{"uuid": "3796bcd4-0ece-47d7-b352-a5f04956d66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4632", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17062", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with public Proof-of-Concept repositories on GitHub, useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2025-4632\n\ud83c\udfaf Grafana Path Traversal Vulnerability\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Chocapikk/CVE-2025-4632\n\n\ud83e\udde0 Overview\nA path traversal vulnerability in Grafana allows attackers to access sensitive files on the server by manipulating request paths.\nThe vulnerability can expose configuration files, credentials, or other sensitive data stored on the system.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive file disclosure\n\u2022 Configuration leakage\n\u2022 Potential lateral movement\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-49144\n\ud83c\udfaf Roundcube Webmail \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/numanturle/CVE-2025-49144\n\n\ud83e\udde0 Overview\nA vulnerability in Roundcube Webmail allows attackers to achieve remote code execution through crafted input handling in specific components of the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Webmail server compromise\n\u2022 Potential mail system takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-34028\n\ud83c\udfaf GLPI IT Asset Management \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/h4x0r-dz/CVE-2025-34028\n\n\ud83e\udde0 Overview\nA file upload vulnerability affecting GLPI IT management platform allows attackers to upload malicious files that can lead to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-30208\n\ud83c\udfaf Next.js Middleware Security Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/chebuya/CVE-2025-30208\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js middleware handling allows attackers to bypass certain security checks due to improper request validation.\n\n\u2699\ufe0f Impact\n\u2022 Security control bypass\n\u2022 Authentication logic manipulation\n\u2022 Potential access control issues\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-24054\n\ud83c\udfaf Windows NTLM Relay Attack\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/fortra/impacket\n\n\ud83e\udde0 Overview\nA vulnerability related to NTLM authentication relay attacks in Windows environments allows attackers to relay authentication attempts and gain unauthorized access to services.\n\n\u2699\ufe0f Impact\n\u2022 Credential relay attack\n\u2022 Unauthorized authentication\n\u2022 Lateral movement in networks\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories can be useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.772187Z"}