "2025-06-30T22:24:31.898363Z"}, {"uuid": "1ad7fca3-8ad5-4904-b468-f4006db62627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lscgkgjxoj25", "content": "", "creation_timestamp": "2025-06-23T20:33:44.952768Z"}, {"uuid": "428aac51-7d5a-4b8a-bd9d-525b0a2ea03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49144", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lshlanrg3ej2", "content": "", "creation_timestamp": "2025-06-25T21:42:54.852682Z"}, {"uuid": "6f86d0c8-8027-4483-8e7f-242aef1ed2a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lsczysvuvw22", "content": "", "creation_timestamp": "2025-06-24T02:21:49.214636Z"}, {"uuid": "d5539ce4-6acd-4320-b5f8-117d39d8c0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/deskmodder.de/post/3ltllbdrnj32p", "content": "", "creation_timestamp": "2025-07-10T05:17:18.851456Z"}, {"uuid": "a4dc4d62-6ad5-4cb2-b3e6-046d4bba5dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lsiegk3qkc2a", "content": "", "creation_timestamp": "2025-06-26T05:11:50.094412Z"}, {"uuid": "eba1e6ae-d139-4664-a574-905f9a62ded4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/ryan.staticnoi.se/post/3lsieidfl622a", "content": "", "creation_timestamp": "2025-06-26T05:12:48.045604Z"}, {"uuid": "f917b4d7-c65a-4bce-bae8-6233deb4261e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/ryan.staticnoi.se/post/3lsieiejmic2a", "content": "", "creation_timestamp": "2025-06-26T05:12:48.559621Z"}, {"uuid": "fa931b9d-87b9-415b-92e7-108551f115dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lsdids6wy7x2", "content": "", "creation_timestamp": "2025-06-24T06:38:38.246784Z"}, {"uuid": "f80f10ed-2fbc-430d-9d1e-7275a7b2b79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lsdmfnfd5c26", "content": "", "creation_timestamp": "2025-06-24T07:51:09.959649Z"}, {"uuid": "950c9ce0-0cee-437c-9edc-1056e3e400e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lsdmfp6n4s26", "content": "", "creation_timestamp": "2025-06-24T07:51:10.512327Z"}, {"uuid": "f2756ae8-27b3-4d16-89d1-0a5a658fee98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lsdmfp6o4226", "content": "", "creation_timestamp": "2025-06-24T07:51:11.028735Z"}, {"uuid": "3423928f-a55b-4607-9fb1-9851a6fc4b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49144", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lsrarl6idm2k", "content": "", "creation_timestamp": "2025-06-29T18:00:18.746887Z"}, {"uuid": "8247b0dc-1c35-43eb-b36c-2fee1dc8216c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/mbissey.bsky.social/post/3lsio4oiow62s", "content": "", "creation_timestamp": "2025-06-26T08:05:41.092562Z"}, {"uuid": "bb950c39-6f3f-4aa3-a108-613b1d93d152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49140", "type": "seen", "source": "https://bsky.app/profile/pion.ly/post/3lr6uzl55x22n", "content": "", "creation_timestamp": "2025-06-09T17:17:11.502255Z"}, {"uuid": "8561af56-4391-4e97-be88-d92e85d5ceb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/brianhaddock.bsky.social/post/3lsebnhccvn2i", "content": "", "creation_timestamp": "2025-06-24T14:11:17.690478Z"}, {"uuid": "c1db9fb9-48ea-401f-9817-31b6c7374e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lsef6axsu22o", "content": "", "creation_timestamp": "2025-06-24T15:14:27.462367Z"}, {"uuid": "ad945752-a203-4a10-8e7a-5fcee0340183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49141", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr7kvfnehj25", "content": "", "creation_timestamp": "2025-06-09T23:48:17.249928Z"}, {"uuid": "372f7951-4e89-47b5-88cc-2ed42d7682ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr7l6e3azl2u", "content": "", "creation_timestamp": "2025-06-09T23:53:17.527458Z"}, {"uuid": "05432dc4-0d42-47f0-99e0-88cfaff5a70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49146", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lrim3u5otg2g", "content": "", "creation_timestamp": "2025-06-13T14:03:45.346830Z"}, {"uuid": "0eabdab2-ae7a-45ce-be97-07c515e94613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-49146", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3lrim3vwih5x2", "content": "", "creation_timestamp": "2025-06-13T14:03:49.226981Z"}, {"uuid": "ce08d4be-0eb6-4e7a-a4ae-f1725e34f128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "MISP/bfad5bc2-f0bb-4051-9068-f22ff96b38cf", "content": "", "creation_timestamp": "2025-06-25T14:08:01.000000Z"}, {"uuid": "884f7f25-a6e6-4769-8d4a-a662c9df730b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrdw6hkftp25", "content": "", "creation_timestamp": "2025-06-11T17:20:51.405517Z"}, {"uuid": "a961ec0e-2799-4676-86b9-5d9aa843b244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrdxcbi7pk2m", "content": "", "creation_timestamp": "2025-06-11T17:40:53.176475Z"}, {"uuid": "1a99f76e-974b-4438-a6bc-dab59f29486b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49149", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114701175434297633", "content": "", "creation_timestamp": "2025-06-17T22:57:21.991156Z"}, {"uuid": "d85fd761-9cb5-41f9-87b2-daae6ddd5cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrtuk3an7n25", "content": "", "creation_timestamp": "2025-06-18T01:34:09.448415Z"}, {"uuid": "cb158e63-337c-4229-ac64-75f79df0ab6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:20.000000Z"}, {"uuid": "beac2820-0941-485e-95a3-9a73ecb438ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49145", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5crgp5yes52", "content": "", "creation_timestamp": "2025-11-10T23:25:49.020639Z"}, {"uuid": "59952c88-6d25-4292-b19a-a7c37a7cb0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5csunbtgo2s", "content": "", "creation_timestamp": "2025-11-10T23:51:20.468209Z"}, {"uuid": "06c88723-826a-4868-ad68-5711360bb7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:24.000000Z"}, {"uuid": "94518943-0364-4558-a661-2db9b104e785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115396270595470850", "content": "", "creation_timestamp": "2025-10-18T17:09:13.274842Z"}, {"uuid": "17221c62-9df6-4b05-b2c1-c49c60c86b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://mastodon.social/users/verbrecher/statuses/115397444939820963", "content": "", "creation