{"vulnerability": "cve-2025-4914", "sightings": [{"uuid": "16d028ea-45cb-4889-85a3-5e181889d790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4914", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpja7yu5fe2h", "content": "", "creation_timestamp": "2025-05-19T09:13:37.103015Z"}, {"uuid": "ed08081c-e9c3-46fb-b69a-e14572679968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lsg7ruj4a32x", "content": "", "creation_timestamp": "2025-06-25T08:43:17.274584Z"}, {"uuid": "139cf1b6-7120-4257-95e6-9f8042bbe035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/senator77billy.bsky.social/post/3lstda2qn3k2y", "content": "", "creation_timestamp": "2025-06-30T13:49:31.856716Z"}, {"uuid": "7d66715b-1efa-4ff6-bd77-c1da21c7f74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3lrk2uxszo4u2", "content": "", "creation_timestamp": "2025-06-14T04:01:10.937922Z"}, {"uuid": "9c4b208d-1f7a-4441-bdbb-fb23c1c7f4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lsk3jp4gjk2h", "content": "", "creation_timestamp": "2025-06-26T21:37:47.102780Z"}, {"uuid": "6f0c0a3f-9e32-4030-bbca-c885b942e85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/kaldata.bsky.social/post/3lsgmnvicor2z", "content": "", "creation_timestamp": "2025-06-25T12:33:43.432467Z"}, {"uuid": "fb453cec-1233-48d7-abce-23b547955a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lsklfo5fhc2k", "content": "", "creation_timestamp": "2025-06-27T02:21:52.198556Z"}, {"uuid": "11f11d4c-d4a8-4e92-ae29-04d35589b49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrbhpiyk3l2e", "content": "", "creation_timestamp": "2025-06-10T17:56:37.739399Z"}, {"uuid": "6d5887c9-8e71-4425-8ad4-c3657d981f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3lsu7ywziu32m", "content": "", "creation_timestamp": "2025-06-30T22:24:31.138598Z"}, {"uuid": "60c40eb7-042e-4660-9cff-18fe4e8d07f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/114774656364028312", "content": "", "creation_timestamp": "2025-06-30T22:24:31.898363Z"}, {"uuid": "1ad7fca3-8ad5-4904-b468-f4006db62627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lscgkgjxoj25", "content": "", "creation_timestamp": "2025-06-23T20:33:44.952768Z"}, {"uuid": "6f86d0c8-8027-4483-8e7f-242aef1ed2a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lsczysvuvw22", "content": "", "creation_timestamp": "2025-06-24T02:21:49.214636Z"}, {"uuid": "f80f10ed-2fbc-430d-9d1e-7275a7b2b79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lsdmfnfd5c26", "content": "", "creation_timestamp": "2025-06-24T07:51:09.959649Z"}, {"uuid": "950c9ce0-0cee-437c-9edc-1056e3e400e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lsdmfp6n4s26", "content": "", "creation_timestamp": "2025-06-24T07:51:10.512327Z"}, {"uuid": "f2756ae8-27b3-4d16-89d1-0a5a658fee98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lsdmfp6o4226", "content": "", "creation_timestamp": "2025-06-24T07:51:11.028735Z"}, {"uuid": "3423928f-a55b-4607-9fb1-9851a6fc4b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-49144", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lsrarl6idm2k", "content": "", "creation_timestamp": "2025-06-29T18:00:18.746887Z"}, {"uuid": "a961ec0e-2799-4676-86b9-5d9aa843b244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrdxcbi7pk2m", "content": "", "creation_timestamp": "2025-06-11T17:40:53.176475Z"}, {"uuid": "06c88723-826a-4868-ad68-5711360bb7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:24.000000Z"}, {"uuid": "a0667d50-62ad-46fb-a5a9-9072441e1b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mephjgpyjj26", "content": "", "creation_timestamp": "2026-02-13T02:29:12.050733Z"}, {"uuid": "910f04ce-6045-413b-994f-ce916c1498a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mepnccidkk2s", "content": "", "creation_timestamp": "2026-02-13T04:12:34.366577Z"}, {"uuid": "dbb0a129-3fed-43e6-bcef-e5d167156f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/41730", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC CVE-2025-49144 \nURL\uff1ahttps://github.com/Vr00mm/CVE-2025-49144\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-24T16:04:44.000000Z"}, {"uuid": "24942a4d-5a0b-4fd9-826a-75bdfb12b48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43508", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA test attack for CVE-2025-49144\nURL\uff1ahttps://github.com/tristanvandermeer/CVE-2025-49144-Test\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-10T01:54:32.000000Z"}, {"uuid": "dd8077e9-8a83-49ea-8ba7-5035039dde87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/WrQaMTevy7WSUORikUxdrSPBs99wZo-jtxg57p3kMuQ3eM0", "content": "", "creation_timestamp": "2025-11-04T21:00:05.000000Z"}, {"uuid": "1d1f3948-69ee-46c9-bab9-9eee1b762351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/four_rays/111", "content": "\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Notepad ++ \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e SYSTEM.\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 \u043f\u043e\u0438\u0441\u043a\u0430 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Notepad++ \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0435\u0433\u043e \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u0435\u0440\u043e\u043c. \u0414\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0435 \u043f\u0443\u0442\u0438. