（CVE-2025-4525）Discord WINSTA.dll不受控搜索路径漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-4525
• https://vuldb.com/vuln/308270
• https://github.com/advisories/GHSA-936r-ccvf-h37h
• https://cve.imfht.com/detail/CVE-2025-4525
• https://cve.imfht.com/detail/CVE-2025-4525?lang=en
• https://feedly.com/cve/vendors/discord
• https://vulners.com/cve/CVE-2025-4525

Related Vulnerabilities

• Windows截图工具NTLM信息泄露漏洞(CVE-2026-33829)
• Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)
• Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)
• Windows 11 PolicyConfiguration 计划任务特权提升漏洞（CVE-2025-60710）
• Windows 11 RAiLaunchAdminProcess 管理员保护特权提升漏洞
• Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154)
• (CVE-2025-8088) WinRAR Windows版本路径遍历漏洞可导致任意代码执行
• PoCCVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution
• PoCCVE-2017-7269: Windows Server 2003 & IIS 6.0 - Remote Code Execution
• PoCCVE-2024-38472: Apache HTTPd Windows UNC - Server-Side Request Forgery
• PoCgeneric-windows-lfi: Generic Windows based LFI Test
• PoCautomatic-windows-updates-disabled: Automatic Windows Updates Disabled
• PoCsticky-keys-enabled-login: Sticky Keys Enabled at Login Screen