_timestamp": "2025-10-18T22:07:52.766497Z"}, {"uuid": "ed601751-c8d4-46df-b79e-5b9702a0772a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lxstxqdejf2s", "content": "", "creation_timestamp": "2025-09-02T00:22:24.552953Z"}, {"uuid": "b443ca9c-fc39-4945-b97e-dfd3e47d6877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkrlld2u", "content": "", "creation_timestamp": "2025-09-02T10:39:42.587760Z"}, {"uuid": "5438164f-5504-4311-adb0-51d35a29e1e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkroj32u", "content": "", "creation_timestamp": "2025-09-02T10:39:44.051055Z"}, {"uuid": "f3d59e50-c002-4331-a534-f2cd5c239794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkroj42u", "content": "", "creation_timestamp": "2025-09-02T10:39:45.571519Z"}, {"uuid": "4fca0e37-1ee0-475c-ae97-920a155413fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkrpie2u", "content": "", "creation_timestamp": "2025-09-02T10:39:47.610260Z"}, {"uuid": "e6c628ee-9bc2-4cb3-9377-15c2d3c28dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/graylog.bsky.social/post/3meoedt42as2t", "content": "", "creation_timestamp": "2026-02-12T15:59:43.630202Z"}, {"uuid": "a0667d50-62ad-46fb-a5a9-9072441e1b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mephjgpyjj26", "content": "", "creation_timestamp": "2026-02-13T02:29:12.050733Z"}, {"uuid": "910f04ce-6045-413b-994f-ce916c1498a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mepnccidkk2s", "content": "", "creation_timestamp": "2026-02-13T04:12:34.366577Z"}, {"uuid": "2bdea66f-ca77-450f-8015-515191506a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mgg7p4nk3w2s", "content": "", "creation_timestamp": "2026-03-06T21:05:37.726530Z"}, {"uuid": "a1736a35-a7fc-4ffd-8a1e-fe1c571e42f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/18561", "content": "CVE-2025-49144: Notepad++ Privilege Escalation Vulnerability\n\nCredit: youtube.com/@redhotcyber\n\nPoC: https://github.com/TheTorjanCaptain/CVE-2025-49144_PoC", "creation_timestamp": "2025-06-27T18:35:19.000000Z"}, {"uuid": "c1710cae-ab9b-4f4f-b2e0-4da80713c6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/hgzz4cel2feTkZYZr2gMDbhbJFHRxFNSDNYTQ043o2aDwrmM", "content": "", "creation_timestamp": "2025-06-25T13:32:04.000000Z"}, {"uuid": "91558025-41f6-419a-961e-7979d41009bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/24oU4MCT2jZWID-l-wRv_upntr48Xy0UlhMHZmftTiSRrRs", "content": "", "creation_timestamp": "2025-06-27T03:00:05.000000Z"}, {"uuid": "5ef6def2-f06c-4490-8806-b80fd18f89ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/zTvjXYU_50dUlAoBwzYenRXKilDAeaHsOh4ej1oSQHnwbLk", "content": "", "creation_timestamp": "2025-06-26T21:00:04.000000Z"}, {"uuid": "86a2bfd3-3f41-4184-a576-796a97b3b3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/-Dq3DE_VxtxovL4vGv-vxHKY8mGowa8av6xqNlKdban3pW4", "content": "", "creation_timestamp": "2025-06-27T03:00:09.000000Z"}, {"uuid": "dbe72cea-f976-4f7c-883c-8ef9e8d94d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/qIHlUQiEdKXaiBZEW4uGojDJ-lyTdj_8TQYu98JC_9D7A332", "content": "", "creation_timestamp": "2025-06-25T13:37:35.000000Z"}, {"uuid": "24942a4d-5a0b-4fd9-826a-75bdfb12b48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43508", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA test attack for CVE-2025-49144\nURL\uff1ahttps://github.com/tristanvandermeer/CVE-2025-49144-Test\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-10T01:54:32.000000Z"}, {"uuid": "dd8077e9-8a83-49ea-8ba7-5035039dde87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/WrQaMTevy7WSUORikUxdrSPBs99wZo-jtxg57p3kMuQ3eM0", "content": "", "creation_timestamp": "2025-11-04T21:00:05.000000Z"}, {"uuid": "1d1f3948-69ee-46c9-bab9-9eee1b762351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/four_rays/111", "content": "\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Notepad ++ \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e SYSTEM.\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 \u043f\u043e\u0438\u0441\u043a\u0430 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Notepad++ \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0435\u0433\u043e \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u0435\u0440\u043e\u043c. \u0414\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0435 \u043f\u0443\u0442\u0438. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0430\u043c \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440 Notepad ++ \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a \u043f\u043e\u0440\u044f\u0434\u043a\u0443 \u043f\u043e\u0438\u0441\u043a\u0430 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (Search Order).\n\n\ud83d\udc4d \u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442\n\n\u0412\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Notepad ++ \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a Search Order Hijack:\n\n1. regsvr32.exe \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 COM-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 NppShell.dll \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435. \nregsvr32 /s \"C:\\Program Files\\Notepad++\\contextMenu\\NppShell.dll\"\nNppShell.dll \u2014 \u044d\u0442\u043e DLL, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e COM-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432. \u0415\u0435 \u0446\u0435\u043b\u044c \u2014 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0438\u043a\u043e\u043d\u043a\u0438 Notepad ++ \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u043d\u043e\u0435 \u043c\u0435\u043d\u044e \u043f\u0440\u0438 \u043f\u0440\u0430\u0432\u043e\u043c \u043a\u043b\u0438\u043a\u0435 \u043c\u044b\u0448\u0438 \u043d\u0430 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0435\u0433\u043e Notepad'\u043e\u043c.