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0430\u043c \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440 Notepad ++ \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a \u043f\u043e\u0440\u044f\u0434\u043a\u0443 \u043f\u043e\u0438\u0441\u043a\u0430 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (Search Order).\n\n\ud83d\udc4d \u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442\n\n\u0412\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Notepad ++ \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a Search Order Hijack:\n\n1. regsvr32.exe \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 COM-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 NppShell.dll \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435. \nregsvr32 /s \"C:\\Program Files\\Notepad++\\contextMenu\\NppShell.dll\"\nNppShell.dll \u2014 \u044d\u0442\u043e DLL, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e COM-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432. \u0415\u0435 \u0446\u0435\u043b\u044c \u2014 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0438\u043a\u043e\u043d\u043a\u0438 Notepad ++ \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u043d\u043e\u0435 \u043c\u0435\u043d\u044e \u043f\u0440\u0438 \u043f\u0440\u0430\u0432\u043e\u043c \u043a\u043b\u0438\u043a\u0435 \u043c\u044b\u0448\u0438 \u043d\u0430 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0435\u0433\u043e Notepad'\u043e\u043c.\n\n2. rundll32.exe  \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 Notepad ++ \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \nrundll32.exe \"C:\\Program Files\\Notepad++\\contextmenu\\NppShell.dll\",CleanupDll\n\u0418\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 NppShell.dll \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f CleanupDll \u2014 \u043e\u043d\u0430 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0443\u043b\u044f NppShell, \u0435\u0441\u043b\u0438 \u043e\u043d \u0443\u0436\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 Windows \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u043d\u0435 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439:\n\n1. \u041f\u0430\u043f\u043a\u0430, \u0433\u0434\u0435 \u0431\u044b\u043b\u043e \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\n2. System32\n3. /Windows/\n4. WorkingDirectory\n5. PATH \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043b\u044e\u0431\u043e\u0439 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u044b \u043d\u0430\u0437\u043e\u0432\u0435\u043c \u043e\u0434\u043d\u043e\u0438\u043c\u0435\u043d\u043d\u043e \u0441 regsvr32.exe \u0438\u043b\u0438 rundll32.exe \u0438 \u043f\u043e\u043c\u0435\u0441\u0442\u0438\u043c \u0432 \u043e\u0434\u043d\u0443 \u043f\u0430\u043f\u043a\u0443 \u0441 \u0438\u043d\u0441\u0442\u0430\u043b\u0435\u0440\u043e\u043c, \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 UAC. \u0418\u043c\u0435\u044f \u0432 \u0440\u0430\u0441\u043f\u043e\u0440\u044f\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442 \u0442\u0440\u0443\u0434\u0430 \u043f\u043e\u0434\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043e SYSTEM.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e Notepad ++ \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0440\u0435\u043b\u0438\u0437 \u0432\u0435\u0440\u0441\u0438\u0438 8.2.2, \u0433\u0434\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432\u044b\u0437\u043e\u0432\u0430 CreateProcessW \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Notepad.\n\n\ud83d\udc4d  \u041a\u0430\u043a \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0412 \u0441\u0442\u0430\u0440\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.6.8 (\u0432\u0435\u0440\u0445\u043d\u0438\u0439 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442) \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0434\u043e rundll32.exe \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0432\u044b\u0437\u043e\u0432\u0430 CreateProcessW\n\n\u0412 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.8.2 (\u043d\u0438\u0436\u043d\u0438\u0439 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442) \u0443\u043a\u0430\u0437\u0430\u043d \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e mitigation\\detection\n1. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Notepad++ \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 8.8.2, \u0433\u0434\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u043f\u043e\u0438\u0441\u043a\u0430\n2. \u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u0432 rundll32.exe \u0438 regsvr32.exe \u0438\u0437 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 (C:\\Windows\\System32|C:\\Windows\\SysWoW64)", "creation_timestamp": "2025-07-09T09:21:12.000000Z"}, {"uuid": "55e3fe8d-0237-4c40-9db9-70c0f2ad71cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "Telegram/nn4r48_fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw", "content": "", "creation_timestamp": "2025-06-11T20:15:58.000000Z"}, {"uuid": "517a8818-24cb-43dd-9b4f-f82ca27ec317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49141", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49141\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a URL string from a POST request and insufficiently validates user input. The `set_remote` function later passes this input into `proc_open`, yielding OS command injection. An authenticated attacker can craft a URL string that bypasses the validation checks employed by the `filter_var` and `strpos` functions in order to execute arbitrary OS commands on the backend server. The attacker can exfiltrate command output via an HTTP request. Version 11.0.3 contains a patch for the issue.\n\ud83d\udccf Published: 2025-06-09T21:11:08.889Z\n\ud83d\udccf Modified: 2025-06-09T21:11:08.889Z\n\ud83d\udd17 References:\n1. https://github.com/haxtheweb/issues/security/advisories/GHSA-g4cf-pp4x-hqgw\n2. https://github.com/haxtheweb/haxcms-nodejs/commit/5131fea6b6be611db76a618f89bd2e164752e9b3", "creation_timestamp": "2025-06-09T21:31:56.000000Z"}, {"uuid": "7328b9b9-bac4-4f3f-9394-e5cda78c9007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49140", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17781", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49140\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should upgrade to v0.1.39 or later, which validates that: `padLen > 0 && padLen <= payloadLength` and return error  on overflow, avoiding panic. If upgrading is not possible, apply the patch from the pull request manually or drop packets whose P-bit is set but whose padLen is zero or larger than the remaining payload.\n\ud83d\udccf Published: 2025-06-09T21:13:12.388Z\n\ud83d\udccf Modified: 2025-06-09T21:13:12.388Z\n\ud83d\udd17 References:\n1. https://github.com/pion/interceptor/security/advisories/GHSA-f26w-gh5m-qq77\n2. https://github.com/pion/webrtc/issues/3148\n3. https://github.com/pion/interceptor/pull/338\n4. https://github.com/pion/interceptor/commit/fa5b35ea867389cec33a9c82fffbd459ca8958e5", "creation_timestamp": "2025-06-09T21:31:55.000000Z"}, {"uuid": "ee83840a-f21a-46bb-8a1d-9b08cbfcc4f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20007", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49144\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows unprivileged users to gain SYSTEM-level privileges through insecure executable search paths. An attacker could use social engineering or clickjacking to trick users into downloading both the legitimate installer and a malicious executable to the same directory (typically Downloads folder - which is known as Vulnerable directory). Upon running the installer, the attack executes automatically with SYSTEM privileges. This issue has been fixed and will be released in version 8.8.2.\n\ud83d\udccf Published: 2025-06-23T19:01:16.276Z\n\ud83d\udccf Modified: 2025-07-01T03:55:56.212Z\n\ud83d\udd17 References:\n1. https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-9vx8-v79m-6m24\n2. https://github.com/notepad-plus-plus/notepad-plus-plus/commit/f2346ea00d5b4d907ed39d8726b38d77c8198f30\n3. https://drive.google.com/drive/folders/11yeUSWgqHvt4Bz5jO3ilRRfcpQZ6Gvpn", "creation_timestamp": "2025-07-01T05:10:45.000000Z"}, {"uuid": "e62e506d-89a3-4f44-b74b-626197944e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/C2T-nWoOtg2ic5DSb70B26dWLlW9dn-lkZdU8Tvb5zZac3M", "content": "", "creation_timestamp": "2025-09-19T19:00:08.000000Z"}, {"uuid": "3f84ef3d-c52b-4480-8f8d-317e2cda1973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/ap_security/839", "content": "#pentest #cve\n\nPoC: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144 \u0432 Notepad++\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 Notepad++ (\u0432\u0435\u0440\u0441\u0438\u0438 \u2264 8.8.1) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f System.\n\n\u0422\u0430\u043a\u0436\u0435 \u043a \u0434\u0430\u043d\u043d\u043e\u043c\u0443 PoC \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u043c  \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u043f\u0440\u0438\u0447\u0438\u043d \u0435\u0451 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "creation_timestamp": "2025-07-08T08:08:16.000000Z"}, {"uuid": "a26677d1-1815-4fce-8f21-3ed6f984b00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/5SbEAny07-s81Hr8Ynz8Csexb-qwAT2DAub5b_MriADo8ww", "content": "", "creation_timestamp": "2025-06-28T09:00:04.000000Z"}, {"uuid": "af982000-4e9d-4674-b353-b7615515eaaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lspfj5w7ys23", "content": "", "creation_timestamp": "2025-06-29T00:19:48.522758Z"}, {"uuid": "d5539ce4-6acd-4320-b5f8-117d39d8c0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/deskmodder.de/post/3ltllbdrnj32p", "content": "", "creation_timestamp": "2025-07-10T05:17:18.851456Z"}, {"uuid": "8247b0dc-1c35-43eb-b36c-2fee1dc8216c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/mbissey.bsky.social/post/3lsio4oiow62s", "content": "", "creation_timestamp": "2025-06-26T08:05:41.092562Z"}, {"uuid": "bb950c39-6f3f-4