\n\n2. rundll32.exe  \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 Notepad ++ \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \nrundll32.exe \"C:\\Program Files\\Notepad++\\contextmenu\\NppShell.dll\",CleanupDll\n\u0418\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 NppShell.dll \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f CleanupDll \u2014 \u043e\u043d\u0430 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0443\u043b\u044f NppShell, \u0435\u0441\u043b\u0438 \u043e\u043d \u0443\u0436\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 Windows \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043d\u0435 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439:\n\n1. \u041f\u0430\u043f\u043a\u0430, \u0433\u0434\u0435 \u0431\u044b\u043b\u043e \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\n2. System32\n3. /Windows/\n4. WorkingDirectory\n5. PATH \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043b\u044e\u0431\u043e\u0439 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u044b \u043d\u0430\u0437\u043e\u0432\u0435\u043c \u043e\u0434\u043d\u043e\u0438\u043c\u0435\u043d\u043d\u043e \u0441 regsvr32.exe \u0438\u043b\u0438 rundll32.exe \u0438 \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043c \u0432 \u043e\u0434\u043d\u0443 \u043f\u0430\u043f\u043a\u0443 \u0441 \u0438\u043d\u0441\u0442\u0430\u043b\u0435\u0440\u043e\u043c, \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 UAC. \u0418\u043c\u0435\u044f \u0432 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442 \u0442\u0440\u0443\u0434\u0430 \u043f\u043e\u0434\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043e SYSTEM.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e Notepad ++ \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0440\u0435\u043b\u0438\u0437 \u0432\u0435\u0440\u0441\u0438\u0438 8.2.2, \u0433\u0434\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432\u044b\u0437\u043e\u0432\u0430 CreateProcessW \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Notepad.\n\n\ud83d\udc4d  \u041a\u0430\u043a \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0412 \u0441\u0442\u0430\u0440\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.6.8 (\u0432\u0435\u0440\u0445\u043d\u0438\u0439 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442) \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0434\u043e rundll32.exe \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0432\u044b\u0437\u043e\u0432\u0430 CreateProcessW\n\n\u0412 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.8.2 (\u043d\u0438\u0436\u043d\u0438\u0439 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442) \u0443\u043a\u0430\u0437\u0430\u043d \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e mitigation\\detection\n1. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Notepad++ \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.8.2, \u0433\u0434\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u043f\u043e\u0438\u0441\u043a\u0430\n2. \u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432 rundll32.exe \u0438 regsvr32.exe \u0438\u0437 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 (C:\\Windows\\System32|C:\\Windows\\SysWoW64)", "creation_timestamp": "2025-07-09T09:21:12.000000Z"}, {"uuid": "3776fcd2-5f66-4795-b569-c8f2d6c8d5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/58255", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis is my reproduce PoC for CVE-2025-49144\nURL\uff1ahttps://github.com/havertz2110/CVE-2025-49144\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-04T10:20:48.000000Z"}, {"uuid": "437f9f82-93cd-4b13-ae7c-1087832568be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4914", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16804", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4914\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-19T06:00:07.968Z\n\ud83d\udccf Modified: 2025-05-19T06:00:07.968Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.309471\n2. https://vuldb.com/?ctiid.309471\n3. https://vuldb.com/?submit.579096\n4. https://github.com/Pjwww13447/pjwww/issues/16\n5. https://phpgurukul.com/", "creation_timestamp": "2025-05-19T06:38:49.000000Z"}, {"uuid": "517a8818-24cb-43dd-9b4f-f82ca27ec317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49141", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49141\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a URL string from a POST request and insufficiently validates user input. The `set_remote` function later passes this input into `proc_open`, yielding OS command injection. An authenticated attacker can craft a URL string that bypasses the validation checks employed by the `filter_var` and `strpos` functions in order to execute arbitrary OS commands on the backend server. The attacker can exfiltrate command output via an HTTP request. Version 11.0.3 contains a patch for the issue.\n\ud83d\udccf Published: 2025-06-09T21:11:08.889Z\n\ud83d\udccf Modified: 2025-06-09T21:11:08.889Z\n\ud83d\udd17 References:\n1. https://github.com/haxtheweb/issues/security/advisories/GHSA-g4cf-pp4x-hqgw\n2. https://github.com/haxtheweb/haxcms-nodejs/commit/5131fea6b6be611db76a618f89bd2e164752e9b3", "creation_timestamp": "2025-06-09T21:31:56.000000Z"}, {"uuid": "7328b9b9-bac4-4f3f-9394-e5cda78c9007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49140", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17781", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49140\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should upgrade to v0.1.39 or later, which validates that: `padLen > 0 && padLen <= payloadLength` and return error  on overflow, avoiding panic. If upgrading is not possible, apply the patch from the pull request manually or drop packets whose P-bit is set but whose padLen is zero or larger than the remaining payload.\n\ud83d\udccf Published: 2025-06-09T21:13:12.388Z\n\ud83d\udccf Modified: 2025-06-09T21:13:12.388Z\n\ud83d\udd17 References:\n1. https://github.com/pion/interceptor/security/advisories/GHSA-f26w-gh5m-qq77\n2. https://github.com/pion/webrtc/issues/3148\n3. https://github.com/pion/interceptor/pull/338\n4. https://github.com/pion/interceptor/commit/fa5b35ea867389cec33a9c82fffbd459ca8958e5", "creation_timestamp": "2025-06-09T21:31:55.000000Z"}, {"uuid": "ba498c74-b2a8-4334-b538-7a8a091dc189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49142", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17940", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49142\n\ud83d\udd25 CVSS Score: 6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:L)\n\ud83d\udd39 Description: Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configuration of the Jinja2 templating feature used in computed fields, custom links, etc. in Nautobot, a malicious user could configure this feature set in ways that could expose the value of Secrets defined in Nautobot when the templated content is rendered or that could call Python APIs to modify data within Nautobot when the templated content is rendered, bypassing the object permissions assigned to the viewing user. Nautobot versions 1.6.32 and 2.4.10 will include fixes for the vulnerability. The vulnerability can be partially mitigated by configuring object permissions appropriately to limit certain actions to only trusted users.