aa3-a108-613b1d93d152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49140", "type": "seen", "source": "https://bsky.app/profile/pion.ly/post/3lr6uzl55x22n", "content": "", "creation_timestamp": "2025-06-09T17:17:11.502255Z"}, {"uuid": "8561af56-4391-4e97-be88-d92e85d5ceb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/brianhaddock.bsky.social/post/3lsebnhccvn2i", "content": "", "creation_timestamp": "2025-06-24T14:11:17.690478Z"}, {"uuid": "05432dc4-0d42-47f0-99e0-88cfaff5a70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-49146", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lrim3u5otg2g", "content": "", "creation_timestamp": "2025-06-13T14:03:45.346830Z"}, {"uuid": "0eabdab2-ae7a-45ce-be97-07c515e94613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-49146", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3lrim3vwih5x2", "content": "", "creation_timestamp": "2025-06-13T14:03:49.226981Z"}, {"uuid": "d85fd761-9cb5-41f9-87b2-daae6ddd5cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrtuk3an7n25", "content": "", "creation_timestamp": "2025-06-18T01:34:09.448415Z"}, {"uuid": "cb158e63-337c-4229-ac64-75f79df0ab6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:20.000000Z"}, {"uuid": "beac2820-0941-485e-95a3-9a73ecb438ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49145", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5crgp5yes52", "content": "", "creation_timestamp": "2025-11-10T23:25:49.020639Z"}, {"uuid": "94518943-0364-4558-a661-2db9b104e785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115396270595470850", "content": "", "creation_timestamp": "2025-10-18T17:09:13.274842Z"}, {"uuid": "17221c62-9df6-4b05-b2c1-c49c60c86b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://mastodon.social/users/verbrecher/statuses/115397444939820963", "content": "", "creation_timestamp": "2025-10-18T22:07:52.766497Z"}, {"uuid": "ed601751-c8d4-46df-b79e-5b9702a0772a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lxstxqdejf2s", "content": "", "creation_timestamp": "2025-09-02T00:22:24.552953Z"}, {"uuid": "2bdea66f-ca77-450f-8015-515191506a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mgg7p4nk3w2s", "content": "", "creation_timestamp": "2026-03-06T21:05:37.726530Z"}, {"uuid": "a1736a35-a7fc-4ffd-8a1e-fe1c571e42f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/18561", "content": "CVE-2025-49144: Notepad++ Privilege Escalation Vulnerability\n\nCredit: youtube.com/@redhotcyber\n\nPoC: https://github.com/TheTorjanCaptain/CVE-2025-49144_PoC", "creation_timestamp": "2025-06-27T18:35:19.000000Z"}, {"uuid": "c1710cae-ab9b-4f4f-b2e0-4da80713c6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/hgzz4cel2feTkZYZr2gMDbhbJFHRxFNSDNYTQ043o2aDwrmM", "content": "", "creation_timestamp": "2025-06-25T13:32:04.000000Z"}, {"uuid": "91558025-41f6-419a-961e-7979d41009bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/24oU4MCT2jZWID-l-wRv_upntr48Xy0UlhMHZmftTiSRrRs", "content": "", "creation_timestamp": "2025-06-27T03:00:05.000000Z"}, {"uuid": "5ef6def2-f06c-4490-8806-b80fd18f89ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/zTvjXYU_50dUlAoBwzYenRXKilDAeaHsOh4ej1oSQHnwbLk", "content": "", "creation_timestamp": "2025-06-26T21:00:04.000000Z"}, {"uuid": "86a2bfd3-3f41-4184-a576-796a97b3b3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/-Dq3DE_VxtxovL4vGv-vxHKY8mGowa8av6xqNlKdban3pW4", "content": "", "creation_timestamp": "2025-06-27T03:00:09.000000Z"}, {"uuid": "dbe72cea-f976-4f7c-883c-8ef9e8d94d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/qIHlUQiEdKXaiBZEW4uGojDJ-lyTdj_8TQYu98JC_9D7A332", "content": "", "creation_timestamp": "2025-06-25T13:37:35.000000Z"}, {"uuid": "279546e1-8bd6-4959-879c-b9171317f34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42199", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDiscover CVE-2025-49144, a local privilege escalation flaw in Notepad++ installers. Learn how attackers exploit this vulnerability. \ud83d\udc19\ud83d\udd0d\nURL\uff1ahttps://github.com/65-75-65-83-72/CVE-2025-49144_PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-28T05:12:18.000000Z"}, {"uuid": "aa5bd698-0a6f-46d6-bc0d-bd9e82eb6090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42182", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDiscover the CVE-2025-49144 vulnerability in Notepad++ installers. This PoC highlights local privilege escalation risks. \ud83d\udee0\ufe0f\ud83d\udd0d\nURL\uff1ahttps://github.com/65-75-65-83-72/65-75-65-83-72.github.io\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-28T02:41:54.000000Z"}, {"uuid": "d53d5a02-abd4-49fd-9bf9-4404fa97a42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42015", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-49144 * Notepad++ v8.8.1 * SYSTEM-level POC\nURL\uff1ahttps://github.com/assad12341/notepad-v8.8.1-LPE-CVE-\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-26T18:18:49.000000Z"}, {"uuid": "437f9f82-93cd-4b13-ae7c-1087832568be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4914", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16804", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4914\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-19T06:00:07.968Z\n\ud83d\udccf