\n\ud83d\udccf Published: 2025-06-10T15:40:21.105Z\n\ud83d\udccf Modified: 2025-06-10T17:10:21.784Z\n\ud83d\udd17 References:\n1. https://github.com/nautobot/nautobot/security/advisories/GHSA-wjw6-95h5-4jpx\n2. https://github.com/nautobot/nautobot/pull/7417\n3. https://github.com/nautobot/nautobot/pull/7429\n4. https://docs.djangoproject.com/en/4.2/ref/templates/api/#alters-data-description\n5. https://jinja.palletsprojects.com/en/stable/sandbox", "creation_timestamp": "2025-06-10T17:32:32.000000Z"}, {"uuid": "5df447bf-f884-42be-b2b2-09fb7ad41edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49143", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17956", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49143\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N)\n\ud83d\udd39 Description: Nautobot is a Network Source of Truth and Network Automation Platform. Prior to v2.4.10 and v1.6.32 , files uploaded by users to Nautobot's MEDIA_ROOT directory, including DeviceType image attachments as well as images attached to a Location, Device, or Rack, are served to users via a URL endpoint that was not enforcing user authentication. As a consequence, such files can be retrieved by anonymous users who know or can guess the correct URL for a given file. Nautobot v2.4.10 and v1.6.32 address this issue by adding enforcement of Nautobot user authentication to this endpoint.\n\ud83d\udccf Published: 2025-06-10T15:43:59.225Z\n\ud83d\udccf Modified: 2025-06-10T18:12:01.967Z\n\ud83d\udd17 References:\n1. https://github.com/nautobot/nautobot/security/advisories/GHSA-rh67-4c8j-hjjh\n2. https://github.com/nautobot/nautobot/pull/6672\n3. https://github.com/nautobot/nautobot/pull/6703\n4. https://github.com/nautobot/nautobot/commit/9c892dc300429948a4714f743c9c2879d8987340\n5. https://github.com/nautobot/nautobot/commit/d99a53b065129cff3a0fa9abe7355a9ef1ad4c95", "creation_timestamp": "2025-06-10T18:33:07.000000Z"}, {"uuid": "716c51eb-7ec5-4bd2-8126-79e49cc0254d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49148", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18085", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49148\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: ClipShare is a lightweight and cross-platform tool for clipboard sharing. Prior to 3.8.5, ClipShare Server for Windows uses the default Windows DLL search order and loads system libraries like CRYPTBASE.dll and WindowsCodecs.dll from its own directory before the system path. A local, non-privileged user who can write to the folder containing clip_share.exe can place malicious DLLs there, leading to arbitrary code execution in the context of the server, and, if launched by an Administrator (or another elevated user), it results in a reliable local privilege escalation. This vulnerability is fixed in 3.8.5.\n\ud83d\udccf Published: 2025-06-11T14:53:48.591Z\n\ud83d\udccf Modified: 2025-06-11T15:05:08.241Z\n\ud83d\udd17 References:\n1. https://github.com/thevindu-w/clip_share_server/security/advisories/GHSA-rc47-h83g-2r8j", "creation_timestamp": "2025-06-11T15:32:04.000000Z"}, {"uuid": "df86679a-b698-4462-ba03-3b091295d17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49149", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18681", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49149\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N)\n\ud83d\udd39 Description: Dify is an open-source LLM app development platform. In version 1.2.0, there is insufficient filtering of user input by web applications. Attackers can use website vulnerabilities to inject malicious script code into web pages. This may result in a cross-site scripting (XSS) attack when a user browses these web pages. At time of posting, there is no known patched version.\n\ud83d\udccf Published: 2025-06-17T22:34:24.515Z\n\ud83d\udccf Modified: 2025-06-17T22:34:24.515Z\n\ud83d\udd17 References:\n1. https://github.com/langgenius/dify/security/advisories/GHSA-grmh-ww4v-5cgj", "creation_timestamp": "2025-06-17T23:42:06.000000Z"}, {"uuid": "ee83840a-f21a-46bb-8a1d-9b08cbfcc4f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20007", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49144\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows unprivileged users to gain SYSTEM-level privileges through insecure executable search paths. An attacker could use social engineering or clickjacking to trick users into downloading both the legitimate installer and a malicious executable to the same directory (typically Downloads folder - which is known as Vulnerable directory). Upon running the installer, the attack executes automatically with SYSTEM privileges. This issue has been fixed and will be released in version 8.8.2.\n\ud83d\udccf Published: 2025-06-23T19:01:16.276Z\n\ud83d\udccf Modified: 2025-07-01T03:55:56.212Z\n\ud83d\udd17 References:\n1. https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-9vx8-v79m-6m24\n2. https://github.com/notepad-plus-plus/notepad-plus-plus/commit/f2346ea00d5b4d907ed39d8726b38d77c8198f30\n3. https://drive.google.com/drive/folders/11yeUSWgqHvt4Bz5jO3ilRRfcpQZ6Gvpn", "creation_timestamp": "2025-07-01T05:10:45.000000Z"}, {"uuid": "3bb3b82b-da56-4225-9c69-6eeaed4bf619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/41888", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-49144 PoC for security researchers to test and try.