Modified: 2025-05-19T06:00:07.968Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.309471\n2. https://vuldb.com/?ctiid.309471\n3. https://vuldb.com/?submit.579096\n4. https://github.com/Pjwww13447/pjwww/issues/16\n5. https://phpgurukul.com/", "creation_timestamp": "2025-05-19T06:38:49.000000Z"}, {"uuid": "d841095d-16d1-444b-acbf-2ab0e5853e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49148", "type": "seen", "source": "Telegram/nn4r48_fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw", "content": "", "creation_timestamp": "2025-06-11T20:15:58.000000Z"}, {"uuid": "ba498c74-b2a8-4334-b538-7a8a091dc189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49142", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17940", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49142\n\ud83d\udd25 CVSS Score: 6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:L)\n\ud83d\udd39 Description: Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configuration of the Jinja2 templating feature used in computed fields, custom links, etc. in Nautobot, a malicious user could configure this feature set in ways that could expose the value of Secrets defined in Nautobot when the templated content is rendered or that could call Python APIs to modify data within Nautobot when the templated content is rendered, bypassing the object permissions assigned to the viewing user. Nautobot versions 1.6.32 and 2.4.10 will include fixes for the vulnerability. The vulnerability can be partially mitigated by configuring object permissions appropriately to limit certain actions to only trusted users.\n\ud83d\udccf Published: 2025-06-10T15:40:21.105Z\n\ud83d\udccf Modified: 2025-06-10T17:10:21.784Z\n\ud83d\udd17 References:\n1. https://github.com/nautobot/nautobot/security/advisories/GHSA-wjw6-95h5-4jpx\n2. https://github.com/nautobot/nautobot/pull/7417\n3. https://github.com/nautobot/nautobot/pull/7429\n4. https://docs.djangoproject.com/en/4.2/ref/templates/api/#alters-data-description\n5. https://jinja.palletsprojects.com/en/stable/sandbox", "creation_timestamp": "2025-06-10T17:32:32.000000Z"}, {"uuid": "5df447bf-f884-42be-b2b2-09fb7ad41edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49143", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17956", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49143\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N)\n\ud83d\udd39 Description: Nautobot is a Network Source of Truth and Network Automation Platform. Prior to v2.4.10 and v1.6.32 , files uploaded by users to Nautobot's MEDIA_ROOT directory, including DeviceType image attachments as well as images attached to a Location, Device, or Rack, are served to users via a URL endpoint that was not enforcing user authentication. As a consequence, such files can be retrieved by anonymous users who know or can guess the correct URL for a given file. Nautobot v2.4.10 and v1.6.32 address this issue by adding enforcement of Nautobot user authentication to this endpoint.\n\ud83d\udccf Published: 2025-06-10T15:43:59.225Z\n\ud83d\udccf Modified: 2025-06-10T18:12:01.967Z\n\ud83d\udd17 References:\n1. https://github.com/nautobot/nautobot/security/advisories/GHSA-rh67-4c8j-hjjh\n2. https://github.com/nautobot/nautobot/pull/6672\n3. https://github.com/nautobot/nautobot/pull/6703\n4. https://github.com/nautobot/nautobot/commit/9c892dc300429948a4714f743c9c2879d8987340\n5. https://github.com/nautobot/nautobot/commit/d99a53b065129cff3a0fa9abe7355a9ef1ad4c95", "creation_timestamp": "2025-06-10T18:33:07.000000Z"}, {"uuid": "df86679a-b698-4462-ba03-3b091295d17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49149", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18681", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49149\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N)\n\ud83d\udd39 Description: Dify is an open-source LLM app development platform. In version 1.2.0, there is insufficient filtering of user input by web applications. Attackers can use website vulnerabilities to inject malicious script code into web pages. This may result in a cross-site scripting (XSS) attack when a user browses these web pages. At time of posting, there is no known patched version.\n\ud83d\udccf Published: 2025-06-17T22:34:24.515Z\n\ud83d\udccf Modified: 2025-06-17T22:34:24.515Z\n\ud83d\udd17 References:\n1. https://github.com/langgenius/dify/security/advisories/GHSA-grmh-ww4v-5cgj", "creation_timestamp": "2025-06-17T23:42:06.000000Z"}, {"uuid": "54b91130-fe2f-4304-9b9e-19eb53f2f39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/Vm_C3grssVVNHTasaKMrEWrgVm8hzPtsHGCqWC4-NgSy8rY", "content": "", "creation_timestamp": "2025-07-23T03:00:06.000000Z"}, {"uuid": "c3912e58-bc98-4ece-b2d7-607aa3556338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/poxek/5307", "content": "\ud83d\udcbb Privilege Escalation \u0432 Notepad++ 8.8.1 (CVE-2025-49144)\n\n\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144 \u0432 Notepad++ \u0432\u0435\u0440\u0441\u0438\u0438 8.8.1 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 SYSTEM \u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u043c \u043f\u043e\u0438\u0441\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (binary planting) \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u0418\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440 Notepad++ \u0438\u0449\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, regsvr32.exe) \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u044d\u0442\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438.