\nURL\uff1ahttps://github.com/TheTorjanCaptain/CVE-2025-49144_PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-25T19:54:17.000000Z"}, {"uuid": "dbb0a129-3fed-43e6-bcef-e5d167156f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/41730", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC CVE-2025-49144 \nURL\uff1ahttps://github.com/Vr00mm/CVE-2025-49144\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-24T16:04:44.000000Z"}, {"uuid": "279546e1-8bd6-4959-879c-b9171317f34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42199", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDiscover CVE-2025-49144, a local privilege escalation flaw in Notepad++ installers. Learn how attackers exploit this vulnerability. \ud83d\udc19\ud83d\udd0d\nURL\uff1ahttps://github.com/65-75-65-83-72/CVE-2025-49144_PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-28T05:12:18.000000Z"}, {"uuid": "aa5bd698-0a6f-46d6-bc0d-bd9e82eb6090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42182", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDiscover the CVE-2025-49144 vulnerability in Notepad++ installers. This PoC highlights local privilege escalation risks. \ud83d\udee0\ufe0f\ud83d\udd0d\nURL\uff1ahttps://github.com/65-75-65-83-72/65-75-65-83-72.github.io\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-28T02:41:54.000000Z"}, {"uuid": "fa9254d2-6527-4dd8-9b73-ae70f9aabd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42392", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof of Concept (PoC) that exploits the CVE-2025-49144 vulnerability in the Notepad++ 8.8.1 installer. \nURL\uff1ahttps://github.com/b0ySie7e/Notepad-8.8.1_CVE-2025-49144\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-29T16:50:25.000000Z"}, {"uuid": "d53d5a02-abd4-49fd-9bf9-4404fa97a42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42015", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-49144 * Notepad++ v8.8.1 * SYSTEM-level POC\nURL\uff1ahttps://github.com/assad12341/notepad-v8.8.1-LPE-CVE-\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-26T18:18:49.000000Z"}, {"uuid": "e62e506d-89a3-4f44-b74b-626197944e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/C2T-nWoOtg2ic5DSb70B26dWLlW9dn-lkZdU8Tvb5zZac3M", "content": "", "creation_timestamp": "2025-09-19T19:00:08.000000Z"}, {"uuid": "3f84ef3d-c52b-4480-8f8d-317e2cda1973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/839", "content": "#pentest #cve\n\nPoC: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144 \u0432 Notepad++\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 Notepad++ (\u0432\u0435\u0440\u0441\u0438\u0438 \u2264 8.8.1) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f System.\n\n\u0422\u0430\u043a\u0436\u0435 \u043a \u0434\u0430\u043d\u043d\u043e\u043c\u0443 PoC \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u043c  \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u043f\u0440\u0438\u0447\u0438\u043d \u0435\u0451 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "creation_timestamp": "2025-07-08T08:08:16.000000Z"}, {"uuid": "54b91130-fe2f-4304-9b9e-19eb53f2f39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/Vm_C3grssVVNHTasaKMrEWrgVm8hzPtsHGCqWC4-NgSy8rY", "content": "", "creation_timestamp": "2025-07-23T03:00:06.000000Z"}, {"uuid": "c3912e58-bc98-4ece-b2d7-607aa3556338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/poxek/5307", "content": "\ud83d\udcbb Privilege Escalation \u0432 Notepad++ 8.8.1 (CVE-2025-49144)\n\n\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144 \u0432 Notepad++ \u0432\u0435\u0440\u0441\u0438\u0438 8.8.1 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 SYSTEM \u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u043c \u043f\u043e\u0438\u0441\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (binary planting) \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u0418\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440 Notepad++ \u0438\u0449\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, regsvr32.exe) \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u044d\u0442\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438.\n\n\u27a1\ufe0f\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442? \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0442\u0443 \u0436\u0435 \u043f\u0430\u043f\u043a\u0443, \u0433\u0434\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440. \u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443:\n\u27a1\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e;\n\u27a1\ufe0f\u041f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c;\n\u27a1\ufe0f\u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0441\u0435\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u044f SYSTEM.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u043c Notepad++ \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u043e\u0434\u043d\u0443 \u043f\u0430\u043f\u043a\u0443 \u2014 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0442\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e \u0438\u043b\u0438 \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433.\n\n\u041b\u0438\u0431\u043e \u0432\u044b \u0441\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442\u0435 \u044d\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0436\u0435 \u043f\u0440\u0430\u0432 \u0434\u043e SYSTEM, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0447\u0435\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nNotepad++ \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.8.2, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u0431\u043e\u043b\u0435\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u043c\u0438.\n\n\ud83d\udd17\u0422\u0443\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\n\ud83d\ude0aPoC\n\n\ud83c\udf1a @poxek | \ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2025-06-26T15:43:55.000000Z"}, {"uuid": "bb3b0ddb-e3b3-41a1-b184-53a07c2782b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/true_sec/129", "content": "\u0441\u0438\u0436\u0443 \u043b\u043e\u043c\u0430\u044e \u0433\u043e\u043b\u043e\u0432\u0443 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443  CVE-2025-49144, \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e \u0438 \u0434\u0443\u043c\u0430\u044e \u043e\u0442\u043a\u0443\u0434\u0430 \u0442\u0430\u043c \u0432\u043e\u0437\u044c\u043c\u0435\u0442\u0441\u044f system? \u043c\u044b \u0441\u0430\u043c\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0431\u0438\u043d\u0430\u0440\u044c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0439 \u0431\u0438\u043d\u0430\u0440\u044c regsvr32.exe \u0442\u0430\u043a \u0436\u0435 \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0430...