\n\n\u27a1\ufe0f\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442? \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0442\u0443 \u0436\u0435 \u043f\u0430\u043f\u043a\u0443, \u0433\u0434\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440. \u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443:\n\u27a1\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e;\n\u27a1\ufe0f\u041f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c;\n\u27a1\ufe0f\u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0441\u0435\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u044f SYSTEM.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u043c Notepad++ \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u043e\u0434\u043d\u0443 \u043f\u0430\u043f\u043a\u0443 \u2014 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0442\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e \u0438\u043b\u0438 \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433.\n\n\u041b\u0438\u0431\u043e \u0432\u044b \u0441\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442\u0435 \u044d\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0436\u0435 \u043f\u0440\u0430\u0432 \u0434\u043e SYSTEM, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0447\u0435\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nNotepad++ \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.8.2, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u0431\u043e\u043b\u0435\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u043c\u0438.\n\n\ud83d\udd17\u0422\u0443\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\n\ud83d\ude0aPoC\n\n\ud83c\udf1a @poxek | \ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2025-06-26T15:43:55.000000Z"}, {"uuid": "bb3b0ddb-e3b3-41a1-b184-53a07c2782b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/true_sec/129", "content": "\u0441\u0438\u0436\u0443 \u043b\u043e\u043c\u0430\u044e \u0433\u043e\u043b\u043e\u0432\u0443 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443  CVE-2025-49144, \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e \u0438 \u0434\u0443\u043c\u0430\u044e \u043e\u0442\u043a\u0443\u0434\u0430 \u0442\u0430\u043c \u0432\u043e\u0437\u044c\u043c\u0435\u0442\u0441\u044f system? \u043c\u044b \u0441\u0430\u043c\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0431\u0438\u043d\u0430\u0440\u044c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0439 \u0431\u0438\u043d\u0430\u0440\u044c regsvr32.exe \u0442\u0430\u043a \u0436\u0435 \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0430...\u043e\u0442\u043a\u0443\u0434\u0430 system? \u0422\u0435\u0441\u0442\u0438\u043b \u043a\u0442\u043e? \u043a\u0430\u043a \u0438\u0437 \u0430\u0434\u043c\u0438\u043d\u0430 \u0432 system \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u043d\u043e \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0441\u0440\u0430\u0437\u0443 \u0432 system \u0432\u0440\u043e\u0434\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f? \u0441 \u0447\u0435\u0433\u043e \u044d\u0442\u043e \u0432\u043e\u043e\u0431\u0449\u0435 lpe \u0435\u0441\u043b\u0438 \u043c\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0430\u0434\u043c\u0438\u043d\u0430 (binary planting \u0447\u0438\u0441\u0442\u043e\u0439 \u0432\u043e\u0434\u044b)?", "creation_timestamp": "2025-06-27T15:26:27.000000Z"}, {"uuid": "9cfd1a8e-45a9-40d3-b22e-82f241337ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://t.me/true_sec/131", "content": "\u043f\u043e\u0441\u0432\u044f\u0449\u0430\u0435\u0442\u0441\u044f LPE CVE-2025-49144 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c", "creation_timestamp": "2025-06-27T16:16:27.000000Z"}, {"uuid": "4405247a-1cfd-45cf-a7db-e41422835a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2653", "content": "CVE-2025-49144  \n*\nNotepad++ v8.8.1\n*\nSYSTEM-level POC\n\n#win #lpe", "creation_timestamp": "2025-06-26T15:42:43.000000Z"}, {"uuid": "6cd44d73-1a63-45f0-a540-015449046d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/Od3SFIwTXU85oXzkcR6Q-PR-rjVZLt3U6sXYvEmQ4ovgOa8", "content": "", "creation_timestamp": "2025-06-24T21:00:04.000000Z"}, {"uuid": "796c1d29-612a-409d-9934-7108b47fb3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/Xd5Dp2K-pK8eim0GR99MlfqC5INsxluEke7iGLM_07w0WZI", "content": "", "creation_timestamp": "2025-06-25T09:00:03.000000Z"}, {"uuid": "0fdfe16b-a7b6-4f37-8ccf-e9976d1cec1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/Russian_OSINT/5739", "content": "\ud83d\udcbb Privilege Escalation \u0432 Notepad++ 8.8.1 (CVE-2025-49144)\n\n\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49144 \u0432 Notepad++ \u0432\u0435\u0440\u0441\u0438\u0438 8.8.1 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 SYSTEM \u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u043c \u043f\u043e\u0438\u0441\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (binary planting) \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u0418\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440 Notepad++ \u0438\u0449\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, regsvr32.exe) \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u044d\u0442\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438.\n\n\u27a1\ufe0f\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442? \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0442\u0443 \u0436\u0435 \u043f\u0430\u043f\u043a\u0443, \u0433\u0434\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440. \u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443:\n\u27a1\ufe0f\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e;\n\u27a1\ufe0f\u041f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c;\n\u27a1\ufe0f\u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0441\u0435\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u044f SYSTEM.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u043c Notepad++ \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u043e\u0434\u043d\u0443 \u043f\u0430\u043f\u043a\u0443 \u2014 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0442\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e \u0438\u043b\u0438 \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433.\n\n\u041b\u0438\u0431\u043e \u0432\u044b \u0441\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442\u0435 \u044d\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0436\u0435 \u043f\u0440\u0430\u0432 \u0434\u043e SYSTEM, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0447\u0435\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nNotepad++ \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u0430\u0442\u0447 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.8.2, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u0431\u043e\u043b\u0435\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u043c\u0438.\n\n\ud83d\udd17\u0422\u0443\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\n\n\ud83d\ude0aPoC\n\n\ud83c\udf1a @poxek | \ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2025-06-27T05:59:10.000000Z"}, {"uuid": "d0f8f28c-72c7-4d5a-8eb4-2f241d7ce3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-49146", "type": "seen", "source": "https://bsky.app/profile/theemerichunter.bsky.social/post/3lrkgulea3i2i", "content": "", "creation_timestamp": "2025-06-14T07:35:31.935882Z"}, {"uuid": "972652ea-4d3a-4e4f-89eb-c1bd0eed60bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrbg5cpqiv23", "content": "", "creation_timestamp": "2025-06-10T17:28:33.520386Z"}, {"uuid": "ccc1d20e-38c0-4f6f-a5b2-a1d620a5204f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-608f6da6-5c765a350835c75b", "content": "", "creation_timestamp": "2025-06-25T15:46:42.001951Z"}, {"uuid": "428aac51-7d5a-4b8a-bd9d-525b0a2ea03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-49144", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lshlanrg3ej2", "content": "", "creation_timestamp": "2025-06-25T21:42:54.852682Z"}, {"uuid": "a4dc4d62-6ad5-4cb2-b3e6-046d4bba5dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lsiegk3qkc2a", "content": "", "creation_timestamp": "2025-06-26T05:11:50.094412Z"}, {"uuid": "eba1e6ae-d139-4664-a574-905f9a62ded4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/ryan.staticnoi.se/post/3lsieidfl622a", "content": "", "creation_timestamp": "2025-06-26T05:12:48.045604Z"}, {"uuid": "f917b4d7-c65a-4bce-bae8-6233deb4261e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/ryan.staticnoi.se/post/3lsieiejmic2a", "content": "", "creation_timestamp": "2025-06-26T05:12:48.559621Z"}, {"uuid": "fa931b9d-87b9-415b-92e7-108551f115dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lsdids6wy7x2", "content": "", "creation_timestamp": "2025-06-24T06:38:38.246784Z"}, {"uuid": "c1db9fb9-48ea-401f-9817-31b6c7374e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lsef6axsu22o", "content": "", "creation_timestamp": "2025-06-24T15:14:27.462367Z"}, {"uuid": "ad945752-a203-4a10-8e7a-5fcee0340183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49141", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr7kvfnehj25", "content": "", "creation_timestamp": "2025-06-09T23:48:17.249928Z"}, {"uuid": "372f7951-4e89-47b5-88cc-2ed42d7682ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr7l6e3azl2u", "content": "", "creation_timestamp": "2025-06-09T23:53:17.527458Z"}, {"uuid": "ce08d4be-0eb6-4e7a-a4ae-f1725e34f128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "MISP/bfad5bc2-f0bb-4051-9068-f22ff96b38cf", "content": "", "creation_timestamp": "2025-06-25T14:08:01.000000Z"}, {"uuid": "884f7f25-a6e6-4769-8d4a-a662c9df730b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrdw6hkftp25", "content": "", "creation_timestamp": "2025-06-11T17:20