\u043e\u0442\u043a\u0443\u0434\u0430 system? \u0422\u0435\u0441\u0442\u0438\u043b \u043a\u0442\u043e? \u043a\u0430\u043a \u0438\u0437 \u0430\u0434\u043c\u0438\u043d\u0430 \u0432 system \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u043d\u043e \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0441\u0440\u0430\u0437\u0443 \u0432 system \u0432\u0440\u043e\u0434\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f? \u0441 \u0447\u0435\u0433\u043e \u044d\u0442\u043e \u0432\u043e\u043e\u0431\u0449\u0435 lpe \u0435\u0441\u043b\u0438 \u043c\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0430\u0434\u043c\u0438\u043d\u0430 (binary planting \u0447\u0438\u0441\u0442\u043e\u0439 \u0432\u043e\u0434\u044b)?", "creation_timestamp": "2025-06-27T15:26:27.000000Z"}, {"uuid": "9cfd1a8e-45a9-40d3-b22e-82f241337ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/true_sec/131", "content": "\u043f\u043e\u0441\u0432\u044f\u0449\u0430\u0435\u0442\u0441\u044f LPE CVE-2025-49144 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c", "creation_timestamp": "2025-06-27T16:16:27.000000Z"}, {"uuid": "ddff69fe-72ad-42c3-910b-d0a93bc48af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/wgM1JuHOftA_L6-0IhGLa_Zw8cbNONsSbVoMnYMuxEToJx8", "content": "", "creation_timestamp": "2025-06-29T21:00:04.000000Z"}, {"uuid": "1cc41119-e795-4aad-9604-5b2be003540b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/jMzNX-l4Xiewg1jOXgl1UhvTkx33owdRFberACL7GL_LkOo", "content": "", "creation_timestamp": "2025-06-28T11:00:09.000000Z"}, {"uuid": "8eca9182-41aa-4416-ac9d-8d8476efc801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/alm2jq9O8YYx6qnzF2eh-OesfBkG_Ys-e6brm3R0S-yK0DU", "content": "", "creation_timestamp": "2025-06-30T11:00:09.000000Z"}, {"uuid": "e01fd77e-6804-4a56-8c89-1efe5817f31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/seeOg7d7Xdx0LWEqXd7dvE90Oq6nBMNvrC8yGWUmnEYbL4k", "content": "", "creation_timestamp": "2025-06-26T03:00:05.000000Z"}, {"uuid": "a26677d1-1815-4fce-8f21-3ed6f984b00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/5SbEAny07-s81Hr8Ynz8Csexb-qwAT2DAub5b_MriADo8ww", "content": "", "creation_timestamp": "2025-06-28T09:00:04.000000Z"}, {"uuid": "4405247a-1cfd-45cf-a7db-e41422835a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2653", "content": "CVE-2025-49144  \n*\nNotepad++ v8.8.1\n*\nSYSTEM-level POC\n\n#win #lpe", "creation_timestamp": "2025-06-26T15:42:43.000000Z"}, {"uuid": "6cd44d73-1a63-45f0-a540-015449046d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/Od3SFIwTXU85oXzkcR6Q-PR-rjVZLt3U6sXYvEmQ4ovgOa8", "content": "", "creation_timestamp": "2025-06-24T21:00:04.000000Z"}, {"uuid": "796c1d29-612a-409d-9934-7108b47fb3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/Xd5Dp2K-pK8eim0GR99MlfqC5INsxluEke7iGLM_07w0WZI", "content": "", "creation_timestamp": "2025-06-25T09:00:03.000000Z"}, {"uuid": "0fdfe16b-a7b6-4f37-8ccf-e9976d1cec1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/Russian_OSINT/5739", "content": "\ud83d\udcbb Privilege Escalation \u0432 Notepad++ 8.8.1 (CVE-2025-49144)\n\n\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144 \u0432 Notepad++ \u0432\u0435\u0440\u0441\u0438\u0438 8.8.1 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 SYSTEM \u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u043c \u043f\u043e\u0438\u0441\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (binary planting) \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u0418\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440 Notepad++ \u0438\u0449\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, regsvr32.exe) \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u044d\u0442\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438.\n\n\u27a1\ufe0f\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442? \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0442\u0443 \u0436\u0435 \u043f\u0430\u043f\u043a\u0443, \u0433\u0434\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440. \u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443:\n\u27a1\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e;\n\u27a1\ufe0f\u041f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c;\n\u27a1\ufe0f\u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0441\u0435\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u044f SYSTEM.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u043c Notepad++ \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u043e\u0434\u043d\u0443 \u043f\u0430\u043f\u043a\u0443 \u2014 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0442\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e \u0438\u043b\u0438 \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433.\n\n\u041b\u0438\u0431\u043e \u0432\u044b \u0441\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442\u0435 \u044d\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0436\u0435 \u043f\u0440\u0430\u0432 \u0434\u043e SYSTEM, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0447\u0435\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nNotepad++ \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.8.2, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u0431\u043e\u043b\u0435\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u043c\u0438.