:51.405517Z"}, {"uuid": "1a99f76e-974b-4438-a6bc-dab59f29486b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49149", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114701175434297633", "content": "", "creation_timestamp": "2025-06-17T22:57:21.991156Z"}, {"uuid": "59952c88-6d25-4292-b19a-a7c37a7cb0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5csunbtgo2s", "content": "", "creation_timestamp": "2025-11-10T23:51:20.468209Z"}, {"uuid": "b443ca9c-fc39-4945-b97e-dfd3e47d6877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkrlld2u", "content": "", "creation_timestamp": "2025-09-02T10:39:42.587760Z"}, {"uuid": "5438164f-5504-4311-adb0-51d35a29e1e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkroj32u", "content": "", "creation_timestamp": "2025-09-02T10:39:44.051055Z"}, {"uuid": "f3d59e50-c002-4331-a534-f2cd5c239794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkroj42u", "content": "", "creation_timestamp": "2025-09-02T10:39:45.571519Z"}, {"uuid": "4fca0e37-1ee0-475c-ae97-920a155413fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49146", "type": "seen", "source": "https://bsky.app/profile/fraustief.bsky.social/post/3lxtwhkrpie2u", "content": "", "creation_timestamp": "2025-09-02T10:39:47.610260Z"}, {"uuid": "e6c628ee-9bc2-4cb3-9377-15c2d3c28dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "seen", "source": "https://bsky.app/profile/graylog.bsky.social/post/3meoedt42as2t", "content": "", "creation_timestamp": "2026-02-12T15:59:43.630202Z"}, {"uuid": "3bb3b82b-da56-4225-9c69-6eeaed4bf619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/41888", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-49144 PoC for security researchers to test and try.\nURL\uff1ahttps://github.com/TheTorjanCaptain/CVE-2025-49144_PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-25T19:54:17.000000Z"}, {"uuid": "fa9254d2-6527-4dd8-9b73-ae70f9aabd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42392", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof of Concept (PoC) that exploits the CVE-2025-49144 vulnerability in the Notepad++ 8.8.1 installer. \nURL\uff1ahttps://github.com/b0ySie7e/Notepad-8.8.1_CVE-2025-49144\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-29T16:50:25.000000Z"}, {"uuid": "3776fcd2-5f66-4795-b569-c8f2d6c8d5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/58255", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis is my reproduce PoC for CVE-2025-49144\nURL\uff1ahttps://github.com/havertz2110/CVE-2025-49144\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-04T10:20:48.000000Z"}, {"uuid": "716c51eb-7ec5-4bd2-8126-79e49cc0254d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49148", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18085", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49148\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: ClipShare is a lightweight and cross-platform tool for clipboard sharing. Prior to 3.8.5, ClipShare Server for Windows uses the default Windows DLL search order and loads system libraries like CRYPTBASE.dll and WindowsCodecs.dll from its own directory before the system path. A local, non-privileged user who can write to the folder containing clip_share.exe can place malicious DLLs there, leading to arbitrary code execution in the context of the server, and, if launched by an Administrator (or another elevated user), it results in a reliable local privilege escalation. This vulnerability is fixed in 3.8.5.\n\ud83d\udccf Published: 2025-06-11T14:53:48.591Z\n\ud83d\udccf Modified: 2025-06-11T15:05:08.241Z\n\ud83d\udd17 References:\n1. https://github.com/thevindu-w/clip_share_server/security/advisories/GHSA-rc47-h83g-2r8j", "creation_timestamp": "2025-06-11T15:32:04.000000Z"}, {"uuid": "ddff69fe-72ad-42c3-910b-d0a93bc48af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/wgM1JuHOftA_L6-0IhGLa_Zw8cbNONsSbVoMnYMuxEToJx8", "content": "", "creation_timestamp": "2025-06-29T21:00:04.000000Z"}, {"uuid": "1cc41119-e795-4aad-9604-5b2be003540b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/jMzNX-l4Xiewg1jOXgl1UhvTkx33owdRFberACL7GL_LkOo", "content": "", "creation_timestamp": "2025-06-28T11:00:09.000000Z"}, {"uuid": "8eca9182-41aa-4416-ac9d-8d8476efc801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/alm2jq9O8YYx6qnzF2eh-OesfBkG_Ys-e6brm3R0S-yK0DU", "content": "", "creation_timestamp": "2025-06-30T11:00:09.000000Z"}, {"uuid": "e01fd77e-6804-4a56-8c89-1efe5817f31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/seeOg7d7Xdx0LWEqXd7dvE90Oq6nBMNvrC8yGWUmnEYbL4k", "content": "", "creation_timestamp": "2025-06-26T03:00:05.000000Z"}, {"uuid": "3fc8602c-d608-4af9-a85b-b510ee67ae47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/PPFhU88sBrWlEgd-6GGRa1f3BOaXD6FvdeiAO1BKcliLgWtc", "content": "", "creation_timestamp": "2025-06-25T14:06:35.000000Z"}, {"uuid": "436fb5fe-7958-4258-8f50-2a943d9e623a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-49144", "type": "published-proof-of-concept", "source": "Telegram/O2eh7gLrpcZbONgN5-OX68m3ZbpQKWlr4HE6_2LMc1M7414", "content": "", "creation_timestamp": "2025-06-23T20:32:26.000000Z"}]}