\n\n\ud83d\udd17\u0422\u0443\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\n\ud83d\ude0aPoC\n\n\ud83c\udf1a @poxek | \ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2025-06-27T05:59:10.000000Z"}, {"uuid": "3fc8602c-d608-4af9-a85b-b510ee67ae47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/PPFhU88sBrWlEgd-6GGRa1f3BOaXD6FvdeiAO1BKcliLgWtc", "content": "", "creation_timestamp": "2025-06-25T14:06:35.000000Z"}, {"uuid": "436fb5fe-7958-4258-8f50-2a943d9e623a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/O2eh7gLrpcZbONgN5-OX68m3ZbpQKWlr4HE6_2LMc1M7414", "content": "", "creation_timestamp": "2025-06-23T20:32:26.000000Z"}, {"uuid": "55e3fe8d-0237-4c40-9db9-70c0f2ad71cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "Telegram/nn4r48_fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw", "content": "", "creation_timestamp": "2025-06-11T20:15:58.000000Z"}, {"uuid": "d841095d-16d1-444b-acbf-2ab0e5853e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49148", "type": "seen", "source": "Telegram/nn4r48_fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw", "content": "", "creation_timestamp": "2025-06-11T20:15:58.000000Z"}, {"uuid": "0b77a229-f4cc-46df-8245-71a7aa888fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-49141", "type": "published-proof-of-concept", "source": "https://github.com/haxtheweb/issues/security/advisories/GHSA-g4cf-pp4x-hqgw", "content": "", "creation_timestamp": "2025-06-09T16:20:55.000000Z"}, {"uuid": "0e3402d6-4e51-4a21-8e4c-473f0607aa49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/23055", "content": "GitHub - TheTorjanCaptain/CVE-2025-49144_PoC: CVE-2025-49144 PoC for security researchers to test and try.\nhttps://github.com/TheTorjanCaptain/CVE-2025-49144_PoC", "creation_timestamp": "2026-08-15T00:00:06.822256Z"}, {"uuid": "2ddab68f-4b67-4655-826f-d02b8a2d2339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/iiLinux/2392", "content": "CVE-2025-49144 Notepad++ v8.8.1 - SYSTEM-level POC", "creation_timestamp": "2026-07-09T03:00:04.486392Z"}, {"uuid": "36db6313-38ff-4607-88d0-45ed787a31ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/iiLinux/2392", "content": "CVE-2025-49144 Notepad++ v8.8.1 - SYSTEM-level POC", "creation_timestamp": "2026-07-10T00:00:11.563874Z"}, {"uuid": "83c305f9-8dd5-4d49-a831-22182e6b6ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/iiLinux/2392", "content": "CVE-2025-49144 Notepad++ v8.8.1 - SYSTEM-level POC", "creation_timestamp": "2026-07-11T09:00:04.742724Z"}, {"uuid": "3daee6b5-d3fd-40df-903c-a3632a868205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/iiLinux/2392", "content": "CVE-2025-49144 Notepad++ v8.8.1 - SYSTEM-level POC", "creation_timestamp": "2026-07-12T00:00:54.886043Z"}, {"uuid": "665596a6-9c71-4deb-a4e0-964b1fd1f5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/securixy_kz/1164", "content": "\u043f\u043e\u0441\u0432\u044f\u0449\u0430\u0435\u0442\u0441\u044f LPE CVE-2025-49144 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c", "creation_timestamp": "2026-07-12T22:00:07.212257Z"}, {"uuid": "50cb20e3-db61-4ec7-8c41-ffcbe8ff8820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/securixy_kz/1164", "content": "\u043f\u043e\u0441\u0432\u044f\u0449\u0430\u0435\u0442\u0441\u044f LPE CVE-2025-49144 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c", "creation_timestamp": "2026-07-13T00:00:18.247702Z"}, {"uuid": "1f6569cc-6f20-4388-a8d2-aae153165fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/securixy_kz/1164", "content": "\u043f\u043e\u0441\u0432\u044f\u0449\u0430\u0435\u0442\u0441\u044f LPE CVE-2025-49144 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c", "creation_timestamp": "2026-07-14T00:01:02.386451Z"}, {"uuid": "0ba579f3-0014-4230-8921-7a4a6104b6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17062", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with public Proof-of-Concept repositories on GitHub, useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2025-4632\n\ud83c\udfaf Grafana Path Traversal Vulnerability\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Chocapikk/CVE-2025-4632\n\n\ud83e\udde0 Overview\nA path traversal vulnerability in Grafana allows attackers to access sensitive files on the server by manipulating request paths.\nThe vulnerability can expose configuration files, credentials, or other sensitive data stored on the system.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive file disclosure\n\u2022 Configuration leakage\n\u2022 Potential lateral movement\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-49144\n\ud83c\udfaf Roundcube Webmail \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/numanturle/CVE-2025-49144\n\n\ud83e\udde0 Overview\nA vulnerability in Roundcube Webmail allows attackers to achieve remote code execution through crafted input handling in specific components of the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Webmail server compromise\n\u2022 Potential mail system takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-34028\n\ud83c\udfaf GLPI IT Asset Management \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/h4x0r-dz/CVE-2025-34028\n\n\ud83e\udde0 Overview\nA file upload vulnerability affecting GLPI IT management platform allows attackers to upload malicious files that can lead to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-30208\n\ud83c\udfaf Next.js Middleware Security Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/chebuya/CVE-2025-30208\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js middleware handling allows attackers to bypass certain security checks due to improper request validation.\n\n\u2699\ufe0f Impact\n\u2022 Security control bypass\n\u2022 Authentication logic manipulation\n\u2022 Potential access control issues\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-24054\n\ud83c\udfaf Windows NTLM Relay Attack\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/fortra/impacket\n\n\ud83e\udde0 Overview\nA vulnerability related to NTLM authentication relay attacks in Windows environments allows attackers to relay authentication attempts and gain unauthorized access to services.\n\n\u2699\ufe0f Impact\n\u2022 Credential relay attack\n\u2022 Unauthorized authentication\n\u2022 Lateral movement in networks\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories can be useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.563870Z"}, {"uuid": "cf0360bd-597a-4648-86f3-413cc0275625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/memekatz/168", "content": "\u043f\u043e\u0441\u0432\u044f\u0449\u0430\u0435\u0442\u0441\u044f LPE CVE-2025-49144 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c", "creation_timestamp": "2026-07-17T05:00:04.405321Z"}, {"uuid": "12b91f84-cfdd-42fc-a80b-2033b72015f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/memekatz/168", "content": "\u043f\u043e\u0441\u0432\u044f\u0449\u0430\u0435\u0442\u0441\u044f LPE CVE-2025-49144 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c", "creation_timestamp": "2026-07-18T00:00:40.298265Z"}, {"uuid": "fee0c0cb-8ac5-48e6-836e-e94e3bb9f1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/cyberwarehouse/863", "content": "\u203c\ufe0f CVE-2025-49144: Privilege Escalation \u0432 Notepad++ 8.8.1\n\n\ud83e\udde0 \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0412\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Notepad++ v8.8.1, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a regsvr32.exe, \u0431\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438. \u0412 Windows \u044d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0449\u0435\u0442 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a\u0438 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e Search Order \u0434\u043b\u044f DLL/EXE, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430.\n\u0415\u0441\u043b\u0438 \u0432 \u044d\u0442\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0441 \u043d\u0443\u0436\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, regsvr32.exe), \u0442\u043e \u043e\u043d \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u2014 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u0447\u0442\u043e \u0438 \u0441\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a.\n\n\u0413\u043e\u0432\u043e\u0440\u044f\u0442 \u0447\u0442\u043e POC \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d\ud83d\ude31\n\n\ud83d\udd17https://www.cve.org/CVERecord?id=CVE-2025-49144\n\ud83d\udd17 https://youtu.be/qCQlVllAfO0?si=NEKKOSCZbksn4Ata\n\ud83e\udd94THF", "creation_timestamp": "2026-07-26T02:00:11.415505Z"}, {"uuid": "febcc35b-3cfb-4d55-86f9-191176efdbaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/863", "content": "\u203c\ufe0f CVE-2025-49144: Privilege Escalation \u0432 Notepad++ 8.8.1\n\n\ud83e\udde0 \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0412\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Notepad++ v8.8.1, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a regsvr32.exe, \u0431\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438. \u0412 Windows \u044d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0449\u0435\u0442 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a\u0438 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e Search Order \u0434\u043b\u044f DLL/EXE, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430.\n\u0415\u0441\u043b\u0438 \u0432 \u044d\u0442\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0441 \u043d\u0443\u0436\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, regsvr32.exe), \u0442\u043e \u043e\u043d \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u2014 \u0442\u0435\u043c\u0438 \u0436\u0435 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u0447\u0442\u043e \u0438 \u0441\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a.\n\n\u0413\u043e\u0432\u043e\u0440\u044f\u0442 \u0447\u0442\u043e POC \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d\ud83d\ude31\n\n\ud83d\udd17https://www.cve.org/CVERecord?id=CVE-2025-49144\n\ud83d\udd17 https://youtu.be/qCQlVllAfO0?si=NEKKOSCZbksn4Ata\n\ud83e\udd94THF", "creation_timestamp": "2026-07-27T00:00:30.920320Z"}, {"uuid": "4efb3e6e-e756-432f-9549-c49292d727eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17062", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with public Proof-of-Concept repositories on GitHub, useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2025-4632\n\ud83c\udfaf Grafana Path Traversal Vulnerability\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Chocapikk/CVE-2025-4632\n\n\ud83e\udde0 Overview\nA path traversal vulnerability in Grafana allows attackers to access sensitive files on the server by manipulating request paths.\nThe vulnerability can expose configuration files, credentials, or other sensitive data stored on the system.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive file disclosure\n\u2022 Configuration leakage\n\u2022 Potential lateral movement\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-49144\n\ud83c\udfaf Roundcube Webmail \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/numanturle/CVE-2025-49144\n\n\ud83e\udde0 Overview\nA vulnerability in Roundcube Webmail allows attackers to achieve remote code execution through crafted input handling in specific components of the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Webmail server compromise\n\u2022 Potential mail system takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-34028\n\ud83c\udfaf GLPI IT Asset Management \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/h4x0r-dz/CVE-2025-34028\n\n\ud83e\udde0 Overview\nA file upload vulnerability affecting GLPI IT management platform allows attackers to upload malicious files that can lead to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-30208\n\ud83c\udfaf Next.js Middleware Security Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/chebuya/CVE-2025-30208\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js middleware handling allows attackers to bypass certain security checks due to improper request validation.\n\n\u2699\ufe0f Impact\n\u2022 Security control bypass\n\u2022 Authentication logic manipulation\n\u2022 Potential access control issues\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-24054\n\ud83c\udfaf Windows NTLM Relay Attack\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/fortra/impacket\n\n\ud83e\udde0 Overview\nA vulnerability related to NTLM authentication relay attacks in Windows environments allows attackers to relay authentication attempts and gain unauthorized access to services.\n\n\u2699\ufe0f Impact\n\u2022 Credential relay attack\n\u2022 Unauthorized authentication\n\u2022 Lateral movement in networks\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories can be useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.664020Z"}]}